[SSSD] [PATCH] Make IPA SELinux provider aware of subdomain users

Jakub Hrozek jhrozek at redhat.com
Mon Apr 29 18:51:11 UTC 2013


On Mon, Apr 29, 2013 at 05:01:17PM +0200, Jakub Hrozek wrote:
> On Mon, Apr 29, 2013 at 03:22:08PM +0200, Michal Židek wrote:
> > On 04/29/2013 03:05 PM, Jakub Hrozek wrote:
> > >On Sun, Apr 28, 2013 at 09:10:43PM +0200, Jakub Hrozek wrote:
> > >>>+        if (subdom_be_ctx == NULL) {
> > >>>+            DEBUG(SSSDBG_CONF_SETTINGS, ("Subdomains are not configured, " \
> > >>>+                                         "cannot lookup domain [%s].\n",
> > >>>+                                         pd->domain));
> > >>>+            goto fail;
> > >>
> > >>Ack, I will just make this DEBUG message louder -- if a handler is
> > >>failing, it should tell the user why it's failing loudly. I will use
> > >>OP_FAILURE.
> > >
> > >Pushed to master.
> > >
> > >Unfortunately I realized I wanted to change the macro after I pushed the
> > >patch so I'm also going to push the attached simple patch (it's not a
> > >one liner but only because the DEBUG message spans three lines).
> > >
> > 
> > Ack to the additional 3-liner.
> > 
> > Michal
> 
> Thanks, pushed to master.

I would like to fix this problem in sssd-1-9, too. Michal, you already
know both SELinux code and the subdomains code to some extent, would you
like to backport the patch?



More information about the sssd-devel mailing list