diff options
| author | Jan Zeleny <jzeleny@redhat.com> | 2011-11-04 13:16:47 -0400 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2012-08-21 12:12:35 +0200 |
| commit | 49c06899c6b8e06fa0c371dbd8a16ead32c651d9 (patch) | |
| tree | 535b5ee29705c3d943e54609498aaedd5bf815b5 /src/providers/ipa/ipa_hbac_common.c | |
| parent | ee0a1b3f94846fb19fbe3b72304d7ea2c989669c (diff) | |
| download | sssd-49c06899c6b8e06fa0c371dbd8a16ead32c651d9.tar.gz sssd-49c06899c6b8e06fa0c371dbd8a16ead32c651d9.tar.xz sssd-49c06899c6b8e06fa0c371dbd8a16ead32c651d9.zip | |
Add ipa_hbac_support_srchost option to IPA provider
don't fetch all host groups if this option is false
https://fedorahosted.org/sssd/ticket/1078
Diffstat (limited to 'src/providers/ipa/ipa_hbac_common.c')
| -rw-r--r-- | src/providers/ipa/ipa_hbac_common.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_hbac_common.c b/src/providers/ipa/ipa_hbac_common.c index e362606e9..265b35f16 100644 --- a/src/providers/ipa/ipa_hbac_common.c +++ b/src/providers/ipa/ipa_hbac_common.c @@ -346,11 +346,14 @@ hbac_attrs_to_rule(TALLOC_CTX *mem_ctx, } /* Get the source hosts */ + ret = hbac_shost_attrs_to_rule(new_rule, hbac_ctx_sysdb(hbac_ctx), hbac_ctx_be(hbac_ctx)->domain, new_rule->name, hbac_ctx->rules[idx], + dp_opt_get_bool(hbac_ctx->ipa_options, + IPA_HBAC_SUPPORT_SRCHOST), &new_rule->srchosts); if (ret != EOK) { DEBUG(1, ("Could not parse source hosts for rule [%s]\n", |