search

freeipa / ansible-freeipa

Ansible roles and modules for FreeIPA
GNU General Public License v3.0
489 stars 232 forks source link

ipadnszone: Add support for per-zone privilege delegation #1147

Closed rjeffman closed 8 months ago

rjeffman commented 11 months ago

IPA DNS Zones management can be delegated by adding a "Manage DNS zone" permission. The CLI commands that manage these permissions are dnszone-add-permission and dnszone-remove-permission.

The ansible-freeipa module ipadnszone did not have this capability, and it now support dnszone per-zone management delegation by setting the module parameter 'permission'. If set to 'true' the permission will be assigned to the zone, if set to false the permission will be removed.

t-woerner commented 8 months ago

I think the commit message is not correct:

"The CLI commands that manage these permissions are dnszone-add-delegation and dnszone-remove-delegation."

rjeffman commented 8 months ago

Commit message was also fixed.