On 12.9.2014 15:47, Petr Viktorin wrote:
On 09/12/2014 03:36 PM, Tamas Papp wrote:

On 09/12/2014 02:47 PM, Martin Kosek wrote:
On 09/11/2014 02:06 AM, Dmitri Pal wrote:
On 09/10/2014 07:10 PM, Tamas Papp wrote:
hi All,

Is there an offficial API documentation available?

Unfortunately not much. You can search archives and find some
recommendations
that helped people in the past.
https://www.redhat.com/archives/freeipa-users/2013-January/msg00109.html

We also have a ticket
https://fedorahosted.org/freeipa/ticket/3129

We also have a ticket
https://fedorahosted.org/freeipa/ticket/4233
targeted on FreeIPA 4.1 to see the actual JSON queries that "ipa"
command sends. It would make it easier to see how we use the API.

Actually what is the recommended way to use ipa as a simple ldap backend
for a service without kerberos?
In fact the service does not need kerberos and things like that, but I
like the helper tools of ipa, like ipa command, web UI, easy replication
etc.

IPA is an integrated solution. Kerberos is built in and the other parts assume
it's there. There's no recommended way without Kerberos.

Just for the case: If you want to use FreeIPA with a service which is able to use pure LDAP BIND as authentication method then sure - it will work.

FreeIPA is still standard compliant LDAP server.

Can I make trouble by writing the directory directly though ldap
(add/delete/modify users + groups).

Yes, this will cause trouble.
The IPA commands do additional processing, e.g. creating user private groups.

--
Petr^2 Spacek

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project

Reply via email to