sssd-devel May 2011

sssd-devel@lists.fedorahosted.org

9 participants
49 discussions

[PATCH] Couple bugfixing patches
by Jan Zelený 16 May '11

16 May '11

Hi, I'm sending couple patches fixing bugs I found in the code today: jzeleny-020-fixed-debug-to-files.patch This error caused that monitor didn't pass --debug-to-files option to nss and pam services when creating them. jzeleny-021-fixed-wrong-variable.patch Current solution doesn't make any sense to me, I believe the original intention was as my patch suggests even though the line can be dropped entirely. Jan

3 2

[PATCH] Use a temporary memory context in expand_ccname_template
by Jakub Hrozek 13 May '11

13 May '11

We were leaking "dummy" and "copy" in expand_ccname_template. The attached patch switches to using a temporary memory context and only talloc_move the result on success.

3 4

[PATCH] Set c-ares to retry nameservers
by Jakub Hrozek 12 May '11

12 May '11

https://fedorahosted.org/sssd/ticket/867 channel->tries is only used when a query fails. We were forcibly setting it to 0, which meant we never retried another server.

2 4

SSSD - Configuration w/ 2008 R2
by Ben Kevan 11 May '11

11 May '11

I'm wondering what the heck I'm doing wrong. I'm working on getting SSSD + KRB5 working against 2008 R2 AD. It's working fine in RHEL5 w/ the standard LDAP.conf configuration. I'm working on sssd, but am not getting a binddn connection to AD. Here's my config: grep -vE '^#|^$' /etc/sssd/sssd.conf [sssd] config_file_version = 2 reconnection_retries = 3 sbus_timeout = 30 services = nss, pam domains = default [nss] filter_groups = root filter_users = root reconnection_retries = 3 [pam] reconnection_retries = 3 [domain/default] description = LDAP domain with AD server enumerate = false id_provider = ldap chpass_provider = krb5 ldap_uri = ldap://usherdc103.domain.com ldap://usherdc104.domain.com ldap_search_base = DC=Domain,DC=com ldap_tls_cacertdir = /etc/openldap/cacerts ldap_default_bind_dn = ldapbinddn(a)DOMAIN.COM ldap_default_authtok_type = password ldap_default_authtok = YAYYOUGOTME ldap_pwd_policy = none ldap_user_object_class = user ldap_group_object_class = group cache_credentials = True krb5_realm = DOMAIN.COM krb5_kdcip = usherdc103.domain.com,usherdc104.domain.com krb5_chanegpw_principle = kadmin/changepw wtf am I doing wrong, and is ldap for authentication better then krb5? or should I stick with ldap for authorization and krb5 for authentication? Thank you.

3 13

[PATCH] Do not leak netgroups hash table
by Jakub Hrozek 06 May '11

06 May '11

Nothing dangerous but still a leak

2 2

[PATCH] Remove unused constants from data_provider.h
by Jakub Hrozek 06 May '11

06 May '11

These constants were harmless, but unused

2 2

[PATCH] Add support for openldap24 package on RHEL 5.7
by Sumit Bose 06 May '11

06 May '11

Hi, this is a revised version of Stephen patch to support the openldap24 package on RHEL 5.7. I have moved the code to find the right include and library path into ldap.m4 and added a check in the spec file if the platform is RHEL 5.7 to allow the spec file to be used on older RHEL5 versions, too. This test is quite simple, but I think we can take care of RHEL 5.10 and later version if they are available. bye, Sumit

2 2

[PATCHES] Allow changing log-level without restarting SSSD
by Stephen Gallagher 06 May '11

06 May '11

These patches are dependent on the patch provided in my earlier email "Override config file debug_level with command-line" Patch 0002: Create common sss_monitor_init() This was implemented almost identically for both the responders and the providers. It is easier to maintain as a single routine. This patch also adds the ability to provide a private context to attach to the sbus_connection for later use. Patch 0003: Allow changing the log level without restart We will now re-read the confdb debug_level value when processing the monitor_common_logrotate() function, which occurs when the monitor receives a SIGHUP. For now, this can be tested by using ldbedit on /var/lib/sss/db/confdb.ldb to change the debug_level values and then send 'kill -HUP $(pidof sssd)'. In the future, I will write a command-line tool to effect this change more easily.

2 4

Call graph of sdap_async_accounts
by Jan Zelený 06 May '11

06 May '11

Since sdap_async_accounts.c is becoming a great monstrosity, I've created a call graph of functions defined in there. The graph shows where in the file is each function defined there called and it already takes Jakub's last big set of patches into account. I'm also sending the source .dot file in case anyone wants to extend it in the future. I hope it will be useful to more people than just me. Thanks Jan

4 7

[PATCH] Add support for building against openldap24-libs on RHEL 5.7
by Stephen Gallagher 05 May '11

05 May '11

We want to support building against RHEL 5.7 with openldap24-libs This will fix the nightly RHEL5 builds.

2 1

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel May 2011