[SSSD] [PATCH] Handle malformed HBAC rules, deprecate and/or remove the ipa_hbac_treat_deny_as option

Pavel Březina pbrezina at redhat.com
Tue Mar 24 11:50:17 UTC 2015


On 03/17/2015 04:19 PM, Jakub Hrozek wrote:
> Hi,
>
> In some cases, like broken replication, we might encounter malformed
> objects in the cache when evaluating HBAC rules. Unless deny rules are
> in effect, we can skip those -- as implemented in the first three
> patches.
>
> The fourth patch is meant for the 1-12 branch to signal the
> ipa_hbac_treat_deny_as option should not be used anymore. And finally
> the last patch removes the option completely. The last patch is only
> suggested for the master branch.

Ack to all.




More information about the sssd-devel mailing list