mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
edit things. We use the 'editors' group for this. This group itself grants no permission other than displaying certain things in the UI. In order to be in the editors group a user must be a member of a group that is the source group in a delegation. The memberof plugin will do all the hard work to be sure that a user's memberof contains cn=editors if they are in a delegated group. 432874
These tools are designed for administrators to work from a command-line, use in scripts, etc. The design goal is to provide 100% of capabilities that the UI has, something which is often not true. Developers ---------- These scripts use an XML-RPC interface to communicate with the IPA server. Please use only this API and avoid the temptation to communicate directly with the LDAP server. It is our philosophy to have a robust, standard interface for doing all IPA administrative work.