diff options
| author | Martin Babinsky <mbabinsk@redhat.com> | 2016-06-23 20:06:42 +0200 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2016-07-01 09:37:25 +0200 |
| commit | e6ff83e3610d553f6ff98e3adbfbe3c6984b2f17 (patch) | |
| tree | 4ee2d2755dc707a8e722a5e42978b5cbc25b8f46 /ipaserver/plugins/serverrole.py | |
| parent | a28d312796839e3413c98ee37d34ccc892e85357 (diff) | |
| download | freeipa-e6ff83e3610d553f6ff98e3adbfbe3c6984b2f17.tar.gz freeipa-e6ff83e3610d553f6ff98e3adbfbe3c6984b2f17.tar.xz freeipa-e6ff83e3610d553f6ff98e3adbfbe3c6984b2f17.zip | |
Provide API for management of host, service, and user principal aliases
New commands (*-{add,remove}-principal [PKEY] [PRINCIPAL ...])
were added to manage principal aliases.
'add' commands will check the following:
* the correct principal type is supplied as an alias
* the principals have correct realm and the realm/alternative suffix (e.g.
e-mail) do not overlap with those of trusted AD domains
If the entry does not have canonical principal name, the first returned
principal name will be set as one. This is mostly to smoothly operate on
entries created on older servers.
'remove' commands will check that there is at least one principal alias equal
to the canonical name left on the entry.
See also: http://www.freeipa.org/page/V4/Kerberos_principal_aliases
https://fedorahosted.org/freeipa/ticket/1365
https://fedorahosted.org/freeipa/ticket/3961
https://fedorahosted.org/freeipa/ticket/5413
Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'ipaserver/plugins/serverrole.py')
0 files changed, 0 insertions, 0 deletions