[SSSD] [PATCHES][IPA][RFE] Implement iCal based time managment in HBAC

Stanislav Laznicka slaznick at redhat.com
Wed Oct 7 08:20:03 UTC 2015


Hi,

Like I promised on FreeIPA mailing list, I am submitting my patches for 
your kindly review. The code includes the evaluation of time policies in 
FreeIPA HBAC rules. For better understanding of what these patches are 
all about, please see the design page 
http://www.freeipa.org/page/V4/Time-Based_Account_Policies.

Let me also share two links to the FreeIPA mailing list archive for 
description of the major changes that followed my latest post on this 
mailing list:
  - the 'repeat' keyword to compensate iCalendar recurrence rules: 
https://www.redhat.com/archives/freeipa-devel/2015-August/msg00451.html
  - negative values: 
https://www.redhat.com/archives/freeipa-devel/2015-October/msg00086.html

Hopefully, the code will meet your standards. To me, it is rather 
complex so I tried adding as much comments as possible, which I hope 
will help you better orient yourself in it.

Also, to help you better test it, there is a copr repo set up for this 
project - 
https://copr.fedoraproject.org/coprs/stlaz/freeipa-sssd-timerules/. You 
will probably also need the mkosek/freeipa-master copr repo for some 
dependencies.

Many thanks,
Standa

-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0001-IPA-Added-caching-of-time-policies-for-HBAC-rules.patch
Type: text/x-patch
Size: 11706 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0006.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0002-IPA-Added-evaluation-of-time-policies-in-HBAC.patch
Type: text/x-patch
Size: 26861 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0007.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0003-IPA-Added-Python-bindings-for-HBAC-time-policies.patch
Type: text/x-patch
Size: 34645 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0008.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0004-IPA-Added-the-repeat-keyword-functionality.patch
Type: text/x-patch
Size: 23004 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0009.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0005-IPA-Tests-for-HBAC-time-policies.patch
Type: text/x-patch
Size: 7247 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0010.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd-stlaz-0006-IPA-Added-negative-values-to-HBAC-time-policies.patch
Type: text/x-patch
Size: 16396 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20151007/6eb8042d/attachment-0011.bin>


More information about the sssd-devel mailing list