SSSD / sssd

#913 Add transitional option ipa_hbac_treat_deny_as
Closed: Fixed Opened by sgallagh.

Closed: Fixed
Reopen Issue

Related to ticket #912, we need to add a new option {{{ipa_hbac_treat_deny_as}}} which will change the way we treat DENY rules in the HBAC access provider.

There will be two possible values for this option: DENY_ALL (default) and IGNORE.

Fields changed

owner: somebody => sgallagh
status: new => assigned

Fixed by: 98fc4cbc838615a88b9725a13ab7491e89cbac32

patch: 0 => 1
resolution: => fixed
rhbz: =>
status: assigned => closed

Backported to sssd-1-5

a2b1e0b4bce8281d7214329d6bc261cb8ca02784

milestone: SSSD 1.6.0 => SSSD 1.5.12

Fields changed

rhbz: => 0

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.12

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1955

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Lowest
defect
IPA Provider
1.5.10
0
1
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.