Commit - SSSD/sssd - 6c564d20a021016cf8d08fea2c57f40590a71178

SSSD / sssd

`6c564d2` IPA: Remove sshPublicKey attribute when it's not set

1 file Authored by fidencio 6 years ago, Committed by lslebodn 6 years ago,

raw patch tree parent

1 file changed. 13 lines added. 2 lines removed.

    IPA: Remove sshPublicKey attribute when it's not set
    
    Similary to what has been for the SSSD's server, we have to explicitly
    remove the 'sshPublicKey' attribute from an override in case it's not
    set, otherwise we may end up in a situation where a ssh key is removed
    from IPA but it'll still be present in the SSSD's client cache, allowing
    then users to ssh to a machine even having a key that has already been
    removed from IPA.
    
    Related: https://pagure.io/SSSD/sssd/issue/3602
    
    Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>
    (cherry picked from commit 56f015ef6a161e01681f79e4ea0d1b642f9737b4)

src/providers/ipa/ipa_s2n_exop.c

file modified

+13 -2

SSSD / sssd

Source Code

Documentation

6c564d2 IPA: Remove sshPublicKey attribute when it's not set

1 file Authored by fidencio 6 years ago, Committed by lslebodn 6 years ago,

`6c564d2` IPA: Remove sshPublicKey attribute when it's not set