10:21 a.m.
Hi,
We use the following environment: OS CentOS 7.3 / latest FreeIPA 4.4.0
Is it possible to get access with an active directory user to the FreeIPA vault ?
If yes do you got a hint for me how to do this or where i can find documentation?
with best regards
Björn
11:31 a.m.
Hi Bjoern,
AFAIK it should be possible to an AD user use FreeIPA vault, once you have
setup trust.
You can find documentation about AD and Vault here:
https://www.freeipa.org/page/Trusts
https://www.freeipa.org/page/V4/Password_Vault_1.2
https://www.freeipa.org/page/Active_Directory_trust_setup
On Thu, Aug 24, 2017 at 12:21 PM, Bjoern Klimpel via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
Hi,
We use the following environment: OS CentOS 7.3 / latest FreeIPA 4.4.0
Is it possible to get access with an active directory user to the FreeIPA
vault ?
If yes do you got a hint for me how to do this or where i can find
documentation?
with best regards
Björn
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
1:03 p.m.
On to, 24 elo 2017, Felipe Barreto Volpone via FreeIPA-users wrote:
Hi Bjoern,
AFAIK it should be possible to an AD user use FreeIPA vault, once you have
setup trust.
No, it is not. To get access to a vault you need to have access rights
in LDAP for that. We do not have that yet for AD users even in FreeIPA
4.5. The only available feature for AD users to manage is their own ID
override via CLI (FreeIPA 4.4 or later) and via Web UI (FreeIPA 4.5 or
later) thanks to self-service access controls.
You can find documentation about AD and Vault here:
https://www.freeipa.org/page/Trusts
https://www.freeipa.org/page/V4/Password_Vault_1.2
https://www.freeipa.org/page/Active_Directory_trust_setup
On Thu, Aug 24, 2017 at 12:21 PM, Bjoern Klimpel via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
> Hi,
> We use the following environment: OS CentOS 7.3 / latest FreeIPA 4.4.0
>
> Is it possible to get access with an active directory user to the FreeIPA
> vault ?
> If yes do you got a hint for me how to do this or where i can find
> documentation?
>
> with best regards
> Björn
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
--
/ Alexander Bokovoy
3:47 a.m.
Hi,
thanks for your support and help. I will get a deep look in the documentation to proof our
alternatives.
Do you know if this feature will be planned for future versions?
with best regards
Björn
3:57 a.m.
On pe, 25 elo 2017, Bjoern Klimpel via FreeIPA-users wrote:
Hi,
thanks for your support and help. I will get a deep look in the documentation to proof our
alternatives.
Do you know if this feature will be planned for future versions?
We plan to allow
more of such operations in future, yes. It depends on
some work to be done at 389-ds side. It is early to say when that would
happen though.
--
/ Alexander Bokovoy
2428
days inactive
2429
days old
freeipa-users@lists.fedorahosted.org
4 comments
3 participants
participants (3)
-
Alexander Bokovoy -
Bjoern Klimpel -
Felipe Barreto Volpone