On Tue, Mar 24, 2015 at 12:50:17PM +0100, Pavel Březina wrote:
On 03/17/2015 04:19 PM, Jakub Hrozek wrote:
>Hi,
>
>In some cases, like broken replication, we might encounter malformed
>objects in the cache when evaluating HBAC rules. Unless deny rules are
>in effect, we can skip those -- as implemented in the first three
>patches.
>
>The fourth patch is meant for the 1-12 branch to signal the
>ipa_hbac_treat_deny_as option should not be used anymore. And finally
>the last patch removes the option completely. The last patch is only
>suggested for the master branch.
Ack to all.
CI:
http://sssd-ci.duckdns.org/logs/job/11/57/summary.html
* master:
* 6dff95bdfe437afc0b62b5270d0d84140981c786
* fdfe33975cd902bf7a334e49f2667f6346c4e6ae
* c41ae115bfa808d04e729dcbd759d8aae8387ce7
* 64d8e2df816323a004bf6e7e9d05ba373b9e033d
* 1243e093fd31c5660adf1bb3dd477d6935a755be
* sssd-1-12:
* 010c1c605cfcd2879a6f91ba61ea8db53aa4c5ae
* 4df47543690a8b185d04ca6a0270e231e4491e6d
* a7c2e661a9bedd114941c9d5f33d20b70c18e878
* 319f9710185929186778814b48f2227359d4f8f4