[Freeipa-devel] [PATCH] UI for service principal creation and keytab retrieval

Rob Crittenden rcritten at redhat.com
Thu Dec 6 14:18:03 UTC 2007


Karl MacMillan wrote:
> On Wed, 2007-12-05 at 14:56 -0500, Rob Crittenden wrote:
>> Added UI for service principal creation and keytab retrieval.
>>
>> The biggest core change is a new function to retrieve a list of service 
>> principals. I added a check in there to not return any kadmin 
>> principals. Don't want anyone fetching the admin credentials, even if 
>> you have to be admin to do so.
>>
>> The user will see a list of links of the available keytabs. Clicking on 
>> a link will fire up a download of the keytab that they can save on their 
>> desktop. It should be linkable too though I didn't test that.
>>
>> I have a hardcoded list of service principal types plus an "other" 
>> option because I can't include every possible option.
>>
> 
> Looks very nice - glad you worked that up. Only comment is that since
> getting a keytab resets the secret it probably needs a warning. I would
> hate, for example, for someone to get a keytab for http on the ipa
> server only to have the web ui break.
> 
> Pushed.

Ok, that explains why my FDS instance kept breaking. I thought that was 
it but I wasn't sure.

I'll add a javascript confirmation dialog.

thanks

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20071206/a942a650/attachment.bin>


More information about the Freeipa-devel mailing list