SSSD / sssd

#554 IPA access backend treats missing HBAC rules in OFFLINE mode as error
Closed: Fixed Opened by eindenbom.

Closed: Fixed
Reopen Issue

If there is no HBAC rules defined for the host, IPA access backend:
- returns PAM_ACCESS_DENIED in ONLINE mode
- returns PAM_SYSTEM_ERROR in OFFLINE mode

IPA access backend should return PAM_ACCESS_DENIED in both modes.

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.3.0

Fields changed

owner: somebody => sbose

Fields changed

owner: sbose => jhrozek

I was able to reproduce this issue and have sent a patch to the sssd-devel list (https://fedorahosted.org/pipermail/sssd-devel/2010-July/004219.html). It would be nice if you can check if this patch works for you, too, and add a comment either here or on sssd-devel.

Fields changed

owner: jhrozek => sbose

Fixed by 1598d6523bbb05028f3c8ab14f6a4e68ce698901

fixedin: => 1.3.0
resolution: => fixed
status: new => closed

Fields changed

rhbz: => 0

Metadata Update from @eindenbom:
- Issue assigned to sbose
- Issue set to the milestone: SSSD 1.3.0

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1596

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
SSSD
1.2.1
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.