sssd-devel November 2012

sssd-devel@lists.fedorahosted.org

15 participants
101 discussions

IPA client randomly lose memory of users
by Qing Chang 07 Dec '12

07 Dec '12

my dovecot IMAP server would randomly lose memory of users, as an example: Samba/NFS server knows this user: [root@smb2 shassan]# getent passwd bqiang bqiang:*:47105:471:Beiping Qiang:/home2/bqiang:/bin/tcsh But dovecot server does not: [root@dovecot2 ~]# getent passwd bqiang Only when I apply this: [root@dovecot2 ~]# \rm /var/lib/sss/db/cache_sri.utoronto.ca.ldb [root@dovecot2 ~]# service sssd restart It gets it: [root@dovecot2 ~]# getent passwd bqiang bqiang:*:47105:471:Beiping Qiang:/home2/bqiang:/bin/tcsh So far I have to deal with this for three users. It's quite possible that there are more than 3 that are affected, they were just patient enough to wait until dovecot "recovers its memory". ===== sssd.x86_64 1.8.0-32.el6 @rhel-x86_64-server-6 sssd-client.x86_64 1.8.0-32.el6 @rhel-x86_64-server-6 ===== Your help is much appreciated. Thanks, Qing -- ------------------ Qing Chang Senior Systems Administrator M6-624 Research Computing Sunnybrook Health Sciences Centre 2075 Bayview Ave. Toronto, Ontario, M4N 3M5 (416) 480-6100 x3263 qchang(a)sri.utoronto.ca ------------------

4 28

[PATCH] MEMBEROF: Implement the modify operation for ghost users
by Jakub Hrozek 04 Dec '12

04 Dec '12

The first three patches are just refactoring. The last patch implements the real modify operation along with a number of unit tests.

2 9

[PATCH] MEMBEROF: Implement delete operation for ghost users
by Jakub Hrozek 04 Dec '12

04 Dec '12

https://fedorahosted.org/sssd/ticket/1668 The memberof plugin did only expand the ghost users attribute to parents when adding a nested group, but didn't implement the reverse operation. This bug resulted in users being reported as group members even after the direct parent went away as the expanded ghost attributes were never removed from the parent entry. There seems to be a lot of similarlity between memberuid and ghost attributes in the memberof plugin. Maybe the code would benefit from soem more generic functions? But given the time contrainst, I would prefer the refactoring to happend post-1.9.3.

1 3

[PATCH 0/5] Rev 3: Fix various tevent_req style and naming issues
by Simo Sorce 04 Dec '12

04 Dec '12

This revision should address all concerns raised by Pavel for code that I actually changed from the original. For patch 1 a calrification I can't make was asked. I 'fixed' the code as I realized I copied a debug statement wrapped in an if statement that wasn't in the original code I move around, so I simply dropped it (the statement is still present but later on in another part of the code, where it remains from the original code). For patch for I completely changed approach and simplified the code even more by removing the switch statement completely, Thanks Pavel, that code looks even better to me now :) Simo Sorce (5): Fix tevent_req style for krb5_auth Fix ipa_subdomain_id names and tevent_req style Fix tevent_req style for get_netgroup in ipa_id Streamline ipa_account_info handler Use an entry type mask macro to filter entry types src/providers/data_provider.h | 1 + src/providers/ipa/ipa_id.c | 294 +++++++-------- src/providers/ipa/ipa_id.h | 10 +- src/providers/ipa/ipa_subdomains_id.c | 75 ++--- src/providers/krb5/krb5_access.c | 6 +- src/providers/krb5/krb5_auth.c | 683 ++++++++++++++++----------------- src/providers/krb5/krb5_auth.h | 6 +- src/providers/krb5/krb5_wait_queue.c | 12 +- src/providers/ldap/ldap_id.c | 2 +- src/providers/proxy/proxy_id.c | 2 +- 10 files changed, 505 insertions(+), 586 deletions(-)

3 19

[PATCH] Missing parameter in DEBUG message.
by Michal Židek 04 Dec '12

04 Dec '12

We were printing some garbage value in this message. Patch attached. Thanks Michal

2 2

nss hosts and caching
by James Hogarth 04 Dec '12

04 Dec '12

Hi, Going through the docs I'm not entirely clear whether SSSD should be caching host lookups (if hosts has sss added in nsswitch.conf) Should it cache like this (with negative cache timeouts etc via the directives in [nss]) or should nscd be used alongside if host caching is required? Regards, James

3 4

[PATCH] warn user if password is about to expire
by Pavel Březina 02 Dec '12

02 Dec '12

https://fedorahosted.org/sssd/ticket/1638

3 6

[PATCH] IPA: Handle bad results from c-ares lookup
by Stephen Gallagher 02 Dec '12

02 Dec '12

In some situations, the c-ares lookup can return NULL instead of a list of addresses. In this situation, we need to avoid dereferencing NULL. This patch adds a log message and sets the count to zero so it is handled appropriately below. This patch fixes the crash seen in https://bugzilla.redhat.com/show_bug.cgi?id=880571 This may actually be due to a bug in c-ares, but we should be defensive anyway.

2 3

[PATCH] avoid versioning libsss_sudo
by Pavel Březina 02 Dec '12

02 Dec '12

We will no longer version libsss_sudo as agreed.

2 3

[PATCH] sudo: print message if old protocol is used
by Pavel Březina 02 Dec '12

02 Dec '12

I believe the patch explains itself.

3 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel November 2012