[SSSD] [PATCH] Download only enabled IPA HBAC rules
Sumit Bose
sbose at redhat.com
Wed Oct 20 12:00:29 UTC 2010
and now with a patch attached ...
bye,
Sumit
On Wed, Oct 20, 2010 at 01:02:48PM +0200, Sumit Bose wrote:
> Hi,
>
> with this patch only enabled IPA HABC rules are loaded and saved in
> sysdb. This fixes ticket #530.
>
> bye,
> Sumit
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
-------------- next part --------------
From 63c8712abaf8f07f417fe923a794d4d2d82b8b3a Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose at redhat.com>
Date: Wed, 20 Oct 2010 12:58:50 +0200
Subject: [PATCH] Download only enabled IPA HBAC rules
---
src/providers/ipa/ipa_access.c | 4 +++-
1 files changed, 3 insertions(+), 1 deletions(-)
diff --git a/src/providers/ipa/ipa_access.c b/src/providers/ipa/ipa_access.c
index 223bf16..979959f 100644
--- a/src/providers/ipa/ipa_access.c
+++ b/src/providers/ipa/ipa_access.c
@@ -50,6 +50,7 @@
#define IPA_CN "cn"
#define IPA_MEMBER_SERVICE "memberService"
#define IPA_SERVICE_CATEGORY "serviceCategory"
+#define IPA_TRUE_VALUE "TRUE"
#define IPA_HOST_BASE_TMPL "cn=computers,cn=accounts,%s"
#define IPA_HBAC_BASE_TMPL "cn=hbac,%s"
@@ -1085,7 +1086,8 @@ static struct tevent_req *hbac_get_rules_send(TALLOC_CTX *memctx,
state->hbac_filter = talloc_asprintf(state,
"(&(objectclass=ipaHBACRule)"
- "(|(%s=%s)(%s=%s)",
+ "(%s=%s)(|(%s=%s)(%s=%s)",
+ IPA_ENABLED_FLAG, IPA_TRUE_VALUE,
IPA_HOST_CATEGORY, "all",
IPA_MEMBER_HOST, host_dn);
if (state->hbac_filter == NULL) {
--
1.7.2.3
More information about the sssd-devel
mailing list