Hi,
Like I promised on FreeIPA mailing list, I am submitting my patches for
your kindly review. The code includes the evaluation of time policies in
FreeIPA HBAC rules. For better understanding of what these patches are
all about, please see the design page
http://www.freeipa.org/page/V4/Time-Based_Account_Policies.
Let me also share two links to the FreeIPA mailing list archive for
description of the major changes that followed my latest post on this
mailing list:
- the 'repeat' keyword to compensate iCalendar recurrence rules:
https://www.redhat.com/archives/freeipa-devel/2015-August/msg00451.html
- negative values:
https://www.redhat.com/archives/freeipa-devel/2015-October/msg00086.html
Hopefully, the code will meet your standards. To me, it is rather
complex so I tried adding as much comments as possible, which I hope
will help you better orient yourself in it.
Also, to help you better test it, there is a copr repo set up for this
project -
https://copr.fedoraproject.org/coprs/stlaz/freeipa-sssd-timerules/. You
will probably also need the mkosek/freeipa-master copr repo for some
dependencies.
Many thanks,
Standa