Re: [Freeipa-devel] Krb service delegation rules in CLI

2014-09-23 Thread Martin Kosek
On 09/22/2014 09:48 PM, Alexander Bokovoy wrote: On Mon, 22 Sep 2014, Martin Basti wrote: Hello, Related ticket: https://fedorahosted.org/freeipa/ticket/3644 1) API The ipaKrb5DelegationACL objectclass requires targets which are stored in extra objectclass. A) we allow users to create

Re: [Freeipa-devel] Krb service delegation rules in CLI

2014-09-23 Thread Alexander Bokovoy
On Tue, 23 Sep 2014, Martin Kosek wrote: On 09/22/2014 09:48 PM, Alexander Bokovoy wrote: On Mon, 22 Sep 2014, Martin Basti wrote: Hello, Related ticket: https://fedorahosted.org/freeipa/ticket/3644 1) API The ipaKrb5DelegationACL objectclass requires targets which are stored in extra

Re: [Freeipa-devel] Krb service delegation rules in CLI

2014-09-23 Thread Simo Sorce
On Tue, 23 Sep 2014 17:18:38 +0200 Martin Kosek mko...@redhat.com wrote: On 09/22/2014 09:48 PM, Alexander Bokovoy wrote: On Mon, 22 Sep 2014, Martin Basti wrote: Hello, Related ticket: https://fedorahosted.org/freeipa/ticket/3644 1) API The ipaKrb5DelegationACL objectclass

[Freeipa-devel] Krb service delegation rules in CLI

2014-09-22 Thread Martin Basti
Hello, Related ticket: https://fedorahosted.org/freeipa/ticket/3644 1) API The ipaKrb5DelegationACL objectclass requires targets which are stored in extra objectclass. A) we allow users to create groups of principals and then associate them as targets -- user can use same group for

Re: [Freeipa-devel] Krb service delegation rules in CLI

2014-09-22 Thread Alexander Bokovoy
On Mon, 22 Sep 2014, Martin Basti wrote: Hello, Related ticket: https://fedorahosted.org/freeipa/ticket/3644 1) API The ipaKrb5DelegationACL objectclass requires targets which are stored in extra objectclass. A) we allow users to create groups of principals and then associate them as

Re: [Freeipa-devel] Krb service delegation rules in CLI

2014-09-22 Thread Simo Sorce
On Mon, 22 Sep 2014 17:45:55 +0200 Martin Basti mba...@redhat.com wrote: Hello, Related ticket: https://fedorahosted.org/freeipa/ticket/3644 1) API The ipaKrb5DelegationACL objectclass requires targets which are stored in extra objectclass. A) we allow users to create groups of