Hi FreeIPA dudes,
What is the status of audit in IPA? Specifically, is there an easy way to determine what
was the group membership of a particular group was at a particular point in time, say last
October? I noticed there is an audit log file (disabled by default), but that is going
to be a not-so-easy way to try to re-construct group membership at a point in time in the
past. I was hoping to just navigate to a "history" tab on the GUI, but no such
luck. Is this on anyone's todo list? I also noticed a "Centralized
Logging" webpage that suggest setting up an ELK stack, but that doesn't quite
provide snapshots of group membership.
What about the ability to subscribe to changes (as opposed to poll them)? I suppose the
replication features could be used somehow, but those are also polling based? Would be
nice to configure simple callbacks (perhaps HTTP post) when things change. I believe this
is called a webhook. Any support for this kind of notification system?
Thanks,
Ryan