On 07/27/2011 01:42 AM, Scott Seago wrote:
The main external prerequisites are as follows:
For IWHD permissions, IWHD must have in place a permissions system
and API that is, at least at a conceptual level, consistent with
our underlying permisions model.
For user group permissions, we need to have identified our plan for
external auth and how we're interacting with the underlying user
groups functionality.
As for external auth for now you should consider one LDAP identity
source (DS, AD, IPA etc.)
However in future (in 6 months or so) there will be an interface that
will abstract multiple identity sources. This is especially important
when you have multiple sources of identities for example internal served
from an LDAP server or IPA and external served from company's AD. This
interface will provide authentication capabilities and user and group
lookup.
Once we're considering dealing with permissions on objects
stored
in katello, we'll need to deal with the same questions as above for
IWHD.
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/