Your LDAP server may contain references to shells that you have reason not to want to allow on a local system. This provides a mechanism for you to veto the use of certain shells, making sssd present the fallback shell instead.
This provides a new config option for providing a list of shells to veto:
vetoed_shells = /bin/dash /bin/csh
This follows closely the patch that provided allowed_shells.
Patch against 1.5.11 that adds vetoed_shells sssd-vetoed-shells.patch
Fields changed
patch: 0 => 1 summary: Provide a mechanism for vetoing the use of certain shells => Mark as patch attached.
Provide a mechanism for vetoing the use of certain shells
Just notch me up as a twonk.
summary: Mark as patch attached. => Provide a mechanism for vetoing the use of certain shells
component: SSSD => NSS milestone: NEEDS_TRIAGE => SSSD 1.6.0 owner: somebody => prefect
Fixed by 1dc99c9d468cfe2a7f7286a8969c586f8740bb9f
resolution: => fixed status: new => closed
rhbz: => 728961
Backported to sssd-1-5
6daf03f2597d6a0177cac74dbfcdd502521cf2e2
milestone: SSSD 1.6.0 => SSSD 1.5.12
rhbz: 728961 => [https://bugzilla.redhat.com/show_bug.cgi?id=728961 728961]
Metadata Update from @prefect: - Issue assigned to prefect - Issue set to the milestone: SSSD 1.5.12
SSSD is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in SSSD's github repository.
This issue has been cloned to Github and is available here: - https://github.com/SSSD/sssd/issues/1987
If you want to receive further updates on the issue, please navigate to the github issue and click on subscribe button.
subscribe
Thank you for understanding. We apologize for all inconvenience.