[Freeipa-devel] [PATCH] 530 trust plugin: Fix typo in attribute name

Petr Viktorin pviktori at redhat.com
Fri Apr 18 11:55:58 UTC 2014


On 04/17/2014 10:12 PM, Alexander Bokovoy wrote:
> On Thu, 17 Apr 2014, Simo Sorce wrote:
>> On Thu, 2014-04-17 at 20:30 +0200, Martin Kosek wrote:
>>> On 04/17/2014 07:11 PM, Petr Viktorin wrote:
>>> > Hello,
>>> > While working on the trust permissions I found a typo in the
>>> > 'ipanttrustauthoutgoing' attribute in default_attributes. Here is a
>>> fix.
>>> >
>>>
>>> I think the right question to ask - do we want to have
>>> ipanttrustauth{incoming,outgoing} in default attributes?
>>>
>>> I do not think so. It is supposed to hold a secret for the trust, I
>>> do not
>>> think you want it displayed on your terminal by default - even if you
>>> have a
>>> right to display it.
>>
>> Yep, should not be returned by default to any command line utility.
> Agreed. I wanted to remove it too the other day but forgot to file a
> ticket.
>

I see.
Here is a patch to remove them.

-- 
Petr³

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0530.2-trust-plugin-Remove-ipatrustauth-incoming-outgoing-f.patch
Type: text/x-patch
Size: 1603 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140418/046836d6/attachment.bin>


More information about the Freeipa-devel mailing list