From b3d761fb187f08d910df0bee420e9ed3b23d035f Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Thu, 6 Feb 2014 12:33:43 +0100 Subject: [PATCH 44/46] Remove sourcehostcategory from the default HBAC rule. https://fedorahosted.org/freeipa/ticket/4158 Reviewed-By: Martin Kosek --- install/share/default-hbac.ldif | 1 - ipalib/plugins/hbacrule.py | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/install/share/default-hbac.ldif b/install/share/default-hbac.ldif index b7b6ba28453b867fa142d038b1e35e162dac800f..52fd30ec9ac4e01f68d9cc6a94fb4cc15177e10b 100644 --- a/install/share/default-hbac.ldif +++ b/install/share/default-hbac.ldif @@ -7,7 +7,6 @@ dn: accessruletype: allow usercategory: all hostcategory: all -sourcehostcategory: all servicecategory: all ipaenabledflag: TRUE description: Allow all users to access any host from any host diff --git a/ipalib/plugins/hbacrule.py b/ipalib/plugins/hbacrule.py index 5cc8bc1a34de38ce5c5f6faf8ea24ee6873bf0b7..daf165346ba67c6525f7ab2034519c7a03fd3394 100644 --- a/ipalib/plugins/hbacrule.py +++ b/ipalib/plugins/hbacrule.py @@ -118,7 +118,7 @@ class hbacrule(LDAPObject): default_attributes = [ 'cn', 'ipaenabledflag', 'description', 'usercategory', 'hostcategory', - 'sourcehostcategory', 'servicecategory', 'ipaenabledflag', + 'servicecategory', 'ipaenabledflag', 'memberuser', 'sourcehost', 'memberhost', 'memberservice', 'memberhostgroup', 'externalhost', ] -- 1.8.5.3