[SSSD] [PATCHES] Support authorizedService attribute in LDAP access provider

Sumit Bose sbose at redhat.com
Tue Dec 21 20:46:41 UTC 2010


On Tue, Dec 21, 2010 at 08:23:31AM -0500, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Patch 0001: Modify the LDAP access provider to pass the full PAM data to
> all access functions. Previously we only were passing the username, but
> some functions (like the one added in patch 0002) will require access to
> other data like the service, host, rhost, etc.
> 
> Patch 0002: Add support for the authorizedService attribute in the ldap
> access provider.
> 

The patch look good, but I would suggest to add
ldap_user_authorized_service to the IPA provider to keep the user
attribute list and SDAP_OPTS_USER in sync.

bye,
Sumit

> 
> - -- 
> Stephen Gallagher
> RHCE 804006346421761
> 
> Delivering value year after year.
> Red Hat ranks #1 in value among software vendors.
> http://www.redhat.com/promo/vendor/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAk0QqlMACgkQeiVVYja6o6NePACfVczg/fWyC/t2YS5IRj+mimt1
> mZwAn0kcpjGUbO2pzD2X934Y24h3E7XK
> =zpHW
> -----END PGP SIGNATURE-----



More information about the sssd-devel mailing list