freeipa

#3533 ipa-kdb: fill principal of user administratively changing the password
Opened by mkosek. Modified

Open
Close Issue

We should fill the real principal of user that administratively changed a password of some other principal (for audit purposes). Now, we just enter a fixed principal root/admin@REALM.

# kadmin.local -q "getprinc admin@IDM.LAB.BOS.REDHAT.COM"
Authenticating as principal admin/admin@IDM.LAB.BOS.REDHAT.COM with password.
Principal: admin@IDM.LAB.BOS.REDHAT.COM
...
Last modified: Fri Mar 29 04:29:20 EDT 2013 (root/admin@IDM.LAB.BOS.REDHAT.COM)
...

Changing component, the patch would rather consist of ipa-pwd-extop plugin change.

Metadata Update from @mkosek:
- Issue assigned to someone
- Issue set to the milestone: Future Releases
Metadata
None
None
None
Normal
defect
DS plugins
0
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.