diff options
| author | Michael DeHaan <mdehaan@redhat.com> | 2009-02-18 18:01:54 -0500 |
|---|---|---|
| committer | Michael DeHaan <mdehaan@redhat.com> | 2009-02-18 18:02:25 -0500 |
| commit | e86440982dfa7d85802a6be239d3341dced6b10a (patch) | |
| tree | ff903b2462a8e991b1b32106e957b2ed6605f038 /installer_templates | |
| parent | e1dcf5570c8dd0e35b74a6ff1c7e2a4a5e957a4d (diff) | |
| download | cobbler-e86440982dfa7d85802a6be239d3341dced6b10a.tar.gz cobbler-e86440982dfa7d85802a6be239d3341dced6b10a.tar.xz cobbler-e86440982dfa7d85802a6be239d3341dced6b10a.zip | |
Limit access to CobblerWeb in a spacewalk install based on roles; by default, access is off.
Diffstat (limited to 'installer_templates')
| -rw-r--r-- | installer_templates/settings.template | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/installer_templates/settings.template b/installer_templates/settings.template index 47d1fc2f..9d8c5c0c 100644 --- a/installer_templates/settings.template +++ b/installer_templates/settings.template @@ -265,6 +265,22 @@ redhat_management_server: "$redhat_management_server" # keep it from trying to register. redhat_management_key: "" +# if using authn_spacewalk in modules.conf to let cobbler authenticate +# against Satellite/Spacewalk's auth system, by default it will not allow per user +# access into Cobbler Web and Cobbler XMLRPC. +# +# in order to permit this, the following setting must be enabled HOWEVER +# doing so will permit all Spacewalk/Satellite users of certain types to edit all +# of cobbler's configuration. +# +# these roles are: config_admin and org_admin +# +# users should turn this on only if they want this behavior and +# do not have a cross-multi-org seperation concern. If you have +# a single org in your satellite, it's probably safe to turn this +# on and then you can use CobblerWeb alongside a Satellite install. +redhat_management_permissive: 0 + # when DHCP and DNS management are enabled, cobbler sync can automatically # restart those services to apply changes. The exception for this is # if using ISC for DHCP, then omapi eliminates the need for a restart. |