sssd-devel September 2009

sssd-devel@lists.fedorahosted.org

12 participants
104 discussions

[PATCH] INI Error handling and interface cleanup
by Dmitri Pal 15 Sep '09

15 Sep '09

See patch comment. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/

3 2

[PATCH] added child timeout handler
by Sumit Bose 15 Sep '09

15 Sep '09

Hi, this patch adds a timeout handling for the kerberos children. If a child needs omre then krb5auth_timeout seconds to send a response it is killed and the baclend is marked offline. bye, Sumit

2 1

[PATCH] fix the wrong usage of an offset
by Sumit Bose 14 Sep '09

14 Sep '09

Hi, I hadn't checked a last minute change properly with the result that the detection if mkstemp should be used or not is broken. This patch should fix this. bye, Sumit

2 1

Suggested version of sssd for proper openldap caching?
by Jeff Schroeder 14 Sep '09

14 Sep '09

What is the suggested version of sssd to use as a glorified nscd replacement for an openldap setup? I happened to notice that Ubuntu is using 0.5, but has cherry picked a few fixes. Will there be 0.5.x point releases or should I wait for 0.6? Are there any config gotchas? This will be on a Fedora client. -- Jeff Schroeder Don't drink and derive, alcohol and analysis don't mix. http://www.digitalprognosis.com

3 3

[PATCH] add krb5ccache_dir and krb5ccname_template option
by Sumit Bose 14 Sep '09

14 Sep '09

Hi, this patch add two new option to make the Kerberos provider of sssd more compatible with pam_krb5. bye, Sumit

2 1

[PATCH 1/3] Let the PAM client send its PID -- 2nd version
by Sumit Bose 14 Sep '09

14 Sep '09

Hi, this is the new version of the cli_pid patch with the missing size added. There are two related patches. 0002 removes the unused client locale. It was added at a time where we talked about generating all messages the client should display on the server side. Based on the previous discussion 0003 makes cli_pid a mandatory item in the pam protocol and increments the protocol version to 3. IMO it is not necessary to push it, but I wouldn't mind if you prefer it this way. bye, Sumit

2 2

[PATCH] Make offline status backend global
by Simo Sorce 14 Sep '09

14 Sep '09

With this patch all the backend providers can share the same offline status. This means composite backends like what AD or IPA will be that use a mix of ldap and krb can share the offline status for both protocols. A further extension might allow to have per protocol "online/offline" status, that will be done eventually when we integrate also the DNS discovery options. Tested with ldap_id+ldap_auth and ldap_id+krb5_auth Simo. -- Simo Sorce * Red Hat, Inc * New York

3 5

[PATCH] Make basic options typed
by Simo Sorce 14 Sep '09

14 Sep '09

This patch finally allows us to define the type for basic options. It uses a union to store different types, and an enum to list the allowed types. It also provides for helper functions that always check the type to safely retrieve data, or scream loudly if we messed up. This allowed me to remove all but 1 special option that was a duplicate made only to avoid converting from string to int every time we needed to get an option. The only remaining special case is the schema type, because that is a special string to special number transaltion. But these kind of options (another is tls_reqcert) are rare enough that we can avoid trying to make special handlers for them too. Currently there are 4 types supported: string, blob, number, boolean. String has 2 subtypes, const and non const, but they are not enforced (you can assign a const string and then re-read it as non-const). But this is not really a problem, as values are always copied in the init functions, furthermore, although you can get values as non-const they should always be regarded a immutable strings as the value returned is the actual string saved in the option, so changing it, means changing the configuration. I think we can later take this code and make it generic in the provider backend code, so that all backends can use it. It should be easy enough to do. Simo. -- Simo Sorce * Red Hat, Inc * New York

3 6

[PATCH] Let the PAM client send its PID
by Sumit Bose 13 Sep '09

13 Sep '09

Hi, with this patch the client sends its PID to sssd. This is at least needed by the krb5 provider if the client PID should be part of the credential cache file. bye, Sumit

3 9

[PATCHES] Two small patches to address minor issues with starting as non-root
by Stephen Gallagher 11 Sep '09

11 Sep '09

Patch 0001: Report specifically that the config database could not be opened (this was ambiguous if you tried to start SSSD and the user could not create the config database file) Patch 0002: Check whether monitor is being run as root, and exit with an error message if it is not (the same as the tools). -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/

2 1

← Newer
1
2
3
4
5
6
7
8
9
10
11
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel September 2009