Bug 1492993
| Summary: | [RFE] Central report that will show who can access which systems (attestation) | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Martin Kosek <mkosek> |
| Component: | ipa | Assignee: | Thomas Woerner <twoerner> |
| Status: | CLOSED WONTFIX | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | --- | CC: | abroy, afarley, cobrown, ldelouw, pasik, patdung100+redhat, pcech, pvoborni, rcritten, tscherf |
| Target Milestone: | rc | Keywords: | FutureFeature, Reopened |
| Target Release: | --- | Flags: | pm-rhel:
mirror+
|
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-08-06 12:26:01 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Martin Kosek
2017-09-19 06:28:10 UTC
Note that the topic of IdM attestation report was split to 3 RFEs: * Bug 1272214: client-based report (included SSSD) * Bug 1491802 - [RFE] Central report who can ran which sudo commands on which systems (attestation) (included in IdM Server) * Bug 1492993 - [RFE] Create a central report that will show who can access which systems (attestation) (included in IdM Server) Upstream ticket: https://pagure.io/freeipa/issue/7199 It is not clear what is required.
Should the report be arranged:
- by host ("for host X, here are the users that can log in"), or
- by user ("for user A, here are the hosts they can access")
I guess that by host is more likely, i.e. it will be like
bz1272214 but for all hosts in a single report.
Is it sufficient to mention user groups and/or host groups in the report,
or can it only mention individual users and hosts?
What is the desired format of the report?
*** Bug 1728903 has been marked as a duplicate of this bug. *** Moving this to RHEL 8, to go with the other attestation work. THis should be done with the other attestation work. I put in a wrong update, this should be in RHEL 8 and open. Hello, || What is the desired format of the report? - It could be in any format not any issue. A simple output in the terminal is also enough I guess. Research showed that: * A server side report is already possible to generate by scripting around LDAP, API, CLI or Ansible interfaces that IdM provides * The server side report is not that interesting in most cases and a client side report might be more valuable (which is outside of scope of IdM) * The reporting should be integrated with other ticketing systems and workflows which makes it harder to identify the right functionality that the report should include If you are interested in such an integrated report, please contact Red Hat consulting. Red Hat Engineering sees this as a highly custom feature on top of the existing and already available interfaces. Upstream contributions of the reporting utility or integration with the existing reporting tools are welcome. |