The HBAC should support specifying time when the rule is applicable. We plan to use iCal standard for that.
This ticket covers the CLI aspect of the problem.
Consider that we do similar thing in DS.
3.4 development was shifted by one month, moving tickets to reflect reality better.
Adjusting time plan - 3.4 development was postponed as we focused on 3.3.x testing and stabilization.
It looks like we have more pressing issues to focus on. Pushing back to the Pilsner pool.
attachment freeipa-timerules.tar.gz
attachment sssd-timerules.tar.gz
Actively developed, considered for 4.4.
Replying to [ticket:547 dpal]:
The HBAC should support specifying time when the rule is applicable. We plan to use iCal standard for that. This ticket covers the CLI aspect of the problem.
This ticket should now also cover the WebUI aspect of the problem.
Also, there exists a design page for this feature: http://www.freeipa.org/page/V4/Time-Based_Account_Policies
This was a thesis topic: https://diplomky.redhat.com/topic/show/5/time-based-account-policies-in-freeipa
Metadata Update from @dpal: - Issue assigned to stlaz - Issue set to the milestone: FreeIPA 4.5 backlog
I'm attaching the patch from PR 23 to save @stlaz work before I'm closing the PR.
<img alt="time_hbac.patch" src="/freeipa/issue/raw/files/63ba007de9bd0680cc34c06b1d9e4b5a8c78f71e79163efc855dc616c3d10f76-time_hbac.patch" />
Metadata Update from @cheimes: - Issue close_status updated to: None - Issue set to the milestone: None (was: FreeIPA 4.5 backlog)
Login to comment on this ticket.