Create a FreeIPA role/group that only allows one to activate/deactivate accounts
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 42/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Active
- Domain
- authentication
Research direction
Start by reading this issue and locating the FreeIPA role and permission management in the repository; no specific files or tests are named in the payload. Work out which permissions allow account activation and deactivation without allowing deletion, then verify the role cannot perform account deletion and can perform both requested actions.
Written by the indexing model from the issue text.
Description
We've had an issue that someone was granted FreeIPA admin on a cluster to activate student accounts, but that person deleted accounts instead of just activating/deactivating, which caused issues because usernames got reused. "admin" is too powerful, and a more limited set of permissions should be crafted for just the task of account activation/deactivation.
- Dominant language
- Puppet
- Stars
- 16
- Forks
- 31
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 22
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from ComputeCanada/puppet-magic_castle
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
ComputeCanada/puppet-magic_castle#634 ·
Maintainers usually reply within 1 day
-
Difficulty 4/5 3-5 days Newbie friendliness 46/100
ComputeCanada/puppet-magic_castle#602 · 1 comment ·
Maintainers usually reply within 1 day
-
iptables fails to start on first boot with EL10May be free again @cmd-ntrf claimed this 65 days ago, and no pull request is open. Openbug
ComputeCanada/puppet-magic_castle#592 · 2 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
enhancement help wanted
Difficulty 4/5 3-5 days Newbie friendliness 25/100
ComputeCanada/puppet-magic_castle#476 · 1 comment ·
Maintainers usually reply within 1 day
-
Test and debug GPUs with Incus containersMay be free again @etiennedub claimed this 353 days ago, and no pull request is open. Openenhancement hardware help wanted
ComputeCanada/puppet-magic_castle#469 · 1 assignee ·
Maintainers usually reply within 1 day
All issues in ComputeCanada/puppet-magic_castle
Similar issues
-
area-multitenancy area-security p1-recommended priority-high technical-debt
Difficulty 2/5 Under an hour Newbie friendliness 75/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
Maintainers usually reply within 1 day
-
body-parser 2.3.0 in the published ai-dial-chat-bff image is vulnerable (CVE-2026-111181, HIGH)Possibly taken @illya-havsiyevych claimed this today. Openbug
Difficulty 1/5 1-3 hours Newbie friendliness 87/100
epam/ai-dial-chat#9566 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100