Re: [Freeipa-users] Restrict WebUI access

2016-04-14 Thread dev
Hi, By default, a simple user which authenticate on WebUI has access to his profile info page and can list all users and access to their infos (read only). I want to limit a simple user to his profile info page only (where he can change its own password) and disable access to users list and

Re: [Freeipa-users] Restrict WebUI access

2016-04-14 Thread dev
Hi, Yes, I want to restrict simple authenticated users on the WebUI from seeying the list of all users. Is it configurable with the role based access control? Best regards. On 2016-04-13 13:04, Petr Vobornik wrote: On 04/13/2016 11:30 AM, d...@mdfive.dz wrote: Hi, I want to restrict

Re: [Freeipa-users] ipalib documentation

2016-04-14 Thread Martin Basti
On 13.04.2016 17:44, Bello Florent wrote: Hi, I try to create a dhcp server using freeipa ldap backend. I found this guide https://github.com/encukou/freeipa/blob/master/doc/guide/guide.org, and i added schema http://www.freeipa.org/page/DHCP_Integration_Design. But when i create a

[Freeipa-users] Getting client status

2016-04-14 Thread Stephen Berg (Contractor)
I'm looking for a command line method to get current status on a client without having a ticket or authenticating to the IPA domain. Back in the NIS days from a client you could run "ypwhich" and be able to know if that system were bound to the NIS and which server it had bound to. So far I

Re: [Freeipa-users] Getting client status

2016-04-14 Thread Martin Basti
On 14.04.2016 14:28, Stephen Berg (Contractor) wrote: I'm looking for a command line method to get current status on a client without having a ticket or authenticating to the IPA domain. Back in the NIS days from a client you could run "ypwhich" and be able to know if that system were bound

Re: [Freeipa-users] Restrict WebUI access

2016-04-14 Thread Petr Vobornik
On 04/14/2016 01:57 PM, d...@mdfive.dz wrote: > Hi, > > By default, a simple user which authenticate on WebUI has access to his > profile info page and can list all users and access to their infos (read > only). > > I want to limit a simple user to his profile info page only (where he > can