Commit - SSSD/sssd - b5c3597d0a13256d381b60ba24838d64edfb68df

SSSD / sssd

`b5c3597` SYSDB_VIEWS: Remove sshPublicKey attribute when it's not set

1 file Authored by fidencio 6 years ago, Committed by lslebodn 6 years ago,

raw patch tree parent

1 file changed. 13 lines added. 1 lines removed.

    SYSDB_VIEWS: Remove sshPublicKey attribute when it's not set
    
    We have to explicitly remove 'sshPublicKey' attribute from an override
    in case it's not set, otherwise we may ended up in a situation where a
    ssh key is removed from IPA but it'll still be present in SSSD's server
    cache, allowing then users to ssh to a machine even having a key that
    has already been removed from IPA.
    
    Related: https://pagure.io/SSSD/sssd/issue/3602
    
    Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>
    (cherry picked from commit d0d3631242178f0b6fccf08baeca1a57f28771fa)

src/db/sysdb_views.c

file modified

+13 -1

SSSD / sssd

Source Code

Documentation

b5c3597 SYSDB_VIEWS: Remove sshPublicKey attribute when it's not set

1 file Authored by fidencio 6 years ago, Committed by lslebodn 6 years ago,

`b5c3597` SYSDB_VIEWS: Remove sshPublicKey attribute when it's not set