On ti, 10 joulu 2019, Master Blaster via FreeIPA-users wrote:
Thanks for the response, François.
I'm somewhat surprised there isn't a way to determine both host and
user activity already.
For hosts, doesn't the Kerberos ticket have to be renewed on a regular
basis? Couldn't that timestamp be
Thanks for the response, François.
I'm somewhat surprised there isn't a way to determine both host and user
activity already.
For hosts, doesn't the Kerberos ticket have to be renewed on a regular basis?
Couldn't that timestamp be used?
___
There is currently no way to know, but the Disable Stale Users
proposal could be extended to any principal including the host ones.
https://github.com/freeipa/freeipa/blob/master/doc/designs/disable-stale-users.md
The timestamp precision would be coarse but that would clearly match
the use-case.
Nothing? No ideas?
How do large organizations with 1000s of hosts handle this?
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
