On 03/17/2015 04:19 PM, Jakub Hrozek wrote:
Hi,
In some cases, like broken replication, we might encounter malformed
objects in the cache when evaluating HBAC rules. Unless deny rules are
in effect, we can skip those -- as implemented in the first three
patches.
The fourth patch is meant for the 1-12 branch to signal the
ipa_hbac_treat_deny_as option should not be used anymore. And finally
the last patch removes the option completely. The last patch is only
suggested for the master branch.
Ack to all.