Commit - SSSD/sssd - 56f015ef6a161e01681f79e4ea0d1b642f9737b4

lslebodn / SSSD / sssd

Forked from SSSD/sssd 7 years ago

Source
Stats

`56f015e` IPA: Remove sshPublicKey attribute when it's not set

1 file Authored by fidencio 6 years ago, Committed by jhrozek 6 years ago,

raw patch tree parent

1 file changed. 13 lines added. 2 lines removed.

src/providers/ipa/ipa_s2n_exop.c

file modified

+13 -2

    IPA: Remove sshPublicKey attribute when it's not set
    
    Similary to what has been for the SSSD's server, we have to explicitly
    remove the 'sshPublicKey' attribute from an override in case it's not
    set, otherwise we may end up in a situation where a ssh key is removed
    from IPA but it'll still be present in the SSSD's client cache, allowing
    then users to ssh to a machine even having a key that has already been
    removed from IPA.
    
    Related: https://pagure.io/SSSD/sssd/issue/3602
    
    Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>

src/providers/ipa/ipa_s2n_exop.c

file modified

+13 -2

lslebodn / SSSD / sssd

Source Code

56f015e IPA: Remove sshPublicKey attribute when it's not set

1 file Authored by fidencio 6 years ago, Committed by jhrozek 6 years ago,

`56f015e` IPA: Remove sshPublicKey attribute when it's not set