On Tue, Mar 29, 2016 at 11:21:05AM +0200, Lukáš Hellebrandt wrote:
>
> Right, we only have to deal with path as the protocol is already in HBAC
> rules.
I don't see protocol in HBAC rules -- there are HBAC (~ PAM) service
name and canonical hostname of the machine. But there isn't protocol
(scheme) there, there isn't service host name there, and there isn't
port there.
Can you please show (here or in the design page) how you envision
the situation
https://www.redhat.com/archives/freeipa-devel/2016-March/msg00462.html
would be modeled?
--
Jan Pazdziora
Senior Principal Software Engineer, Identity Management Engineering, Red Hat
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
