[SSSD] [PATCH] Add group support to the simple access provider

Stephen Gallagher sgallagh at redhat.com
Thu Dec 9 15:20:09 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This patch adds simple_allow_groups and simple_deny_groups options
to the simple access provider. It makes it possible to grant or
deny access based on a user's group memberships within the domain.

This patch makes one minor change to previous functionality: now
all deny rules will supersede allow rules. Previously, if both
simple_allow_users and simple_deny_users were set with the same
value, the allow would win.

Fixes https://fedorahosted.org/sssd/ticket/440
- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk0A86gACgkQeiVVYja6o6NElwCeI1H9O8tzCkAM++awKInGJr9R
l0QAn20A7tbxmfOKdBuhXC4aMsyTes3V
=K45L
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-group-support-to-the-simple-access-provider.patch
Type: text/x-patch
Size: 15816 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101209/1fb54f65/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-group-support-to-the-simple-access-provider.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101209/1fb54f65/attachment.sig>


More information about the sssd-devel mailing list