[Freeipa-devel] [PATCH] 482 s4u2proxy ACL evaluator

[Martin Kosek]

On Fri, 2012-02-17 at 18:23 -0500, Simo Sorce wrote:
> The evaluator was supposed to fail by default, so that if no matches
> were found it would return ENOENT.
> 
> Unfortunately teh variable was initialized in the wrong place and
> cleared along the way always returning success.
> 
> This patch fixes https://fedorahosted.org/freeipa/ticket/2343
> 
> Simo.
> 

ACK. It fixes the issue nicely.

I created a ticket for improving the error message we produce when the
delegation fails:
https://fedorahosted.org/freeipa/ticket/2414

Pushed to master, ipa-2-2.

Martin