On Fri, Feb 26, 2016 at 01:15:59PM +0100, Lukáš Hellebrandt wrote:
Hi, FreeIPA and SSSD communities!
I am working on adding URI to HBAC as my thesis . The goal is to
control access not only based on (user, host, service), but on (user,
host, service, resource's URI).
I created a patch for FreeIPA  so it is capable of storing URI as
part of HBAC rule. I created a patch for SSSD  so it is able to get
this URI from FreeIPA and use it in HBAC evaluation.
I still need to develop a part of SSSD receiving URI-aware requests. It
will either be an enhancement of Infopipe or I will use PAM responder
I wanted to kindly ask you for review and your opinions on the patches
and generally on my approach. This would be my first contribution to
FreeIPA and SSSD so there might be bugs. What do you think?
First question I have is that the URLs only match on complete string
match. From past conversations I thought we wanted to add a more
Btw, is there some better place to share patches than a pasting tool?
Maybe some form of pull request?
You can clone SSSD on github and publish a branch in your clone