[SSSD] [PATCH] GPO: add systemd-user to default gpo list

Stephen Gallagher sgallagh at redhat.com
Tue Jan 13 19:39:44 UTC 2015




On Tue, 2015-01-13 at 18:58 +0100, Pavel Reichl wrote:
> Hello,
> 
> please see simple patch attached.
> 
> Thanks!


Nack.

First, what exactly is this service doing? I don't think we would want
to map it to ServiceLogonRight. That's intended for granting access to
the machine from a service (as opposed to a human user).

Looking at it, this PAM stack (systemd-user) is called whenever the
system invokes starts a session instance of systemd. It seems to me,
this really belongs added to the list of default options for
ad_gpo_map_permit to always allow access (since this has to be allowed
for system functionality to work properly).

Also, please update the manpages to match, since they specifically list
all of the default values.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150113/0c7e92d1/attachment.sig>


More information about the sssd-devel mailing list