sssd-devel August 2009

sssd-devel@lists.fedorahosted.org

11 participants
80 discussions

[PATCHES] python bindings for managing users in local domains
by Jakub Hrozek 21 Sep '09

21 Sep '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Attached are three patches. [PATCH 1/3] Refactor tools code Refactores tools code while still retaining the original structure. Move parameter parsing in tools before attempting to do anything that might fail - so that we have debug_level set correctly for potential error messages. That allows printing the --help and --usage messages without being root. [PATCH 2/3] Decouple synchronous sysdb interface from tools Instead of working directly with async code in tools, create synchronous wrappers that could be used by tools and python bindings. [PATCH 3/3] Provide python bindings for sysdb Implement a set of python bindings for the sysdb with feature set similar to what is available in the tools. The primary consumers would be applications like system-config-users. These three patches resolve tickets 102, 87 and 95. Jakub -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkqNx4UACgkQHsardTLnvCXWSQCgyVRBOCQOPr1Wltg6Kv9/7Bxk C9AAmwcvhQ2VxUeG4uMklgJT19cTzw6L =l7DI -----END PGP SIGNATURE-----

4 23

[PATCH] add change password target to krb5 backend
by Sumit Bose 11 Sep '09

11 Sep '09

Hi, this patch adds the change password support for the kerberos backend. I wonder if we want to support password reset by root via kerberos, i.e. allow root to change a user's password if a krb5 ticket with the needed privileges is available? bye, Sumit

2 3

[PATCH] fix DBusWatch handling
by Simo Sorce 10 Sep '09

10 Sep '09

After some playing around with Stephen patch and adding some debugging I finally understood how DBUS likes to deal with watches. We erroneously assumed that DBUS would add only one watch per FD. It doesn't, instead it always adds 2 watches. One to catch read events and one to catch write events. It then proceed to always keep one of the 2 disabled when the other is enabled, and it always toggles both when it needs to reverse access to the file descriptor. The following patch keeps track of sbus-watches/fd pairs and allocate both DBusWatches to the same structure. So far testing seem to confirm this approach works as expected. Simo. -- Simo Sorce * Red Hat, Inc * New York

3 3

[PATCH] Add support for the EntryCacheNoWaitRefreshTimeout
by Stephen Gallagher 09 Sep '09

09 Sep '09

This timeout specifies the lifetime of a cache entry before it is updated out-of-band. When this timeout is hit, the request will still complete from cache, but the SSSD will also go and update the cached entry in the background to extend the life of the cache entry and reduce the wait time of a future request. Support for the EnumCacheNoWaitRefreshTimeout is still forthcoming, but I wanted to get a formal review on this portion. -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/

2 9

[PATCH] ELAPI sinks and providers
by Dmitri Pal 08 Sep '09

08 Sep '09

Please see the patch comment. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/

3 10

New Try to build SSSD on Karmic both as of 2009.08.04
by Miguel P.C. 08 Sep '09

08 Sep '09

Hi Stephen, hello everyone, I installed the two libraries you said: * docbook-xsl * libxml2-utils And also the ones indicated before: * libtalloc-dev * tdb-dev * libtevent-dev * libldb-dev * cvs * libpopt-dev * libpam-dev * libldap2-dev * libpcre3-dev * krb5-config * libkrb5-dev * libc-ares-dev * libdbus-1-dev * libnss3-dev Hit configure once more: ./configure --prefix=/opt/sssd | tee ../configure.12.log ... and then make: make | tee ../make.1.log I still get the same problem. Seems to be an ldap build dep that doesnt work fine. Do we need 389DS libs to build it? I attach logs. M*

5 14

contribution policy work
by Karsten Wade 31 Aug '09

31 Aug '09

In the process of working on the FreeIPA contribution policy, I am breaking out a separate discussion around SSSD. The goal is to set a contribution policy that the developers of SSSD are happy with, with whatever caveats we have gathered from our lawyer friends. Stephen has been looking in to the question of how to license SSSD contributions, right? I wanted to get us thinking about how to apply those eventual results against a contribution policy. Here are the two drafts I have written for FreeIPA: http://freeipa.org/page/User:Quaid/Contribution_policy_(draft)#License-spec… http://freeipa.org/page/User:Quaid/Contribution_policy_(draft)#License-agno… These are fairly close to being generic enough for use by another project. Both have an "acceptable" stamp from Richard Fontana, depending on what the developers want. The thread with more details about why that policy is written that way is here: https://www.redhat.com/archives/freeipa-devel/2009-August/msg00024.html One thing I think is interesting here is, the lawyer is asking the developers who know the current community, "What is right for you?" I'm not sure if that is normal, but as a community organizer type, I think it is approaching the question from the right direction. :) - Karsten -- Karsten 'quaid' Wade, Community Gardener http://quaid.fedorapeople.org AD0E0C41

1 0

[PATCH] Turn enumeration parameter to boolean
by Simo Sorce 31 Aug '09

31 Aug '09

Since we enumerate in background and use the member/memberof scheme you can't do group enumerations without also doing a user enumeration first. So turn the enumeration option into a boolean with warnings if the old syntax is used. Simo. -- Simo Sorce * Red Hat, Inc * New York

3 4

INI and ELAPI tickets
by Dmitri Pal 28 Aug '09

28 Aug '09

Hi, I have opened several tickets regarding ELAPI and INI. They are tickets 140-143. Please take a look. Note the priorities. Comments and suggestions are welcome. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/

1 0

[PATCH] check if gid attribute is empty
by Sumit Bose 28 Aug '09

28 Aug '09

Hi, this patch just makes sure that the LDAP backend does not die if the group object returned by the LDAP server does not contain a gid. In a previous patch I have sent the same fix for uid/gid in a returned user object, but have forgotten the group object. bye, Sumit

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel August 2009