Commit - SSSD/sssd - d0d3631242178f0b6fccf08baeca1a57f28771fa

lslebodn / SSSD / sssd

Forked from SSSD/sssd 7 years ago

Source
Stats

`d0d3631` SYSDB_VIEWS: Remove sshPublicKey attribute when it's not set

1 file Authored by fidencio 6 years ago, Committed by jhrozek 6 years ago,

raw patch tree parent

1 file changed. 13 lines added. 1 lines removed.

src/db/sysdb_views.c

file modified

+13 -1

    SYSDB_VIEWS: Remove sshPublicKey attribute when it's not set
    
    We have to explicitly remove 'sshPublicKey' attribute from an override
    in case it's not set, otherwise we may ended up in a situation where a
    ssh key is removed from IPA but it'll still be present in SSSD's server
    cache, allowing then users to ssh to a machine even having a key that
    has already been removed from IPA.
    
    Related: https://pagure.io/SSSD/sssd/issue/3602
    
    Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>

src/db/sysdb_views.c

file modified

+13 -1

lslebodn / SSSD / sssd

Source Code

d0d3631 SYSDB_VIEWS: Remove sshPublicKey attribute when it's not set

1 file Authored by fidencio 6 years ago, Committed by jhrozek 6 years ago,

`d0d3631` SYSDB_VIEWS: Remove sshPublicKey attribute when it's not set