[SSSD] [PATCH] Handle malformed HBAC rules, deprecate and/or remove the ipa_hbac_treat_deny_as option

Jakub Hrozek jhrozek at redhat.com
Tue Mar 24 20:48:56 UTC 2015


On Tue, Mar 24, 2015 at 12:50:17PM +0100, Pavel Březina wrote:
> On 03/17/2015 04:19 PM, Jakub Hrozek wrote:
> >Hi,
> >
> >In some cases, like broken replication, we might encounter malformed
> >objects in the cache when evaluating HBAC rules. Unless deny rules are
> >in effect, we can skip those -- as implemented in the first three
> >patches.
> >
> >The fourth patch is meant for the 1-12 branch to signal the
> >ipa_hbac_treat_deny_as option should not be used anymore. And finally
> >the last patch removes the option completely. The last patch is only
> >suggested for the master branch.
> 
> Ack to all.

CI: http://sssd-ci.duckdns.org/logs/job/11/57/summary.html
* master:
    * 6dff95bdfe437afc0b62b5270d0d84140981c786
    * fdfe33975cd902bf7a334e49f2667f6346c4e6ae
    * c41ae115bfa808d04e729dcbd759d8aae8387ce7
    * 64d8e2df816323a004bf6e7e9d05ba373b9e033d
    * 1243e093fd31c5660adf1bb3dd477d6935a755be
* sssd-1-12:
    * 010c1c605cfcd2879a6f91ba61ea8db53aa4c5ae
    * 4df47543690a8b185d04ca6a0270e231e4491e6d
    * a7c2e661a9bedd114941c9d5f33d20b70c18e878
    * 319f9710185929186778814b48f2227359d4f8f4



More information about the sssd-devel mailing list