[Freeipa-devel] [PATCH] 854 Add ftp HBAC services

Rob Crittenden rcritten at redhat.com
Thu Aug 25 12:31:35 UTC 2011


Alexander Bokovoy wrote:
> On 25.08.2011 00:35, Rob Crittenden wrote:
>> Add a few more ftp HBAC services. This adds vsftpd, proftpd, pure-ftpd
>> and gssftp. An HBAC service equates to a pam service and since there is
>> no Linux ftp daemon that uses ftp as its service name it wasn't very
>> useful.
>>
>> I added a ftp HBAC service group to tie them all together.
> ACK


pushed to master and ipa-2-1

>
> What about other services? There are 'sudo', 'sudo-i', 'su', 'su-l',
> 'runuser', 'runuser-l' in Fedora which represent 'sudo' and 'su', and
> 'runuser' and dash-variants are used when launched with appropriate
> options.
>
> For gdm there are gdm{,-autologin,-fingerprint,-password} which are
> different PAM services to use with different GDM options.
>
> I think is is worth to create HBAC service groups for them as well but
> this is clearly distribution-dependent behaviour.




More information about the Freeipa-devel mailing list