sssd-devel May 2012

sssd-devel@lists.fedorahosted.org

25 participants
89 discussions

[PATCH] Use uint32_t to copy the service port
by Jakub Hrozek 25 May '12

25 May '12

The sss_client was copying 32bit port value, but the NSS responder was reading 16bit port value. This was breaking on Big-Endian machines where we read "the other 16bits". By the way, is there a reason to use 32bits in the client in the first place? IIRC a port number is a 16 bit value..

3 11

Use variable to control verbosity for things in common directory
by Ariel Barria 25 May '12

25 May '12

https://fedorahosted.org/sssd/ticket/394 I was reviewing this ticket and talks about a default value to verbosity. althought i'm not sure if is about the sssd debug level or other case. If the case of debug level: Reading theory in http://sgallagh.fedorapeople.org/sssd/1.8.91/man/sssd.conf.5.html in section debug_level (integer) mentions that: "0x0010 is the default value as well as the lowest allowed value" "0x0010: Fatal failures. Anything that would prevent SSSD from starting up or causes it to cease running." If you want to use a higher debug level is changed in sssd.conf-> debug_level = (desired level is placed). By not specifying on command line flag, is used the indicated in sssd.conf ->debug_level. If specified in command line debug_level first uses the command line, this was corrected in the ticket https://fedorahosted.org/sssd/ticket/764 In the case concerned from that, the flag already exists. util.h [code] /** \def DEBUG_IS_SET(level) \brief checks whether level (must be in new format) is set in debug_level \param level the debug level, please use one of the SSSDBG*_ macros */ #define DEBUG_IS_SET(level) (debug_level & (level)) #define CONVERT_AND_SET_DEBUG_LEVEL(new_value) debug_level = ( \ ((new_value) != SSSDBG_INVALID) \ ? debug_convert_old_level(new_value) \ : SSSDBG_UNRESOLVED /* Debug level should be loaded from config file. */ \ ); [/code]

4 3

[PATCH] NSS: Fix segfault when mmap cache cannot be initialized
by Stephen Gallagher 24 May '12

24 May '12

If the mmap cache cannot be initialized (such as insufficient permissions or SELinux/AppArmor denial), we are supposed to fall back to our 1.8 behavior of LDB cache only. However, we weren't properly checking that the cache had been set up and we were always attempting to dereference the mmap context in fill_pwent() and fill_grent(). Fixes https://fedorahosted.org/sssd/ticket/1346

2 6

sssd & AD frequently disconnecting
by Ondrej Valousek 24 May '12

24 May '12

Hi List, I am using sssd (F17) with AD and what I observed is that sssd frequently marks my AD server working and then "not working". Symptoms: (Mon May 21 13:58:43 2012) [sssd[be[default]]] [sdap_id_op_connect_step] (0x4000): beginning to connect (Mon May 21 13:58:43 2012) [sssd[be[default]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP' (Mon May 21 13:58:43 2012) [sssd[be[default]]] [get_server_status] (0x1000): Status of server 'dcpra1.XXX' is 'working' (Mon May 21 13:58:43 2012) [sssd[be[default]]] [get_port_status] (0x1000): Port status of port 389 for server 'dcpra1.XXX' is 'not working' (Mon May 21 13:58:43 2012) [sssd[be[default]]] [fo_resolve_service_send] (0x0020): No available servers for service 'LDAP' Sometimes sssd does manage to connect, sometimes not. I know there is a problem with the AD controller cutting the connection after some timeout that we can not (yet) handle correctly, but this also happens shortly after sssd restart. Is there any explanation to this? Thanks, Ondrej The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications(a)s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18

2 1

[RFE] Add 'auth_provider = none' as an option to SSSD
by Ariel Barria 24 May '12

24 May '12

Hi, i would comment for to see if i'm wrong. Ticket https://fedorahosted.org/sssd/ticket/1339 "auth_provider = none" already exists (it seems) Reading theory in http://sgallagh.fedorapeople.org/sssd/1.8.91/man/sssd.conf.5.html mentions that: auth_provider (string) "none" disallows password changes explicitly. Default: "id_provider" is used if it is set and can handle authentication requests. in data_provider_be.c [code] if (strcasecmp(mod_name, NO_PROVIDER) == 0) { ret = ENOENT; goto done; } [/code] and by placing "id_provider = proxy" the default auth_provider= id_provider (proxy) , this ago that request proxy_pam_target. this is correct? Thanks.

3 2

New mailing list: sssd-users
by Stephen Gallagher 23 May '12

23 May '12

For quite some time, we have used the sssd-devel mailing list for development and user configuration issue discussions. As the project has grown, it becomes more and more clear that we need to separate these topics into their own lists. So as of today, we now have a new mailing list for user questions. You can subscribe at https://fedorahosted.org/mailman/listinfo/sssd-users This list will be considerably less noisy for our users as they will not be bombarded with patch review emails and other development-centric issues.

3 2

[PATCH] LDAP nested groups: Do not process callback with _post deep in the nested structure
by Jakub Hrozek 22 May '12

22 May '12

https://fedorahosted.org/sssd/ticket/1343 I still haven't been able to fully test the patch, but sending out for review anyway.

2 3

[PATCH] Fixed issue in SELinux user maps
by Jan Zelený 22 May '12

22 May '12

There was an issue when IPA provider didn't set PAM_SUCCESS when successfully finished loading SELinux user maps. This lead to the map not being read in the responder. Thanks Jan

2 2

Kerberos password, Office and Home network.
by Daniel Löw 22 May '12

22 May '12

Hello! I'am using sssd 1.8 on an Ubuntu 12.04 laptop. So that I can login even when I am offline. Everyting works great, but if I take the laptop home with me, and connect it to my home network, i cant login. Then it says that i have the wrong password. then if I want to be able to login i need to connect the laptop to my office network, then I can login. Login offline works great, unless i connect the laptop to a network that isn't my office network. I'am getting my password from Kerberos, and my account information from LDAP. - Daniel

3 4

[PATCH] Always use positional arguments in translatable strings
by Stephen Gallagher 22 May '12

22 May '12

Some languages might need to change the order of the variables in the strings. By assigning them a positional value, we make it possible to reorder them. I added positional values to the strings that have only a single variable as well, mostly so it will be a guideline to anyone modifying those strings. Fixes https://fedorahosted.org/sssd/ticket/1336

2 2

← Newer
1
2
3
4
5
6
7
8
9
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel May 2012