[SSSD] [PATCHES] Support authorizedService attribute in LDAP access provider

Stephen Gallagher sgallagh at redhat.com
Tue Dec 21 21:37:45 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/21/2010 04:01 PM, Stephen Gallagher wrote:
> On 12/21/2010 03:46 PM, Sumit Bose wrote:
>> On Tue, Dec 21, 2010 at 08:23:31AM -0500, Stephen Gallagher wrote:
>> Patch 0001: Modify the LDAP access provider to pass the full PAM data to
>> all access functions. Previously we only were passing the username, but
>> some functions (like the one added in patch 0002) will require access to
>> other data like the service, host, rhost, etc.
> 
>> Patch 0002: Add support for the authorizedService attribute in the ldap
>> access provider.
> 
> 
>>> The patch look good, but I would suggest to add
>>> ldap_user_authorized_service to the IPA provider to keep the user
>>> attribute list and SDAP_OPTS_USER in sync.
> 
> Thanks for catching that. New patches attached.
> 

Sumit caught that I missed an attribute when adding the option to the
IPA provider. New patches attached.


- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk0RHikACgkQeiVVYja6o6PK1gCfWN3zqV53TF439f2eYhi92zoU
nQMAoKdDw5f9mYNv9Im/g7sLfl4WjaO9
=gzw1
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Remove-unused-member-of-a-struct.patch
Type: text/x-patch
Size: 801 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/86263753/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Fix-potential-NULL-dereference-in-krb5_auth_done.patch
Type: text/x-patch
Size: 1018 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/86263753/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Remove-unused-member-of-a-struct.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/86263753/attachment.sig>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Fix-potential-NULL-dereference-in-krb5_auth_done.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/86263753/attachment-0001.sig>


More information about the sssd-devel mailing list