[SSSD] [PATCH] pac responder: limit access by checking UIDs

Simo Sorce simo at redhat.com
Thu Jul 5 13:12:16 UTC 2012


On Thu, 2012-07-05 at 14:06 +0200, Sumit Bose wrote:
> 
> 
> Hi,
> 
> this patch added the checks requested in ticket #1382 to the PAC
> responder. The check itself can be found in the commom responder code.
> It can be used by all responder, but currently only the PAC responder
> uses it.
> 
> I took a quite strict default here, i.e. only root is allowed to
> access
> the PAC responder by default. Is this too restrictive?
> 

Patch looks good, but I wonder why you do not allow specifying user
names, a getpwnam() is not too expensive.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list