[SSSD] [PATCH] Add ldap_access_filter option (master)

Stephen Gallagher sgallagh at redhat.com
Wed May 26 11:28:40 UTC 2010


On 05/26/2010 04:43 AM, Sumit Bose wrote:
>
> ACK.
>
> I wonder if we want to send a SSS_PAM_SYSTEM_INFO message to give a hint
> to the admin why the access was denied ?
>

I don't really think that's necessary. /var/log/secure will note that 
pam_sss.so failed the access check for that user. It's not a huge leap 
to assume that the user didn't pass the filter.

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list