[SSSD] [PATCHES] Support authorizedService attribute in LDAP access provider

Stephen Gallagher sgallagh at redhat.com
Tue Dec 21 22:02:11 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/21/2010 04:37 PM, Stephen Gallagher wrote:
> On 12/21/2010 04:01 PM, Stephen Gallagher wrote:
>> On 12/21/2010 03:46 PM, Sumit Bose wrote:
>>> On Tue, Dec 21, 2010 at 08:23:31AM -0500, Stephen Gallagher wrote:
>>> Patch 0001: Modify the LDAP access provider to pass the full PAM data to
>>> all access functions. Previously we only were passing the username, but
>>> some functions (like the one added in patch 0002) will require access to
>>> other data like the service, host, rhost, etc.
> 
>>> Patch 0002: Add support for the authorizedService attribute in the ldap
>>> access provider.
> 
> 
>>>> The patch look good, but I would suggest to add
>>>> ldap_user_authorized_service to the IPA provider to keep the user
>>>> attribute list and SDAP_OPTS_USER in sync.
> 
>> Thanks for catching that. New patches attached.
> 
> 
> Sumit caught that I missed an attribute when adding the option to the
> IPA provider. New patches attached.
> 
> 

My vacation can't come soon enough. Correct patches attached this time.



- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk0RI+MACgkQeiVVYja6o6OmWACfbJBzBaA/myorOniEHQafCy/y
HiAAn3FTTneRNZwPKAXqnlhX2kGPsTWP
=FFYK
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Pass-all-PAM-data-to-the-LDAP-access-provider.patch
Type: text/x-patch
Size: 4659 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/ab8c1872/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Add-authorizedService-support.patch
Type: text/x-patch
Size: 14377 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/ab8c1872/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Pass-all-PAM-data-to-the-LDAP-access-provider.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/ab8c1872/attachment.sig>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Add-authorizedService-support.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101221/ab8c1872/attachment-0001.sig>


More information about the sssd-devel mailing list