[Freeipa-users] Re: How to prevent non-admin users of FreeIPA from reading the list of users in the web interface?
On 04/04/2024 13.24, Riccardo Rotondo via FreeIPA-users wrote:
Hi Alexander,
Thank you Alexander, this solution probably fits our needs.
My only problem now is the I configured freeipa with docker, and in that image developer
didn't include the Fedora Account System plugin for IPA so in the log I found:
ERROR in middleware: Uncaught IPA exception: Unknown option: fasgroup
I'll check with them if I can add this plug in post installation.
You can add the plugin to an existing installation. For a normal
installation of FreeIPA, `dnf install freeipa-fas` just works. The
package runs ipa-server-upgrade and restarts ipa.service in the
posttrans scriplet.
It appears that does not work for containers. You need to figure out how
to run ipa-server-upgrade while the container is running.
--
Christian Heimes
Principal Software Engineer, Identity Management and Platform Security
Red Hat GmbH, https://de.redhat.com/ , Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Brian Klemm, Laurie Krebs, Michael
O'Neill