Beyond what Den pointed out, I would like to see either native (or
good instructions) support for authenticating with X.509 PKI
certificates.

You would need to be able to specify:

- The trusted CA chains
- The CRL/OCSP/SCVP connections
- What attribute/regex contains the username of the user
- An internal username mapping back to the role of the user (which
should be built in)

This should be authoritative and passwords should be optional.

Less important, but still nice, would be configuration instructions
for Kerberos with GSSAPI.

Also, if pulling from LDAP, I would like to avoid custom schemas if at
all possible. It can be *really* hard to get Enterprise-type folks to
add schemas to their servers.

Thanks!

Trevor

On Wed, Mar 2, 2011 at 2:02 PM, Randall Hansen <rand...@puppetlabs.com> wrote:
> Good people ~
>
> Role-based access will be one of the next big features in Dashboard.  If this 
> is something that would help you, will you tell me the minimum features that 
> you would consider useful?  That is, the features without which RBAC would be 
> useless to you.
>
> I'm sure there'll be disagreement; right now I'm just gathering requirements. 
>  Once we have feedback from multiple channels we'll work on prioritizing and 
> creating a roadmap.
>
> Thanks!
>
> r
>
> --
> Randall Hansen; Director of User Experience; rand...@puppetlabs.com
>
> --
> You received this message because you are subscribed to the Google Groups 
> "Puppet Users" group.
> To post to this group, send email to puppet-users@googlegroups.com.
> To unsubscribe from this group, send email to 
> puppet-users+unsubscr...@googlegroups.com.
> For more options, visit this group at 
> http://groups.google.com/group/puppet-users?hl=en.
>
>



-- 
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699
tvaug...@onyxpoint.com

-- This account not approved for unencrypted proprietary information --

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to