#3528 [RFE] Remove support of the source host from the HBAC on the server side both from UI and CLI
Closed: Fixed None Opened 11 years ago by mkosek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 6): Bug 924542

The original set of requirements for IPA and SSSD included the requirement to
factor in the source host of the connection in the hoist based access control
decisions. Unfortunately the actual implementation showed that it can't be done
reliably because source host information is not consistently passed through the
stack to the component that needs to make a decision. As a result the
implementation suffered failures that were hard to troubleshoot and/or avoid.
As a result the client side SSSD made a decision to deprecate the support of
source host. However the server side - IPA still allows defining rules that
include source host.

This bug calls for deprecation/removal of the support of the source host in
IPA, both in UI and CLI. It is very confusing and should be removed as soon as
possible.

master:[[br]]
b8b573a[[br]]
d032555[[br]]
39982f6[[br]]

ipa-3-1:[[br]]
0d5e310[[br]]
592db35[[br]]
e7954e2[[br]]

Metadata Update from @mkosek:
- Issue assigned to akrivoka
- Issue set to the milestone: FreeIPA 3.2 - 2013/04 (Beta)

7 years ago

Login to comment on this ticket.

Metadata