Re: [Freeipa-devel] [PATCH] 903, 287 fix hbac rule/selinuxuser map search for non-admin users

2015-07-16 Thread Petr Vobornik
On 07/16/2015 03:18 PM, Martin Basti wrote: On 14/07/15 18:50, Petr Vobornik wrote: hbacrule has it default attributes (which are used in search) attribute 'memberhostgroup'. This attr is not in ACI nor in schema. If the search contains an attribute which can't be read then the search won't

Re: [Freeipa-devel] [PATCH] 903, 287 fix hbac rule/selinuxuser map search for non-admin users

2015-07-16 Thread Martin Basti
On 14/07/15 18:50, Petr Vobornik wrote: hbacrule has it default attributes (which are used in search) attribute 'memberhostgroup'. This attr is not in ACI nor in schema. If the search contains an attribute which can't be read then the search won't return anything. Therefore all searches with