[Freeipa-users] hostMask attribute syntax issue in 60sudo.ldif
Dmitri Pal
dpal at redhat.com
Fri Sep 24 17:43:38 UTC 2010
Brian LaMere wrote:
> ah, odd - I'm used to IPs being IA5. then the equality match should
> be changed? Can't have caseIgnoreIA5Match on a directory string :)
Yes. This is what the patch does :-)
>
> On Fri, Sep 24, 2010 at 9:30 AM, Dmitri Pal <dpal at redhat.com
> <mailto:dpal at redhat.com>> wrote:
>
> Brian LaMere wrote:
> > the attribute "hostMask" attribute in the 60sudo.ldif schema def
> has a
> > syntax of 1.3.6.1.4.1.1466.115.121.1.15 but it should be
> > 1.3.6.1.4.1.1466.115.121.1.26...maybe?
> >
> > attributeTypes: (2.16.840.1.113730.3.8.7.11 NAME 'hostMask' DESC 'IP
> > mask to identify a subnet.' EQUALITY caseIgnoreIA5Match ORDERING
> > caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> > 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA v2' )
> >
> > equality as IA5, but ordering and substr as regular strings? I'm
> > tempted to think it should be IA5 across the board, as an IP. Yes?
> >
> Yes this is an inconsistency fixed by the patch on the list. After
> some
> discussion we decided to treat it as a DirectoryString i.e. 15 and
> remove the IA5 from the match rule.
> Thanks ,
> Dmitri
>
> >
> ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Freeipa-users mailing list
> > Freeipa-users at redhat.com <mailto:Freeipa-users at redhat.com>
> > https://www.redhat.com/mailman/listinfo/freeipa-users
>
>
> --
> Thank you,
> Dmitri Pal
>
> Engineering Manager IPA project,
> Red Hat Inc.
>
>
> -------------------------------
> Looking to carve out IT costs?
> www.redhat.com/carveoutcosts/ <http://www.redhat.com/carveoutcosts/>
>
>
--
Thank you,
Dmitri Pal
Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
More information about the Freeipa-users
mailing list