[SSSD] [PATCHES] Support authorizedService attribute in LDAP access provider

Stephen Gallagher sgallagh at redhat.com
Tue Dec 21 21:01:17 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/21/2010 03:46 PM, Sumit Bose wrote:
> On Tue, Dec 21, 2010 at 08:23:31AM -0500, Stephen Gallagher wrote:
> Patch 0001: Modify the LDAP access provider to pass the full PAM data to
> all access functions. Previously we only were passing the username, but
> some functions (like the one added in patch 0002) will require access to
> other data like the service, host, rhost, etc.
> 
> Patch 0002: Add support for the authorizedService attribute in the ldap
> access provider.
> 
> 
>> The patch look good, but I would suggest to add
>> ldap_user_authorized_service to the IPA provider to keep the user
>> attribute list and SDAP_OPTS_USER in sync.

Thanks for catching that. New patches attached.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk0RFZ0ACgkQeiVVYja6o6OeHQCeJfXIo0ln7RC5soTdZQiASQE5
iWUAn3c17oI6BltgVJ2Xtq0HCU8zXNIB
=l761
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Pass-all-PAM-data-to-the-LDAP-access-provider.patch
Type: text/x-patch
Size: 4659 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/05a569f6/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Add-authorizedService-support.patch
Type: text/x-patch
Size: 14356 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/05a569f6/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Pass-all-PAM-data-to-the-LDAP-access-provider.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/05a569f6/attachment.sig>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Add-authorizedService-support.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/05a569f6/attachment-0001.sig>


More information about the sssd-devel mailing list