sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-12-21 20:23:50 +03:00
Code Activity

gp: PAM Access should implicitly deny ALL w/ allow

Browse Source 
If an allow entry is specified, the PAM Access
CSE should implicitly deny ALL (everyone other
than the explicit allow entries).

Signed-off-by: David Mulder <dmulder@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
This commit is contained in:
David Mulder
2022-11-17 16:33:24 -07:00
committed by Jeremy Allison
parent 9f6cf276e2
commit ca5f8072a4
2 changed files with 48 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
python/samba/netcmd/gpo.py
View File

@@ -3815,7 +3815,8 @@ class cmd_add_access(Command):
"""Adds a VGP Host Access Group Policy to the sysvol
This command adds a host access setting to the sysvol for applying to winbind
clients.
clients. Any time an allow entry is detected by the client, an implicit deny
ALL will be assumed.
Example:
samba-tool gpo manage access add {31B2F340-016D-11D2-945F-00C04FB984F9} allow goodguy example.com