[SSSD] [PATCH] HBAC: Properly skip all non-group memberOf entries

Stephen Gallagher sgallagh at redhat.com
Mon Aug 29 13:22:39 UTC 2011


There was a typo here and we weren't properly skipping memberOf
attributes in a user entry that contained fewer than four domain
components.

This can be reproduced by creating an HBAC rule that includes a specific
user. The FreeIPA server must also be using a single-component domain
(e.g. dc=freeipa as opposed to dc=example,dc=com)

Resolves https://bugzilla.redhat.com/show_bug.cgi?id=733237
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0089-HBAC-Properly-skip-all-non-group-memberOf-entries.patch
Type: text/x-patch
Size: 915 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110829/a92b61a8/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110829/a92b61a8/attachment.sig>


More information about the sssd-devel mailing list