James James wrote: > My IPA version is 3.0.0 . > Thanks The permission 'Manage host keytab' should do the trick.
rob > > 2014-09-09 1:22 GMT+02:00 Dmitri Pal <d...@redhat.com > <mailto:d...@redhat.com>>: > > On 09/08/2014 06:52 PM, James James wrote: >> Hi everybody, >> >> I want a user to be able to do ipa-getkeytab to retrieve the keys >> from any host in the realm. >> >> How can I do this ? >> >> Where I can find an ACI example >> (https://www.redhat.com/archives/freeipa-users/2010-July/msg00024.html) >> which can helps me ? >> >> >> Thanks for your help. >> >> >> >> > Which version of IPA? > There reason for the question is because in FreeIPA 4.0 the ACIs > were significantly reworked. > > -- > Thank you, > Dmitri Pal > > Sr. Engineering Manager IdM portfolio > Red Hat, Inc. > > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go To http://freeipa.org for more info on the project > > > > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
