Loading...

XML

Word

Printable

Preliminary Testing:
Pass
Test Link:
https://polarion.engineering.redhat.com/polarion/#/project/RHEL_IDM/workitem?id=IDM-301405
Errata Link:
https://errata.engineering.redhat.com/advisory/125076
Test Coverage:

Automated

Release Note Type:
Enhancement
Release Note Text:

Hide
.The `runasuser_group` parameter is now available in `ansible-freeipa` `ipasudorule`

With this update, you can set Groups of RunAs Users for a `sudo` rule by using the `ansible-freeipa ipasudorule` module. The option is already available in the Identity{nbsp}Management (IdM) command-line interface and the IdM Web UI.

Show
.The `runasuser_group` parameter is now available in `ansible-freeipa` `ipasudorule` With this update, you can set Groups of RunAs Users for a `sudo` rule by using the `ansible-freeipa ipasudorule` module. The option is already available in the Identity{nbsp}Management (IdM) command-line interface and the IdM Web UI.
Release Note Status:
Done

IPA/IdM WebUI shows the following for sudo rule:

As Whom
RunAs User category the rule applies to
RunAs Users
Groups of RunAs Users

RunAs Group category the rule applies to
RunAs Groups

It looks like currently one can set RunAs Users and RunAs Groups but not Groups of RunAs Users with ipasudorule.py.

I have no use case for this currently but filing for completeness sake so probably low priority item. Thanks.

is cloned by

RHEL-19130 [ansible-freeipa] ipasudorule: Allow setting groups for runasuser.

links to

RHBA-2023:125076 ansible-freeipa bug fix and enhancement update

mentioned on

Merge request - Update to version 1.12.1