[SSSD] [PATCH] AD: Add initial gpo-smb implementation.

Yassir Elley yelley at redhat.com
Thu Jun 26 03:46:41 UTC 2014



----- Original Message -----
> On Tue, Jun 24, 2014 at 12:03:57PM +0200, Sumit Bose wrote:
> > > On a separate topic, I am wondering if we should complete the review of
> > > the current patch and push it to master, before I potentially add a
> > > file-based approached and/or an enhanced gpo_child design. This would
> > > keep the current patch from growing even bigger. Also, the current patch
> > > produces correct results, so others could play with it (even if we are
> > > planning on changing to a file-based approach later on). What do you
> > > think?
> > 
> > I think it's ok.
> 
> Yes, me too, as long as the code is permissive or disabled (for now!), I'm
> fine.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
> 

I submitted a patch to the list some time ago ("AD: Add support for gpo permissive mode"). It is waiting for code review. Currently (without the patch), access control is always enforced. However, with the patch, access control will only be enforced if the ad_gpo_access_control option is explicitly set to "enforcing" (default is "permissive").

Thanks,
Yassir.



More information about the sssd-devel mailing list