Re: [Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-29 Thread Lukáš Hellebrandt
> On the patches: > > [2] you define a new attribute Url which is fine, but the actual > attribute is not ok in several way. > > - You assigned an OID from a hole in the IPAv2 Attibutes space, it > should be an assigned ID from the IPAv3 attribute space instead > > - You do not namespace the at

Re: [Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-29 Thread Lukáš Hellebrandt
On 02/28/2016 11:39 AM, Jakub Hrozek wrote: > On Fri, Feb 26, 2016 at 11:33:26AM -0500, Simo Sorce wrote: >> On Fri, 2016-02-26 at 17:17 +0100, Jakub Hrozek wrote: >>> On Fri, Feb 26, 2016 at 10:58:57AM -0500, Simo Sorce wrote: On Fri, 2016-02-26 at 13:17 +0100, Lukáš Hellebrandt wrote: >

Re: [Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-28 Thread Jakub Hrozek
On Fri, Feb 26, 2016 at 11:33:26AM -0500, Simo Sorce wrote: > On Fri, 2016-02-26 at 17:17 +0100, Jakub Hrozek wrote: > > On Fri, Feb 26, 2016 at 10:58:57AM -0500, Simo Sorce wrote: > > > On Fri, 2016-02-26 at 13:17 +0100, Lukáš Hellebrandt wrote: > > > > Hi, FreeIPA and SSSD communities! > > > > >

Re: [Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-26 Thread Simo Sorce
On Fri, 2016-02-26 at 17:17 +0100, Jakub Hrozek wrote: > On Fri, Feb 26, 2016 at 10:58:57AM -0500, Simo Sorce wrote: > > On Fri, 2016-02-26 at 13:17 +0100, Lukáš Hellebrandt wrote: > > > Hi, FreeIPA and SSSD communities! > > > > > > I am working on adding URI to HBAC as my thesis [1]. The goal is

Re: [Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-26 Thread Jakub Hrozek
On Fri, Feb 26, 2016 at 10:58:57AM -0500, Simo Sorce wrote: > On Fri, 2016-02-26 at 13:17 +0100, Lukáš Hellebrandt wrote: > > Hi, FreeIPA and SSSD communities! > > > > I am working on adding URI to HBAC as my thesis [1]. The goal is to > > control access not only based on (user, host, service), bu

Re: [Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-26 Thread Simo Sorce
On Fri, 2016-02-26 at 13:17 +0100, Lukáš Hellebrandt wrote: > Hi, FreeIPA and SSSD communities! > > I am working on adding URI to HBAC as my thesis [1]. The goal is to > control access not only based on (user, host, service), but on (user, > host, service, resource's URI). > > I created a patch f

Re: [Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-26 Thread Martin Kosek
Greetings, welcome! On 02/26/2016 01:17 PM, Lukáš Hellebrandt wrote: ... > Btw, is there some better place to share patches than a pasting tool? > Maybe some form of pull request? There is :-) Please see advise here: http://www.freeipa.org/page/Contribute/Code#Submit_a_patch It has more informa