[SSSD] [PATCH] Do not treat missing HBAC rules as an error

Eugene Indenbom eindenbom at gmail.com
Wed Jul 21 10:34:06 UTC 2010


On 07/21/2010 12:44 PM, Sumit Bose wrote:
> Hi,
>
> this patch fixes an inconsistency between the offline and the online
> case. Now both cases return 'Access denied' if there are no HBAC rules
> at all. This should fix #554.
>
>    
Ack.

Tested both missing host, missing rules and services.
When rules and services are missing PAM_ACCESS_DENIED is returned in 
ONLINE and OFFLINE.
When ipahost is missing PAM_SYSTEM_ERROR is returned in ONLINE and 
OFFLINE (now ticket #566).

Eugene



More information about the sssd-devel mailing list