[Freeipa-devel] URI in HBAC - design page

[Jan Pazdziora]

On Tue, Mar 29, 2016 at 11:21:05AM +0200, Lukáš Hellebrandt wrote:
> 
> Right, we only have to deal with path as the protocol is already in HBAC
> rules.

I don't see protocol in HBAC rules -- there are HBAC (~ PAM) service
name and canonical hostname of the machine. But there isn't protocol
(scheme) there, there isn't service host name there, and there isn't
port there.

Can you please show (here or in the design page) how you envision
the situation

	https://www.redhat.com/archives/freeipa-devel/2016-March/msg00462.html

would be modeled?

-- 
Jan Pazdziora
Senior Principal Software Engineer, Identity Management Engineering, Red Hat