yes you are right, we can cnfigure an object schema "SolarisUserAttr" in LDAP
then we can add it as default parameter of user and configure it to set RBAC 
(role access)
if you want I can share the commands with you.
but I want to know how can we changeĀ  WEBUI to configure solarisuserattr 
through web interface.
anyway I had done it through command line.

 From: Rob Crittenden <>
To: mohammad sereshki <>; "" 
Sent: Monday, July 28, 2014 6:45 PM
Subject: Re: [Freeipa-users] add solaris attribiutes to IPA

mohammad sereshki wrote:

> hi
> Would you please let me know who can i add
> /etc/user_attr,prof_attr,projet,auth_attr to IPA ?
> Iwant to configure RBAC solaris on IPA .
> Thanks

There is probably a way to do this in LDAP but it isn't something that
IPA provides.

When IPA started there was no common access control mechanism across
*nixes. We looked at the available options and ended up rolling our own
which we called HBAC.

Manage your subscription for the Freeipa-users mailing list:
Go To for more info on the project

Reply via email to