[Freeipa-devel] [WIP] Add command to test HBAC rules

[Dmitri Pal]

On 07/25/2011 09:56 AM, Dmitri Pal wrote:
>  Suppose we have a switch
> --show-invalid that takes all IPA rules and runs a simulation request
> against them, reporting the ones that are invalid only. 
OK It seems to be the right behavior as described. Other parameters
should be ignored and it should go through all the roles enabled and
disabled and report the ones that are invalid (incomplete and would
never match).

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/