On Thu, 2010-07-01 at 13:20 -0700, Jim Richardson wrote: > see attached patch. Apologies if patch incorrectly formatted, this is > my first patch submission :P > > I am pretty sure that delegation logging is broken in this, as we > don't use delegation, and I have difficulty testing it. > I'm not really in love with this patch for a couple of reasons: 1. the vertical whitespace/newlines you clipped out for no obvious reason 2. the way the data is packed onto the tail end of what we're already passing - I think it would probably be better to get this info out of the certificate DN that's connecting and use custom certs per-user to isolate who is running what. Otherwise we're just believing whatever we happen to be told by the overlord about who is running what and that seems...... dodgy. Thoughts? -sv _______________________________________________ Func-list mailing list Func-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/func-list
