On Wed, Nov 05, 2014 at 09:41:59AM -0500, Rob Crittenden wrote: > >> Also when I look at the permissions in ipa there are no longer any > >> permissions that have the 'System: ' prefix. > > > > AFAIK the foreman proxy is not necessary (and not supported) with IPA > > 4.x because it was obsoleted by 'native' proxy delivered by Foreman > > upstream. > > > > Am I right, Rob (Crittenden)? :-) > > I believe he's referring to the native smart proxy here. It includes a > script to setup permissions. I guess it hasn't been tested against a 4.x > IPA master.
The permissions have changed names in FreeIPA 4.0, which means the script won't work. I've tested this one against 4.1 on F21 and it works: https://raw.githubusercontent.com/stbenjam/smart-proxy/8278/sbin/foreman-prepare-realm There's an open pull request against foreman's Smart Proxy to include that in the next release: https://github.com/theforeman/smart-proxy/pull/231 -- Stephen Benjamin ______________________________________________________ Red Hat GmbH | http://de.redhat.com/ | Sitz: Grasbrunn Handelsregister: Amtsgericht München, HRB 153243 Geschäftsführer: Charles Cachera, Michael Cunningham, Michael O'Neill, Charles Peters
pgp08TogqRxJR.pgp
Description: PGP signature
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
