Bug 1784459
| Summary: | [RFE] tlog does not allow to exclude some users from session recording | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Hemant B Khot <hkhot> | |
| Component: | sssd | Assignee: | jstephen | |
| Status: | CLOSED ERRATA | QA Contact: | Scott Poore <spoore> | |
| Severity: | medium | Docs Contact: | Lucie Vařáková <lmanasko> | |
| Priority: | medium | |||
| Version: | 8.1 | CC: | atikhono, dlavu, dpal, elpereir, grajaiya, jhrozek, jstephen, lmanasko, lslebodn, mzidek, pbrezina, sbose, spoore, tscherf | |
| Target Milestone: | rc | Keywords: | FutureFeature | |
| Target Release: | 8.0 | Flags: | pm-rhel:
mirror+
|
|
| Hardware: | All | |||
| OS: | Linux | |||
| Whiteboard: | sync-to-jira | |||
| Fixed In Version: | sssd-2.4.0-1.el8 | Doc Type: | Enhancement | |
| Doc Text: |
.Support for `exclude_users` and `exclude_groups` with `scope=all` in SSSD session recording configuration
Red Hat Enterprise 8.4 now provides new SSSD options for defining session recording for large lists of groups or users:
. `exclude_users`
+
A comma-separated list of users to be excluded from recording, only applicable with the `scope=all` configuration option.
. `exclude_groups`
+
A comma-separated list of groups, members of which should be excluded from recording. Only applicable with the `scope=all` configuration option.
For more information, refer to the `sssd-session-recording` man page.
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 1877381 (view as bug list) | Environment: | ||
| Last Closed: | 2021-05-18 15:03:54 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1881992 | |||
| Bug Blocks: | 1877381 | |||
|
Comment 5
Alexey Tikhonov
2020-09-03 15:47:19 UTC
Verified. Version :: sssd-2.4.0-2.el8 Results :: Verified with automated test run: 2020-11-28T18:07:49+0000 ============================= test session starts ============================== ... 2020-11-28T18:07:50+0000 collecting ... collected 9 items 2020-11-28T18:07:50+0000 2020-11-28T18:07:50+0000 pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_some_users_and_groups_only 2020-11-28T18:07:50+0000 -------------------------------- live log setup -------------------------------- 2020-11-28T18:07:50+0000 [paramiko.transport] INFO Connected (version 2.0, client OpenSSH_8.0) 2020-11-28T18:07:50+0000 [paramiko.transport] INFO Authentication (publickey) successful! 2020-11-28T18:15:51+0000 [paramiko.transport.sftp] INFO [chan 30] Opened sftp connection (server version 3) 2020-11-28T18:19:34+0000 PASSED [ 11%] 2020-11-28T18:24:52+0000 pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_no_users_with_users_and_groups_empty PASSED [ 22%] 2020-11-28T18:30:10+0000 pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_no_users_or_groups PASSED [ 33%] 2020-11-28T18:35:29+0000 pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_no_users_with_no_scope_defined PASSED [ 44%] 2020-11-28T18:38:17+0000 pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_all_with_users_and_groups_defined PASSED [ 55%] 2020-11-28T18:41:05+0000 pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_all_without_users_and_groups_defined PASSED [ 66%] 2020-11-28T18:43:21+0000 pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_users_with_different_shells PASSED [ 77%] 2020-11-28T18:46:53+0000 pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_all_exclude_users_and_groups PASSED [ 88%] 2020-11-28T18:50:35+0000 pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_some_excludes_ignored PASSED [100%] 2020-11-28T18:50:35+0000 2020-11-28T18:50:35+0000 ------ generated xml file: /home/jenkins/tews/session_recording/junit.xml ------ 2020-11-28T18:50:35+0000 - generated html file: file:///home/jenkins/tews/session_recording/report.html - 2020-11-28T18:50:35+0000 ========================= 9 passed in 2565.94 seconds ========================== Important test cases above for this are: pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_all_exclude_users_and_groups pytest/session_recording/test_session_recording.py::Test_SssdSessionRecording::test_sssd_record_some_excludes_ignored Both passed so marking this Verified. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (sssd bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:1666 |