On 20/09/2023 16.01, Chris Cowan via FreeIPA-users wrote:
Christian,
Rereading this, I'm wondering if besides the "admin" user and "admins" group if
there are any other special users or groups with FreeIPA? From my reading so far, I think the
answer is no, but want to be sure.
The "ipaservers" host group is also special and has additional checks in
place. An IPA client in this host group is privileged to promote itself
to an IPA server without additional admin privileges.
Christian
--
Christian Heimes
Principal Software Engineer, Identity Management and Platform Security
Red Hat GmbH, https://de.redhat.com/ , Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Brian Klemm, Laurie Krebs, Michael
O'Neill
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
