Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 6): Bug 924542
The original set of requirements for IPA and SSSD included the requirement to factor in the source host of the connection in the hoist based access control decisions. Unfortunately the actual implementation showed that it can't be done reliably because source host information is not consistently passed through the stack to the component that needs to make a decision. As a result the implementation suffered failures that were hard to troubleshoot and/or avoid. As a result the client side SSSD made a decision to deprecate the support of source host. However the server side - IPA still allows defining rules that include source host. This bug calls for deprecation/removal of the support of the source host in IPA, both in UI and CLI. It is very confusing and should be removed as soon as possible.
master:[[br]] b8b573a[[br]] d032555[[br]] 39982f6[[br]]
ipa-3-1:[[br]] 0d5e310[[br]] 592db35[[br]] e7954e2[[br]]
Metadata Update from @mkosek: - Issue assigned to akrivoka - Issue set to the milestone: FreeIPA 3.2 - 2013/04 (Beta)
Login to comment on this ticket.