[PATCHES] python bindings for managing users in local domains
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Attached are three patches.
[PATCH 1/3] Refactor tools code
Refactores tools code while still retaining the original structure.
Move parameter parsing in tools before attempting to do anything that
might fail - so that we have debug_level set correctly for potential
error messages. That allows printing the --help and --usage messages
without being root.
[PATCH 2/3] Decouple synchronous sysdb interface from tools
Instead of working directly with async code in tools, create synchronous
wrappers that could be used by tools and python bindings.
[PATCH 3/3] Provide python bindings for sysdb
Implement a set of python bindings for the sysdb with feature set
similar to what is available in the tools. The primary
consumers would be applications like system-config-users.
These three patches resolve tickets 102, 87 and 95.
Jakub
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkqNx4UACgkQHsardTLnvCXWSQCgyVRBOCQOPr1Wltg6Kv9/7Bxk
C9AAmwcvhQ2VxUeG4uMklgJT19cTzw6L
=l7DI
-----END PGP SIGNATURE-----
14 years
[PATCH] add change password target to krb5 backend
by Sumit Bose
Hi,
this patch adds the change password support for the kerberos backend.
I wonder if we want to support password reset by root via kerberos, i.e.
allow root to change a user's password if a krb5 ticket with the needed
privileges is available?
bye,
Sumit
14 years
[PATCH] fix DBusWatch handling
by Simo Sorce
After some playing around with Stephen patch and adding some debugging I
finally understood how DBUS likes to deal with watches.
We erroneously assumed that DBUS would add only one watch per FD.
It doesn't, instead it always adds 2 watches.
One to catch read events and one to catch write events.
It then proceed to always keep one of the 2 disabled when the other is
enabled, and it always toggles both when it needs to reverse access to
the file descriptor.
The following patch keeps track of sbus-watches/fd pairs and allocate
both DBusWatches to the same structure.
So far testing seem to confirm this approach works as expected.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years
[PATCH] Add support for the EntryCacheNoWaitRefreshTimeout
by Stephen Gallagher
This timeout specifies the lifetime of a cache entry before it is
updated out-of-band. When this timeout is hit, the request will
still complete from cache, but the SSSD will also go and update
the cached entry in the background to extend the life of the
cache entry and reduce the wait time of a future request.
Support for the EnumCacheNoWaitRefreshTimeout is still forthcoming, but
I wanted to get a formal review on this portion.
--
Stephen Gallagher
RHCE 804006346421761
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
14 years
New Try to build SSSD on Karmic both as of 2009.08.04
by Miguel P.C.
Hi Stephen, hello everyone,
I installed the two libraries you said:
* docbook-xsl
* libxml2-utils
And also the ones indicated before:
* libtalloc-dev
* tdb-dev
* libtevent-dev
* libldb-dev
* cvs
* libpopt-dev
* libpam-dev
* libldap2-dev
* libpcre3-dev
* krb5-config
* libkrb5-dev
* libc-ares-dev
* libdbus-1-dev
* libnss3-dev
Hit configure once more:
./configure --prefix=/opt/sssd | tee ../configure.12.log
... and then make:
make | tee ../make.1.log
I still get the same problem. Seems to be an ldap build dep that doesnt
work fine. Do we need 389DS libs to build it?
I attach logs.
M*
14 years
contribution policy work
by Karsten Wade
In the process of working on the FreeIPA contribution policy, I am
breaking out a separate discussion around SSSD. The goal is to set a
contribution policy that the developers of SSSD are happy with, with
whatever caveats we have gathered from our lawyer friends.
Stephen has been looking in to the question of how to license SSSD
contributions, right?
I wanted to get us thinking about how to apply those eventual results
against a contribution policy. Here are the two drafts I have written
for FreeIPA:
http://freeipa.org/page/User:Quaid/Contribution_policy_(draft)#License-sp...
http://freeipa.org/page/User:Quaid/Contribution_policy_(draft)#License-ag...
These are fairly close to being generic enough for use by another
project. Both have an "acceptable" stamp from Richard Fontana,
depending on what the developers want. The thread with more details
about why that policy is written that way is here:
https://www.redhat.com/archives/freeipa-devel/2009-August/msg00024.html
One thing I think is interesting here is, the lawyer is asking the
developers who know the current community, "What is right for you?"
I'm not sure if that is normal, but as a community organizer type, I
think it is approaching the question from the right direction. :)
- Karsten
--
Karsten 'quaid' Wade, Community Gardener
http://quaid.fedorapeople.org
AD0E0C41
14 years, 1 month
[PATCH] Turn enumeration parameter to boolean
by Simo Sorce
Since we enumerate in background and use the member/memberof scheme you
can't do group enumerations without also doing a user enumeration first.
So turn the enumeration option into a boolean with warnings if the old
syntax is used.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 1 month
INI and ELAPI tickets
by Dmitri Pal
Hi,
I have opened several tickets regarding ELAPI and INI.
They are tickets 140-143.
Please take a look. Note the priorities.
Comments and suggestions are welcome.
--
Thank you,
Dmitri Pal
Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
14 years, 1 month
[PATCH] check if gid attribute is empty
by Sumit Bose
Hi,
this patch just makes sure that the LDAP backend does not die if the
group object returned by the LDAP server does not contain a gid. In a
previous patch I have sent the same fix for uid/gid in a returned user
object, but have forgotten the group object.
bye,
Sumit
14 years, 1 month
