[Freeipa-devel] [PATCH] 845 add external source hosts to HBAC

Martin Kosek mkosek at redhat.com
Mon Aug 29 13:52:47 UTC 2011


On Wed, 2011-08-17 at 11:56 -0400, Rob Crittenden wrote:
> You should be able to specify hosts that aren't in IPA in HBAC source 
> host rules. This adds support for it.
> 
> ticket https://fedorahosted.org/freeipa/ticket/1574
> 
> rob

ACK. Works fine.

Although, I am thinking that we now have the same algorithm (add
user/host as external when not found in LDAP) for both hbac and
sudorule. We may think about consolidating it so that we don't have
duplicates.

Martin




More information about the Freeipa-devel mailing list