[PATCH] Clarify nscd warning
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Removes the level-zero DEBUG message and modifies the syslog
message to explain that NSCD is safe for maps that SSSD does not
(yet) support.
Fixes https://fedorahosted.org/sssd/ticket/774
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk00aTkACgkQeiVVYja6o6NY+wCfTul8B1RT8d+WvSfHTCXKGSxY
NZ8AoKFaXpQ0/xjwrLSIZqYQGQN4JqIv
=bOnL
-----END PGP SIGNATURE-----
13 years, 3 months
[PATCH] Add ldap_search_enumeration_timeout config option
by Sumit Bose
Hi,
these two patches add a feature we already had in 1.2 but missed to part
forward, different timeouts for single user/group searches and
enumerations.
The first patch refactors the current code so that different timeout can
be send to the generic search routine sdap_get_generic_send(). The
second patch add the new option ldap_enumeration_search_timeout, which
defaults to 60s, and sets the default for ldap_search_timeout to 6s. The
new timeout is used by user and group enumerations and by the IPA access
provider to load services, HBAC rules etc.
Hopefully this patch will fix some of the reported delays when working
without connection to the LDAP server or after suspend/resume.
bye,
Sumit
13 years, 3 months
Fwd: [Transifex] File submitted via email to SSSD | master-docs
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- -------- Original Message --------
Subject: [Transifex] File submitted via email to SSSD | master-docs
Date: Sat, 08 Jan 2011 08:51:11 -0000
From: transifex-app(a)fedoraproject.org
To: sgallagh(a)fedoraproject.org
Hello sgallagh, this is Transifex at http://translate.fedoraproject.org/tx/.
The following attached files were submitted to SSSD | master-docs by
yurchor <yurchor(a)fedoraproject.org>
Please, visit Transifex at
http://translate.fedoraproject.org/tx//projects/p/sssd/c/master-docs/ in
order to see the component page.
Thank you,
Transifex
Three patches from Yuri Chornoivan:
Patch 0001: Apply the translation submitted in this original email to
Transifex
Ack.
Patch 0002: Apply the patch from
https://bugzilla.redhat.com/show_bug.cgi?id=668144 provided by Yuri to
correct several typos in our manpage.
Ack
Patch 0003: Regenerate the po[t] files. (This patch was generated
automatically by 'make dist')
Ack
Pushed to master.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk0wsIkACgkQeiVVYja6o6NltgCdER2NgSJQMysR8kHdbrmRL4hY
FiYAoK0IeiPBJ4tIIDdFBcJNWg5vDQW/
=rwJM
-----END PGP SIGNATURE-----
13 years, 3 months
[PATCHES] Fixes for netgroup processing
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Patch 0001: Do not throw a DP error when a netgroup is not found
Fixes https://fedorahosted.org/sssd/ticket/775
Patch 0002: Fix missing hash table bug
When the automatic cleanup happened, if the netgroup had been
created with no contents (to indicate an unknown netgroup), we
weren't saving the hash table address and the talloc_free() was
failing.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk0wbz0ACgkQeiVVYja6o6PK+ACaAzCOXUv0P+VFZtbEfl+ClwHF
tOsAn2gNxSs/yTZkeJAxHWZ8FF7GuBUL
=6F8h
-----END PGP SIGNATURE-----
13 years, 3 months
[PATCH] Add missing sysdb transaction to group enumerations
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
We were not enclosing group processing in a transaction, which was
resulting in extremely high numbers of disk-writes. This patch
adds a transaction around the sdap_process_group code to ensure
that these actions take place within a transaction.
This should be safe, because during an enumeration, all users
should now be in the sysdb, so we won't need to go back to the
LDAP server for missing members.
On my testing LDAP server, with ~5000 users and ~6100 groups of varying
size, I measured a performance improvement on enumeration from
4-5minutes (with the ONELEVEL patch also on the list) down to < 10s with
this patch.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk0ncZ4ACgkQeiVVYja6o6MtEwCbB7NxBHvHBFdle0oa6utXKKar
1eQAn2vfyEET5Xilo+JnmrQ0t/UfgmfK
=CnnL
-----END PGP SIGNATURE-----
13 years, 3 months
[PATCH] Work around libldb bug
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Libldb performs non-indexed searches for ONELEVEL requests. We'll
use SUBTREE instead to reduce the performance hit substantially
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk0nTJgACgkQeiVVYja6o6NA7gCgjjGTzjYRRgHMGddg02ScsSzA
M9wAoIa1Uv2LjV5U7YzZLe1rdLqIuWCd
=x7I7
-----END PGP SIGNATURE-----
13 years, 3 months
[PATCH] Enable one level indexes
by Simo Sorce
This patch enables the one level indexes if they are missing.
Enabling them will cause a re-indexing operation that generates these
indexes.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
13 years, 3 months
SSSD Long-term Maintenance Policy
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The System Security Services Daemon is quickly becoming a key feature in
several GNU/Linux distributions. As such, we need to have a formal
maintenance policy in place. Currently, we have several branches that we
are maintaining (or not), with no clear vision to the distribution
packagers regarding which version to use.
Our plan moving forward is to designate certain releases as Long-term
Maintenance (LTM) releases. For these releases, we will commit to bugfix
patches until the next LTM release. After that period, LTM releases will
be declared EOL, but will still get critical security fixes as needed
for up to one year.
We will continue to make non-LTM releases in between as we added new
functionality. These releases will be more frequent than LTM releases,
and are intended for those users who want newer functionality faster.
This would be ideal for distributions such as Fedora and Ubuntu, which
move quickly.
LTM releases will be intermittent and will receive a larger degree of
testing than our standard releases. This would be targeted more at
releases like Red Hat Enterprise Linux and SUSE which require a longer
commitment.
With this in mind, we plan to declare SSSD 1.5.x to be the first
official long-term maintenance release, with SSSD 1.2.x having been the
previous unofficial LTM release.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk0rdlUACgkQeiVVYja6o6OjRwCfX84KbVemZQ50jx/osLnm8XoJ
y/YAnRn5+eGKze8FSvGcZncLLF1hS4AA
=pDm3
-----END PGP SIGNATURE-----
13 years, 3 months
