[Freeipa-users] Setting sssd for webui

[Sebastien Julliot]

Hello everyone,

As I explained you some time ago, I have been skirting the ipa's
limitation to setting pre-hashed passwords by using ldappasswd. (I know
you guys think it's wrong. In this case the hashes come from an other
ldap which, for intern reasons, we can not synchronize with otherwise
than by frequent ldif extractions. So it's the only solution to have
unified passwords)

To have the kerberos key generated, I can ask the users to do an
ldapsearch or to ssh on a machine with sssd enabled.
Yet, as most users will mainly want to use the WebUi, I am looking for a
way to have them able to connect to it without needing to do an
ldapsearch first.

To be precise, I set the userPassword field using ldappasswd, and delete
the krbprincipalkey.

Do you see any way to make the webui directly authenticable ?

Thanks,
Sebastien Julliot.



signature.asc
Description: OpenPGP digital signature
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Setting "preserve" as default action when deleting in webUI

[Sebastien Julliot]

Hello guys,


Thank you for your answers. First, I was able to modify the minified js
to change the default. Ugly solution, but it works for now.

I am trying to write a plugin but it seems that I missed something here
since, despite being executed, the default is not changed ..

Here is my code, freely inspired of what I think I understood of your
'association_search_fix.js' example:

define([

'freeipa/ipa',

'freeipa/user',

],

function(IPA, user) {

exp = {};

 

exp.orig_create_active_user_del_dialog = IPA.user.create_active_user_del_dialog;

IPA.user.create_active_user_del_dialog = function(dialog) {

dialog.deleter_dialog_create_content();

dialog.option_layout = IPA.fluid_layout({

label_cls: 'col-sm-3',

widget_cls: 'col-sm-9'

});

dialog.option_radio = IPA.radio_widget({

name: 'preserve',

label: '@i18n:objects.user.delete_mode',

options: [

{ label: '@i18n:objects.user.mode_delete', value: 'false' },

{ label: '@i18n:objects.user.mode_preserve', value: 'true' }

],

default_value: 'true'

});

var html = dialog.option_layout.create([dialog.option_radio]);

dialog.container.append(html);

dialog.option_radio.set_value(['']);

return dialog;

};

//exp.orig_create_active_user_del_dialog = 
IPA.user.create_active_user_del_dialog;

console.log('PRESERVE.JS WAS EXECUTED');

return exp;

});

I checked that disabling the comment or not does not change anything.


Can you see what I missed here ?


Thanks a lot,

Sebastien Julliot.



-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] FreeIPA client installation on ubuntu, 14.04

[Sebastien Julliot]

Hello Deepak,

If you know in advance what infos you want to enter input, you can try
putting them in a file "inputs" and execute
apt-get install freeipa-client -y < inputs
 

> I am trying to install freeipa client on my ubuntu client via ansible
> script. I have "apt-get update" and "apt-get install freeipa-client -y"
> these basic commands added in my playbook but the problem is when i run
> "apt-get install freeipa-client" with or without -y option it opens up
> some graphical interface confirming the IPA realm and other details. I
> did not find any option with in "apt-get install freeipa-client"to make
> it deployment unattended. Can anyone please tell me the how i can
> automate ipa-client installation on ubuntu?



-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project