Hide Forgot
Description of problem: HBAC page includes columns for Rule Type. Since we use only 'Allow" rules, this column is redundant, and can be removed for RHEL. There has been previous discussions about how to handle Deny rules since it got deprecated, and think upstream releases need to be handled differently. Version-Release number of selected component (if applicable): ipa-server-2.1.1-1.el6.x86_64 How reproducible: always Steps to Reproduce: 1. Go to HBAC front page Actual results: The columns for Rule Type is available Expected results: Since the rule type is always 'allow', this column can be removed Additional info:
Upstream ticket: https://fedorahosted.org/freeipa/ticket/1795
Created attachment 525185 [details] freeipa-edewata-0273-Removed-HBAC-rule-type.patch This patch should be included in the rpm spec for RHEL build since we decided not to push this patch into the ipa-2-1 branch upstream.
Created attachment 525855 [details] ipa-HBAC-rule-type.patch This is a temporary patch that will work against the current 2.1.1 code. When the code is updated to 2.1.2 the patch should be replaced with freeipa-edewata-0273-Removed-HBAC-rule-type.patch.
verified version ipa-server-2.1.3-9.el6.x86_64 see attached screenshot
Created attachment 578397 [details] screen shot
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0819.html