[katello-devel] Admin user?

Bryan Kearney bkearney at redhat.com
Thu May 19 12:00:41 UTC 2011


On 05/19/2011 07:27 AM, Todd B Sanders wrote:
> On 05/18/2011 05:01 PM, Lukas Zapletal wrote:
>> On 05/18/2011 11:02 PM, Bryan Kearney wrote:
>>>>
>>> yes, but if they can use DB tools to fix it.. it may be ok.
>>>
>>> I am also concerned about the setup. What if the users selects LDAP.. we
>>> may not have a user with the correct permissions to log in. Perhaps LDAP
>>> is used except for what is in the local table?
>>
>> My understanding of LDAP "mode" is that local users always override.
>> Means that during all auth/auth stuff local tables are consulted first
>> and if not found then LDAP search is done.
>>
> +1 This is my understanding as well.
>
> -Todd
>

Ok.. if we do that then the user can always us DB tools to reset things. 
I am fine with that.

-- bk




More information about the katello-devel mailing list