freeipa

#7486 Allow hosts to delete their own services
Closed: fixed Opened by rcritten.

Closed: fixed
Reopen Issue

Request for enhancement

As a host i can add and modify services but I can't remove my own services

A service may be decommissioned on the host and needs to be removed.

Issue

Ticket #4567 gave hosts the ability to add and modify its own services. Removing its services was overlooked. See commit ce50630d5ece036e35d8e11db8383e4e7e9159ae

Steps to Reproduce

  1. # kinit -kt /etc/krb5.keytab
  2. # ipa service-add test/ipa.example.com
  3. # ipa service-del test/ipa.example.com
    ipa: ERROR: Insufficient access: Insufficient 'delete' privilege to delete the entry 'krbprincipalname=test/ipa.example.com@EXAMPLE.COM,cn=services,cn=accounts,dc=example,dc=com'.

Metadata Update from @stlaz:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1568748

Issue linked to Bugzilla: Bug 1568748

Metadata Update from @abbra:
- Issue assigned to abbra

PR: https://github.com/freeipa/freeipa/pull/1829

master:

  • 2de1aa27f981060acd6a867c89ef963a18cc27df ACL: Allow hosts to remove services they manage

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

ipa-4-6:

  • 93f0a2323feb8ae913cf275462365f1093f9c4fe ACL: Allow hosts to remove services they manage

master:

  • 9ead70844e656b0b49433154e748769894cfb2ba Test that host can remove there own services
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.