On 07/16/2015 03:18 PM, Martin Basti wrote:
On 14/07/15 18:50, Petr Vobornik wrote:
hbacrule has it default attributes (which are used in search) attribute
'memberhostgroup'. This attr is not in ACI nor in schema. If the search
contains an attribute which can't be read then the search won't return
anything.
Therefore all searches with filter set fail.
Also I don't think this is a proper fix because any custom ACIs will
cause the bug again. Same issue in
https://fedorahosted.org/freeipa/ticket/5055
https://fedorahosted.org/freeipa/ticket/5130
ACK
Pushed to:
master: 2e80645ef21ff6dbcc1645caacda02e8aac8226a
ipa-4-2: 6ead80d9ba6b775a6df3ba76b4d717050311b762
Patch that fixes the similar issue with selinuxusermap is attached.
ACK
Pushed to:
master: a0ce9e6b09f8e35284bc8c97bd63d1e019ca8142
ipa-4-2: c10de0aa91a5a10588aec56955f77bb636162efc
--
Petr Vobornik
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
