sssd-devel April 2011

sssd-devel@lists.fedorahosted.org

11 participants
47 discussions

[PATCH] Don't use negative cache in netgroup lookup
by Jan Zelený 25 Apr '11

25 Apr '11

In responder a negative cache is used to indicate that the record has not been found by previous lookup. This approach is however not applicable for netgroup lookup because the design of their lookup is a little different. This patch removes some pieces of code working with negative cache, because they didn't fuction well. Instead a new flag has been added to the positive cache. This flag indicates if the record in the cache is a record of existing netgroup or it's just a placeholder. https://fedorahosted.org/sssd/ticket/820 Jan

2 5

[PATCH] Allow new option to specify principal for FAST
by Jan Zelený 25 Apr '11

25 Apr '11

I'm not entirely sure if I got the feature request right but in case I didn't I have already another patch prepared. https://fedorahosted.org/sssd/ticket/700 Jan

2 8

[PATCH] Move and extend function for finding principal in keytab
by Jan Zelený 25 Apr '11

25 Apr '11

This functionality will be required in tickets #781 and #700. Jan

2 8

Announcing the release of SSSD 1.5.6.1
by Stephen Gallagher 20 Apr '11

20 Apr '11

Hot on the heels of SSSD 1.5.6 comes 1.5.6.1. The tarball for SSSD 1.5.6 was generated incorrectly and did not contain the translations for the manpages. SSSD 1.5.6.1 contains no other changes. As always, it can be downloaded at https://fedorahosted.org/sssd

1 0

Announcing the release of SSSD 1.5.6
by Stephen Gallagher 20 Apr '11

20 Apr '11

The SSSD team is proud to announce the release of the version 1.5.6 bugfix release of the System Security Services Daemon. This release fixes a few serious issues and is a recommended update for all users of the 1.5.x series. As always, it can be downloaded at https://fedorahosted.org/sssd == Highlights == * Fixed a serious memory leak in the memberOf plugin * Fixed a regression with the negative cache that caused it to be essentially nonfunctional * Fixed an issue where the user's full name would sometimes be removed from the cache * Fixed an issue with password changes in the kerberos provider not working with kpasswd == Detailed Changelog == Simo Sorce (2): * memberof: fix calculation of replaced members * memberof: free delete operation payload once done Stephen Gallagher (7): * Never remove gecos from the sysdb cache * Do not throw a DP error when failing to delete a nonexistent entity * Add debug logging to the negative cache * Fix a regression with the negative cache in multi-domain configurations * Fix regression where nonexistent entries were never added to the negative cache * Bumping version to 1.5.6 * Always generate kpasswdinfo file

1 0

[PATCH] Always generate kpasswdinfo file
by Stephen Gallagher 19 Apr '11

19 Apr '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Previously, we only generated it when performing a password change, but this didn't play nicely with kpasswd. Resolves https://bugzilla.redhat.com/show_bug.cgi?id=697057 - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk2sVNMACgkQeiVVYja6o6PEJgCgkakcS9PlmuLM1WeWSI9AETWx 0uUAnjCukX9TBQmF9dDu4Lj7LC9KrpQi =qlsx -----END PGP SIGNATURE-----

2 2

[PATCH] Add user and group search LDAP filter options
by Jakub Hrozek 19 Apr '11

19 Apr '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have a couple of smaller patches in the backlog from when I had a spare moment here and there but not enough to dive into a big feature. https://fedorahosted.org/sssd/ticket/647 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk2axY0ACgkQHsardTLnvCUlcQCfaG5frjF4afsVdh5YCujoQtt7 DC8An1SHYR4jStOZs7n7g1+dUA2gjzWW =gefB -----END PGP SIGNATURE-----

3 9

[PATCHES] Fix regressions in the negative cache
by Stephen Gallagher 15 Apr '11

15 Apr '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Patch 0001: Add debug logging to the negative cache Patch 0002: If a fully-qualified user or group was specified, we were falling through to a remote lookup regardless of the return value of the negative cache check. This patch ensures that we return ENOENT. Patch 0003: We were never adding new negative cache entries on failure because we were continuing on to the next domain in the chain before calling sss_ncache_set_*(). This patch ensures that we set the negative cache for the current domain appropriately. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk2oSdUACgkQeiVVYja6o6P8qwCePyCGuPsj4cn1cJ9+qWo9GgKa qfIAoJpIjKtwu34aC2es0L4xUdZBMXMq =RuFW -----END PGP SIGNATURE-----

2 2

[PATCH] Do not throw a DP error when failing to delete a nonexistent user
by Stephen Gallagher 15 Apr '11

15 Apr '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 When processing a request for a nonexistent user, we were returning a DP error when sysdb_delete_user() or sysdb_delete_group() returned ENOENT. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk2oSOsACgkQeiVVYja6o6OdTACeNuMEnVF/xbNRE4c+UWoSBN01 748Aniic1Gjn8NtiV3JK+0cUKLTOKfDF =QZum -----END PGP SIGNATURE-----

2 2

[PATCHES] Fixes for sysdb_domain_init_internal()
by Stephen Gallagher 15 Apr '11

15 Apr '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Patch 0001: Don't leak memory if sysdb_domain_init() fails This patch ensures we clean up the memory for the sysdb_ctx if we exit on failure. Patch 0002: Run all appropriate upgrades Previously, if we were upgrading from version 0.4 or older, we would only run sysdb_upgrade_04() and exit, instead of also running sysdb_upgrade_05(). Patch 0003: Reopen the LDB after modifying it If we change any of the special entries such as indexes or plugins, we need to close and reopen the LDB to ensure that they take effect. Note: Patch 0003 was still safe in the SSSD daemon right now, as we always pre-create the sysdb caches in the monitor and close it before the backends start, but it was causing some trouble with the tests if we were only running a subset that required memberOf. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk2mBVcACgkQeiVVYja6o6NtsQCgkTHJoJIexCFxl/1AwGw4R3uI wTQAmgOffeltYDkff4b1roqiJOBu91cr =kbIH -----END PGP SIGNATURE-----

2 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel April 2011