freeipa

#547 [RFE] Implement iCal based time managment in HBAC
Opened by dpal. Modified

Open
Close Issue

The HBAC should support specifying time when the rule is applicable. We plan to use iCal standard for that.

This ticket covers the CLI aspect of the problem.

Consider that we do similar thing in DS.

3.4 development was shifted by one month, moving tickets to reflect reality better.

Adjusting time plan - 3.4 development was postponed as we focused on 3.3.x testing and stabilization.

It looks like we have more pressing issues to focus on. Pushing back to the Pilsner pool.

Actively developed, considered for 4.4.

Replying to [ticket:547 dpal]:

The HBAC should support specifying time when the rule is applicable. We plan to use iCal standard for that.

This ticket covers the CLI aspect of the problem.

This ticket should now also cover the WebUI aspect of the problem.

Also, there exists a design page for this feature:
http://www.freeipa.org/page/V4/Time-Based_Account_Policies

This was a thesis topic: https://diplomky.redhat.com/topic/show/5/time-based-account-policies-in-freeipa

Metadata Update from @dpal:
- Issue assigned to stlaz
- Issue set to the milestone: FreeIPA 4.5 backlog

I'm attaching the patch from PR 23 to save @stlaz work before I'm closing the PR.

time_hbac.patch

Metadata Update from @cheimes:
- Issue close_status updated to: None
- Issue set to the milestone: None (was: FreeIPA 4.5 backlog)
Metadata
None
None
None
Normal
enhancement
IPA
thesis
0
http://www.freeipa.org/page/V4/Time-Based_Account_Policies
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.