URL: https://github.com/SSSD/sssd/pull/5611 Author: sumit-bose Title: #5611: man: clarify priority in sss-certmap man page Action: opened
PR body: """ Explain in the man page what is expected when two or more mapping and matching rules have the same priority. Resolves: https://github.com/SSSD/sssd/issues/4415 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5611/head:pr5611 git checkout pr5611
From 14af67ef744f19410713f7fece8a360bc9322ac4 Mon Sep 17 00:00:00 2001 From: Sumit Bose <sb...@redhat.com> Date: Tue, 27 Apr 2021 15:44:32 +0200 Subject: [PATCH] man: clarify priority in sss-certmap man page Explain in the man page what is expected when two or more mapping and matching rules have the same priority. Resolves: https://github.com/SSSD/sssd/issues/4415 --- src/man/sss-certmap.5.xml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/man/sss-certmap.5.xml b/src/man/sss-certmap.5.xml index 09aec997c1..5f3d5a3bc6 100644 --- a/src/man/sss-certmap.5.xml +++ b/src/man/sss-certmap.5.xml @@ -52,6 +52,14 @@ Internally the priority is treated as unsigned 32bit integer, using a priority value larger than 4294967295 will cause an error. </para> + <para> + If multiple rules have the same priority and only one of the related + matching rules applies this rule will be chosen. If there are + multiple rules with the same priority which matches one is chosen + but which one is undefined. To avoid this undefined behavior either + use different priorities or make the matching rules more specific + e.g. by using distinct <ISSUER> patterns. + </para> </refsect2> <refsect2 id='match'> <title>MATCHING RULE</title>
_______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
