On (29/09/14 18:07), Pavel Reichl wrote:
On 09/29/2014 05:18 PM, Lukas Slebodnik wrote:
>On (27/09/14 12:39), Pavel Reichl wrote:
>>Attached patch now contains both options.
>>
>>Thanks.
>>
>>
>>On 09/25/2014 03:57 PM, Pavel Reichl wrote:
>>>Hello,
>>>
>>>please see attached patch which adds first of two options proposed in
>>>https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM
>>>
>>>Thanks!
>>>
OK, thanks for review. I made changes you requested in both mails.
From 2d80e4913453a2c76ff698765765bf3881ecc4e7 Mon Sep 17 00:00:00
2001
From: Pavel Reichl <preichl(a)redhat.com>
Date: Thu, 25 Sep 2014 14:52:31 +0100
Subject: [PATCH 1/2] PAM: new options pam_trusted_users & pam_public_domains
pam_public_domains option is a list of numerical UIDs or user names
that are trusted.
pam_public_domains option is a list of domains accessible even for
untrusted users.
Based on:
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM
---
ACK
From 841b390c2540f6fb251cc76ca37bc0051b3c31dd Mon Sep 17 00:00:00
2001
From: Daniel Gollub <dgollub at brocade.com>
Date: Sat, 27 Sep 2014 12:06:44 +0100
Subject: [PATCH 2/2] PAM: Add domains= option to pam_sss
Design document:
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM
Fixes:
https://fedorahosted.org/sssd/ticket/1021
Signed-off-by: Pavel Reichl <preichl(a)redhat.com>
Reviewed-by: Sven-Thorsten Dietrich <sven at brocade.com>
---
ACK
LS