On (27/04/16 10:59), Jakub Hrozek wrote:
>On Mon, Mar 21, 2016 at 09:37:45AM +0100, Lukas Slebodnik wrote:
>> On (17/03/16 22:59), Jakub Hrozek wrote:
>> >a man page one liner :)
>> >
>> >No need to explicitly mention IPAv2, I hope there are no deployments of
>> >IPAv1 left anymore :)
>> >
>> >This change was suggested by Rob in
>> >https://fedorahosted.org/sssd/ticket/1907#comment:2
>>
>> >From a571f05f492090e95ec25ba1e10b7f843f4688b7 Mon Sep 17 00:00:00 2001
>> >From: Jakub Hrozek <jhrozek(a)redhat.com>
>> >Date: Thu, 17 Mar 2016 22:57:49 +0100
>> >Subject: [PATCH] MAN: Drop the reference to IPAv2 in the man page
>> >
>> >As suggested by Rob in
>> >https://fedorahosted.org/sssd/ticket/1907#comment:2
>> >---
>> > src/man/sssd-ipa.5.xml | 2 +-
>> > 1 file changed, 1 insertion(+), 1 deletion(-)
>> >
>> >diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
>> >index
be390d58dd3ce5a6ca6d5212d2c7aa176d3a74c4..11bfb7b0a273fa10fbb610490602c761cefcad90 100644
>> >--- a/src/man/sssd-ipa.5.xml
>> >+++ b/src/man/sssd-ipa.5.xml
>> >@@ -117,7 +117,7 @@
>> > <listitem>
>> > <para>
>> > Optional. This option tells SSSD to
automatically
>> >- update the DNS server built into FreeIPA v2
with
>> >+ update the DNS server built into FreeIPA with
>> > the IP address of this client. The update is
>> > secured using GSS-TSIG. The IP address of the
IPA
>> > LDAP connection is used for the updates, if it
is
>> LGTM.
>>
>> FreeIPA v2 is also mentioned on other space.
>> sssd-ipa.5.xml- <varlistentry>
>> sssd-ipa.5.xml- <term>ipa_hbac_treat_deny_as
(string)</term>
>> sssd-ipa.5.xml- <listitem>
>> sssd-ipa.5.xml- <para>
>> sssd-ipa.5.xml- This option specifies how to treat the
deprecated
>> sssd-ipa.5.xml: DENY-type HBAC rules. As of FreeIPA
v2.1, DENY
>> sssd-ipa.5.xml- rules are no longer supported on the
server. All
>> sssd-ipa.5.xml- users of FreeIPA will need to migrate
their rules
>> sssd-ipa.5.xml- to use only the ALLOW rules. The
client will
>> sssd-ipa.5.xml- support two modes of operation during
this
>> sssd-ipa.5.xml- transition period:
>>
>>
>> Do you think that is it a time to remove ipa_hbac_treat_deny_as?
>> I doubt anyone uses sssd with FreeIPA < 2.1
>
>That option was removed as of 6dff95bdfe437afc0b62b5270d0d84140981c786
I'm sorry I had to check in wrong branch.
ACK to patch
http://sssd-ci.duckdns.org/logs/job/42/77/summary.htm