summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa/ipa_hbac_common.c
diff options
context:
space:
mode:
authorJan Zeleny <jzeleny@redhat.com>2011-11-04 13:16:47 -0400
committerStephen Gallagher <sgallagh@redhat.com>2011-11-29 14:21:08 -0500
commit6fb75e297bf7fc83e3db1f5ae8560624656ef319 (patch)
tree3c7fe79f6ffb5ab3c5403f71a5a08adbb09d5d3a /src/providers/ipa/ipa_hbac_common.c
parent6d99c0f5616969a999d78248565a47b18d40d472 (diff)
downloadsssd-6fb75e297bf7fc83e3db1f5ae8560624656ef319.tar.gz
sssd-6fb75e297bf7fc83e3db1f5ae8560624656ef319.tar.xz
sssd-6fb75e297bf7fc83e3db1f5ae8560624656ef319.zip
Add ipa_hbac_support_srchost option to IPA provider
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
Diffstat (limited to 'src/providers/ipa/ipa_hbac_common.c')
-rw-r--r--src/providers/ipa/ipa_hbac_common.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_hbac_common.c b/src/providers/ipa/ipa_hbac_common.c
index 88532302d..859b98403 100644
--- a/src/providers/ipa/ipa_hbac_common.c
+++ b/src/providers/ipa/ipa_hbac_common.c
@@ -333,10 +333,13 @@ hbac_attrs_to_rule(TALLOC_CTX *mem_ctx,
}
/* Get the source hosts */
+
ret = hbac_shost_attrs_to_rule(new_rule,
hbac_ctx_sysdb(hbac_ctx),
new_rule->name,
hbac_ctx->rules[idx],
+ dp_opt_get_bool(hbac_ctx->ipa_options,
+ IPA_HBAC_SUPPORT_SRCHOST),
&new_rule->srchosts);
if (ret != EOK) {
DEBUG(1, ("Could not parse source hosts for rule [%s]\n",