[SSSD] [PATCHES][IPA][RFE] Implement iCal based time managment in HBAC
Stanislav Laznicka
slaznick at redhat.com
Wed Oct 7 08:20:03 UTC 2015
Hi,
Like I promised on FreeIPA mailing list, I am submitting my patches for
your kindly review. The code includes the evaluation of time policies in
FreeIPA HBAC rules. For better understanding of what these patches are
all about, please see the design page
http://www.freeipa.org/page/V4/Time-Based_Account_Policies.
Let me also share two links to the FreeIPA mailing list archive for
description of the major changes that followed my latest post on this
mailing list:
- the 'repeat' keyword to compensate iCalendar recurrence rules:
https://www.redhat.com/archives/freeipa-devel/2015-August/msg00451.html
- negative values:
https://www.redhat.com/archives/freeipa-devel/2015-October/msg00086.html
Hopefully, the code will meet your standards. To me, it is rather
complex so I tried adding as much comments as possible, which I hope
will help you better orient yourself in it.
Also, to help you better test it, there is a copr repo set up for this
project -
https://copr.fedoraproject.org/coprs/stlaz/freeipa-sssd-timerules/. You
will probably also need the mkosek/freeipa-master copr repo for some
dependencies.
Many thanks,
Standa
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0001-IPA-Added-caching-of-time-policies-for-HBAC-rules.patch
Type: text/x-patch
Size: 11706 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0006.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0002-IPA-Added-evaluation-of-time-policies-in-HBAC.patch
Type: text/x-patch
Size: 26861 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0007.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0003-IPA-Added-Python-bindings-for-HBAC-time-policies.patch
Type: text/x-patch
Size: 34645 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0008.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0004-IPA-Added-the-repeat-keyword-functionality.patch
Type: text/x-patch
Size: 23004 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0009.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0005-IPA-Tests-for-HBAC-time-policies.patch
Type: text/x-patch
Size: 7247 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0010.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0006-IPA-Added-negative-values-to-HBAC-time-policies.patch
Type: text/x-patch
Size: 16396 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0011.bin>
More information about the sssd-devel
mailing list