[Freeipa-devel] Time-based account policies

[John Dennis]

On 03/10/2015 11:06 AM, Jakub Hrozek wrote:
>> We may need to use libraries for processing iCal rules, like libical
>> (http://koji.fedoraproject.org/koji/buildinfo?buildID=606329)...
> 
> Is that what Alexander said, though? In his reply, I see:
>     "Parsing event information would produce a rule definition we would
>     store and SSSD would apply as HBAC rule".
> 
> I don't think iCal dependency is something we want in SSSD, the
> rules should be converted from iCal to SSSD format in a layer atop
> libipa_hbac..

But doesn't the iCal rule have to be evaluated in SSSD? If so that
requires linking against libical, right?


-- 
John