freeipa

#5413 [RFE] Allow users to authenticate with alternative names
Closed: Fixed Opened by dpal.

Closed: Fixed
Reopen Issue

Users sometimes prefer to use emails or other alises when they authenticate. In some environments it is a requirement to be able to authenticate with an email address.

We already have a ticket to allow aliases for hosts and services #1365. This ticket calls for the similar functionality but for users.

SSSD counterpart: https://fedorahosted.org/sssd/ticket/2856

The plumbing work described in #3864 should be in place first for proper aliases support.

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1328552

master:

  • de6abc7af2dac7994b0fff4396115320d1a9a54d ipapython module for Kerberos principal manipulation and parsing
  • e6fc8f84d3ad5fc4c030ad592a3d743c02393439 Test suite for ipapython/kerberos.py
  • 974eb7b5efd20ad2195b0ad578637ab31f4c1df4 ipalib: introduce Principal parameter
  • c2af032c0333f7e210c54369159d1d9f5e3fec74 Migrate management framework plugins to use Principal parameter
  • d1517482b5e9508780087ec48be63a5bb531fed9 Add ACI for admins to modify principal attributes
  • 7e803aa4625869ef6a8e78a09cd99270c4cc77e5 replace an ACI relying on presence of deprecated objectclass
  • 750a392fe22aa8ddcb21077e8c24b96d36ecf20c Allow for commands that use positional parameters to add/remove attributes
  • a28d312796839e3413c98ee37d34ccc892e85357 Make framework consider krbcanonicalname as service primary key
  • e6ff83e3610d553f6ff98e3adbfbe3c6984b2f17 Provide API for management of host, service, and user principal aliases
  • acf2234ebc8609a35a8f45598d5d817cbdbff121 Unify display of principal names/aliases across entities

Metadata Update from @dpal:
- Issue assigned to mbabinsk
- Issue set to the milestone: FreeIPA 4.4
Metadata
None
None
None
Low
enhancement
IPA
#3864
0
http://www.freeipa.org/page/V4/Kerberos_principal_aliases
wanted
http://www.freeipa.org/page/V4/Kerberos_principal_aliases/Test_Plan
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.