[SSSD] [PATCH] simple access provider: allow fully qualified names

Pavel Březina pbrezina at redhat.com
Mon Jul 29 08:56:12 UTC 2013


On 07/26/2013 11:58 AM, Jakub Hrozek wrote:
> On Fri, Jul 26, 2013 at 11:49:37AM +0200, Pavel Březina wrote:
>> https://fedorahosted.org/sssd/ticket/2026
>>
>> I created a separate ticket to support subdomain users and groups in
>> allow/deny lists.
>> https://fedorahosted.org/sssd/ticket/2034
>>
>> There is a bug in PAC responder at the moment which makes simple access
>> provider to always deny access to subdomain users. PAC responder currently
>> fails to resolve group membership, thus we get error in access provider when
>> looking up groups and access is denied. Jakub will look into this.
>>
>
> Can you also amend the unit tests for the simple access provider?

Sure.
Patches are attached.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-simple-access-provider-allow-fully-qualified-names.patch
Type: text/x-patch
Size: 6551 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130729/7c74e10d/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-add-simple-access-provider-init-test.patch
Type: text/x-patch
Size: 5119 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130729/7c74e10d/attachment-0001.bin>


More information about the sssd-devel mailing list