URL:
https://github.com/SSSD/sssd/pull/985
Author: sumit-bose
Title: #985: ssh: improvements for ssh_use_certificate_matching_rules
Action: opened
PR body:
"""
ssh: add 'no_rules' and 'all_rules' to ssh_use_certificate_matching_rules
To make ssh_use_certificate_matching_rules option more flexible and
predictable the keywords 'all_rules' and 'no_rules' are added.
'no_rules' can be used to allow all certificates.
If rules names are given but no matching rules can be found this is
considered an error and no ssh keys will be derived from the certificates.
ssh: do not mix different certificate lists
There was a list of binary certificates and a list with base64 encoded ones
which might be different depending on the active matching rules. Only the
base64 one with the filtered results should be used.
Related to
https://pagure.io/SSSD/sssd/issue/4121
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/985/head:pr985
git checkout pr985