[Freeipa-devel] [PATCHES] 0591-0593 Change group permission object filter
Martin Kosek
mkosek at redhat.com
Mon Jun 23 08:01:12 UTC 2014
On 06/20/2014 02:14 PM, Petr Viktorin wrote:
> My patch 0580 was wrong; non-POSIX groups obviously lack the posixgroup
> objectclass. Actually the only objectclasses that all groups share are top and
> ipaobject.
>
> This makes permission plugin & updater join multiple
> permission_filter_objectclasses filters with OR, and changes the --type group
> filter to (|(objectclass=ipausergroup)(objectclass=posixgroup)).
>
> The first patch has some unrelated test fixes.
This looks as the right thing to do, thanks. Access to group was restored,
group type also worked fine.
I found just one typo in 593 - "Retreive". When you fix this, it's an ACK.
Martin
More information about the Freeipa-devel
mailing list