FreeIpa

General notes

• ACL viewing is blocked by default

• All privileges and permissions in Free IPA depend on groups

• In the user's member of, you can read groups and understand what permissions they refer to

• In Free Ipa you can request ticket without PAC (but such a ticket cannot be delegated)