[Freeipa-users] User Level Ticket Policies from Web UI?

[Dmitri Pal]

On 02/26/2012 02:17 PM, Marco Pizzoli wrote:
>
>
> On Sun, Feb 26, 2012 at 7:35 PM, Dmitri Pal <dpal at redhat.com
> <mailto:dpal at redhat.com>> wrote:
>
>     On 02/25/2012 07:48 AM, Marco Pizzoli wrote:
>>     Hi guys,
>>     I see that there is not a web ui interface for setting user level
>>     ticket policies?
>>     Is there a particular reason for this? Just a curiousity.
>     We do not think there is a lot of value in one off password
>     policies. The password policies can be set per group. What is the
>     real world use case to set them per user? Even if you have a
>     special user that needs a special password policy it is usually
>     not just one user but rather a group of those.
>
>     Can you come up with an example where such logic has a flaw?
>
>
> Hi Dmitri,
> My question was not related to the feature per se, but about the fact
> that there is not a web ui to do it while it's there using the CLI. So
> I'm curious to know what was the reason for the different dealing.

AFAIR the only where we allow the changes to the ticket policy is in the
global config both in UI and CLI. Per user  you can use setattr/addattr
and change it but we do not expose everythign one can do via
setattr/addattr in the UI. 

>
> Coming to your answer, (correct me if I am wrong!) on the RHEL6-doc I
> don't see any note pertaining to group based password policies.

Section 11.2.2//

> So now, I ask you if this is a FreeIPA 2.2 feature I have not seen so far.
>
> Thanks again
> Marco
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120226/ff2e18f8/attachment.htm>