[SSSD] [PATCH] Add host access control support

Jan Zelený jzeleny at redhat.com
Wed Mar 23 15:11:28 UTC 2011


Jan Zelený <jzeleny at redhat.com> wrote:
> Jakub Hrozek <jhrozek at redhat.com> wrote:
> > On 03/02/2011 10:39 AM, Jan Zelený wrote:
> > > I'm sending rebased patch by Pierre Ossman. The patch is adding an
> > > option to allow/deny user access based on host attribute supported by
> > > pam_ldap.
> > > 
> > > I tested the patch and it works just fine. I also have no objections to
> > > the design.
> > > 
> > > https://fedorahosted.org/sssd/ticket/746
> > 
> > Looks mostly OK to me and works. I have only some nitpicks:
> > 
> > Can we use some other name than SYSDB_HOST? It seems too generic,
> > perhaps SYSDB_AUTHORIZED_HOST? The same for SDAP_AT_HOST and name of
> 
> the
> 
> > config option (something like ldap_user_authorized_host?).
> 
> Corrected patch in attachment
> 
> Jan

One other small correction on Jakub's request

Jan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-03-Add-host-access-control-support.patch
Type: text/x-patch
Size: 14592 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110323/f4a7dc33/attachment.bin>


More information about the sssd-devel mailing list