| Summary: | MemberOf not listed for HBAC Rules (Source host/hostgroup) and Sudo Rules (RunAs user/usergroups) | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Namita Soman <nsoman> |
| Component: | ipa | Assignee: | Rob Crittenden <rcritten> |
| Status: | CLOSED WONTFIX | QA Contact: | Chandrasekar Kannan <ckannan> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.1 | CC: | benl, dpal, jgalipea, mkosek, shaines |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-2.2.0-1.el6 | Doc Type: | Bug Fix |
| Doc Text: |
No documentation needed.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2012-05-03 11:51:17 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Bug Depends On: | |||
| Bug Blocks: | 756082 | ||
|
Description
Namita Soman
2011-09-01 17:53:26 UTC
Upstream ticket: https://fedorahosted.org/freeipa/ticket/1751 What is the use case for this? Is it a common case where users will be looking for HBAC/sudo rules where the host is used as a source? It comes across as being inconsistent. I can see hosts when they are added in 'Accessing' section, but not when they are added in 'From Section' Will hosts be commonly added as a source? If so, then maybe for the Hosts - member of section - HBAC rules/Sudo rules, can we have multiple sections to indicate from and to hosts? Ok, but how will people *use* this information? This ticket translates into two different issues and should be viewed separately: 1) Issue with "From hosts". Since "from hosts" are unreliable we want to discourage the use of those so no changes are need for "From hosts" 2) For SUDO users and run as - there might be a value so I would suggest creating a corresponding ticket but putting it into backlog for now. It is a very low priority unless someone really finds it valuable or needed. Fixed upstream: master: https://fedorahosted.org/freeipa/changeset/f7753bf55cf713b93f1c12d0fc6dde7f804dd975 ipa-2-2: https://fedorahosted.org/freeipa/changeset/a351fbbda77d64faba9efe102ef93bcb88647db7
Technical note added. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
New Contents:
No documentation needed.
No changes in UI or CLI. After discussing with Jenny and Rob, closing this as WontFix |