Bug 2165880
| Summary: | Add RBCD support to IPA | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | mpanaous | |
| Component: | ipa | Assignee: | Florence Blanc-Renaud <frenaud> | |
| Status: | CLOSED ERRATA | QA Contact: | Michal Polovka <mpolovka> | |
| Severity: | medium | Docs Contact: | Filip Hanzelka <fhanzelk> | |
| Priority: | unspecified | |||
| Version: | 9.2 | CC: | abobrov, abokovoy, amore, bthekkep, dvozenil, fcami, frenaud, ftrivino, gfialova, jrische, pasik, rcritten, sumenon, tscherf | |
| Target Milestone: | rc | Keywords: | Triaged | |
| Target Release: | --- | Flags: | pm-rhel:
mirror+
|
|
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | ipa-4.10.2-1.el9 | Doc Type: | Enhancement | |
| Doc Text: |
.IdM now supports resource-based constrained delegation
With this update, IdM now supports resource-based constrained delegation (RBCD). RBCD allows a granular control of delegation on a resource level and access can be set by the owner of the service to which credentials are delegated.
RBCD can be useful, for example, in an integration between IdM and Active Directory (AD), because AD enforces the use of RBCD when both target and proxy services belong to different forests.
IMPORTANT: Currently, only services in the IdM domain can be configured with RBCD rules. If the target service is part of an AD domain, the permission can only be granted on the AD side. As AD domain controllers cannot resolve IdM service information to create the rule, this is not currently supported.
For more information on delegation scenarios, see the link:https://freeipa.readthedocs.io/en/latest/designs/rbcd.html[FreeIPA design page].
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 2212836 (view as bug list) | Environment: | ||
| Last Closed: | 2023-11-07 08:34:04 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 2212836 | |||