Firstyear
Firstyear
We may consider supporting sudo rules as part of the kanidm module. There are some dynamic ways to achieve this, such as: https://blog.sudo.ws/posts/2020/05/sudo-1.9-using-the-group-plugin-from-python/ More design and thought needed in this...
Consider if some string schema types could have an extensible regex validator for site specific validations.
legacy files and nscd are not very fast as resolvers, so SSSD has a cache for this. For feature parity, we could consider the same so that kanidm pam and...
In get identry raw we use a loop on the ids, which does a lot of selects. It would be better to use the "where in" functionality, but it's not...
Add address, office, mail and other business related attributes and proper handling of these. These can also be fed to zxcvbn for password checks.
It could be possible to write a windows gina module for kanidm. But I'm not sure if it's worth the effort vs AD sync ....
In a lot of places we use a vector, but we have to assume 0 to infinite items. We need a non-empty vec type, probably based on small vec for...
Add pronouns to person, requires #261
As the log level is passed to an audit at the start of events, we could have log levels per UAT that is created as part of session creation. This...
We may want a user-extensible enum type, which internally is represented by a string. The options would be enforced through a checking rule in the server. It's not clear how...