Hello Stuart,
Thank you making me aware of FreeIPA integration in Spacewalk. I just read the Spacewalk and IPA integration WiKi which describes how to configure Spacewalk to authenticate with a IPA managed account on the Spacewalk server. I did this with the Beyond Trust tool and AD. But yes, at the end Spacewalk with the help of some scripting might be able to connect the host automatically to the IPA KDC and user could logon with the IPA managed account. Personal I do not have any experience with IPA. regards Michael Von: [email protected] [mailto:[email protected]] Im Auftrag von Stuart Green Gesendet: Mittwoch, 7. Mai 2014 17:03 An: [email protected] Betreff: Re: [Spacewalk-list] Managing configuration files But doesn't 2.1 now include FreeIPA integration, which leverage's Kerberos? Stu Hello Muhammed, My humble opinion is that it is not secure to use Spacewalk for user provisioning. I would recommend to use Kerberos authentication. Tools like Beyond Trust Power Broker Identity Service (former likewise) will do the job with Active directory integration, so you could manage all your *NIX accounts in a modern directory. There is an open solution available also. Hope that helps. regards Michael Von: [email protected] [mailto:[email protected]] Im Auftrag von kamran ayub Gesendet: Mittwoch, 7. Mai 2014 16:45 An: [email protected] Betreff: [Spacewalk-list] Managing configuration files Dear Members, Hope you are doing well. I am new to this group and to spacewalk usage as well. I have installed spacewalk on my centos system. Basically I want to manage my user provision , user addition, user deletion, file changes, to my other systems via this spacewalk server. Can anybody guide me is it possible to do these configuration changes from spacewalk server to my client systems or not? And if yes please guide me the procedure to do this. Thanks Regards, Muhammad Kamran Ayub This electronic transmission (and any attachments thereto) is intended solely for the use of the addressee(s). It may contain confidential or legally privileged information. If you are not the intended recipient of this message, you must delete it immediately and notify the sender. Any unauthorized use or disclosure of this message is strictly prohibited. Faurecia does not guarantee the integrity of this transmission and shall therefore never be liable if the message is altered or falsified nor for any virus, interception or damage to your system. _______________________________________________ Spacewalk-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/spacewalk-list This electronic transmission (and any attachments thereto) is intended solely for the use of the addressee(s). It may contain confidential or legally privileged information. If you are not the intended recipient of this message, you must delete it immediately and notify the sender. Any unauthorized use or disclosure of this message is strictly prohibited. Faurecia does not guarantee the integrity of this transmission and shall therefore never be liable if the message is altered or falsified nor for any virus, interception or damage to your system.
_______________________________________________ Spacewalk-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/spacewalk-list
