Bug 924542
Summary: | Remove support of the source host from the HBAC on the server side both from UI and CLI | |||
---|---|---|---|---|
Product: | Red Hat Enterprise Linux 6 | Reporter: | Dmitri Pal <dpal> | |
Component: | ipa | Assignee: | Rob Crittenden <rcritten> | |
Status: | CLOSED ERRATA | QA Contact: | Namita Soman <nsoman> | |
Severity: | unspecified | Docs Contact: | ||
Priority: | medium | |||
Version: | 6.4 | CC: | chhudson, hgraham, ksiddiqu, mkosek, xdong | |
Target Milestone: | rc | |||
Target Release: | --- | |||
Hardware: | Unspecified | |||
OS: | Unspecified | |||
Whiteboard: | ||||
Fixed In Version: | ipa-3.0.0-31.el6 | Doc Type: | Bug Fix | |
Doc Text: |
Cause: Identity Management Host Based Access Control (HBAC) rules API still allowed administrators to specify a Source Host component of HBAC rules even though this component was deprecated.
Consequence: Administrators may see unexpected behavior when using the Source Host component in HBAC rules.
Fix: The IdM API no longer allows Source Host component in HBAC rules.
Result: HBAC rules in IdM now contains only supported components and thus prevents unexpected behavior of the rules for administrators.
|
Story Points: | --- | |
Clone Of: | ||||
: | 924775 947900 970460 (view as bug list) | Environment: | ||
Last Closed: | 2013-11-21 20:52:21 UTC | Type: | Bug | |
Regression: | --- | Mount Type: | --- | |
Documentation: | --- | CRM: | ||
Verified Versions: | Category: | --- | ||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
Cloudforms Team: | --- | Target Upstream Version: | ||
Embargoed: | ||||
Bug Depends On: | ||||
Bug Blocks: | 924775, 947900, 960054, 970460 |
Description
Dmitri Pal
2013-03-22 02:53:55 UTC
Upstream ticket: https://fedorahosted.org/freeipa/ticket/3528 Fixed upstream master: b8b573a966f4be268031ccca5abce09767928ff7 d03255571c9d4c81d92c692fd0b6db6539856cf8 39982f6696267706b70f598ee80ce87924cc34a4 ipa-3-1: 0d5e310231962fb10a5396477bbcd2ce99b4e544 592db35c87ea8eee0f28b87c12dd889fead98701 e7954e267282fc4fa61aa004da5489fe42763a3a Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2013-1651.html |