This is a follow up to #6736, which added possibility to add pkinit authentication indicator. This small RFE is only about extending FreeIPA Web UI to offer this value in Service and Host pages (and to also mention it in the Authentication indicators label tool tip). We should also extend CLI help to mention this indicator:
# ipa service-mod --help ... --auth-ind=STR Defines a whitelist for Authentication Indicators. Use 'otp' to allow OTP-based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA authentications. Other values may be used for custom configurations.
The value here is mostly in "discoverability" of this new capability as I did not see any information in CLI or UI that would actually tell me this indicator works. The workflow was tested already at least in RHEL, see https://bugzilla.redhat.com/show_bug.cgi?id=1435606#c11.
Metadata Update from @pvoborni: - Issue tagged with: ux
Metadata Update from @rcritten: - Issue priority set to: normal - Issue set to the milestone: FreeIPA 4.7
Metadata Update from @rcritten: - Issue set to the milestone: FreeIPA 4.7.1 (was: FreeIPA 4.7)
FreeIPA 4.7 has been released, moving to FreeIPA 4.7.1 milestone
Metadata Update from @rcritten: - Issue set to the milestone: FreeIPA 4.7.2 (was: FreeIPA 4.7.1)
FreeIPA 4.7.1 has been released, moving to FreeIPA 4.7.2 milestone
This is fixed with FreeIPA 4.8.2 as we have added bunch of authentication indicators to Web UI with ticket https://pagure.io/freeipa/issue/8001, commit b66e8a1
Metadata Update from @abbra: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.