sssd-devel May 2012

sssd-devel@lists.fedorahosted.org

25 participants
89 discussions

Start a nNew thread

[PATCH] Send the correct enumeration request
by Jakub Hrozek 10 May '12

10 May '12

https://fedorahosted.org/sssd/ticket/1329

2 2

[PATCH] NSS: Add fallback_homedir option
by Stephen Gallagher 09 May '12

09 May '12

This option is similar to override_homedir, except that it will take effect only for users that do not have an explicit home directory specified in LDAP. It also fixes a minor bug in confdb_get_domain_internal() where we were not testing the return value of talloc_strdup() for override_homedir properly. Fixes https://fedorahosted.org/sssd/ticket/1250

2 3

[PATCH] NSS: Add default_shell option
by Stephen Gallagher 09 May '12

09 May '12

This option will allow administrators to set a default shell to be used if a user does not have one set in the identity provider. Fixes https://fedorahosted.org/sssd/ticket/1289 This patch was built atop "[PATCH] NSS: Add fallback_homedir option". It may not apply cleanly without that patch.

2 3

[PATCH] Try all KDCs when getting TGT for LDAP
by Jakub Hrozek 09 May '12

09 May '12

When the ldap child process is killed after a timeout, try the next KDC. When none of the ldap child processes succeed, just abort the connection because we wouldn't be able to authenticate to the LDAP server anyway. https://fedorahosted.org/sssd/ticket/1324

2 2

[PATCH] Clearer docs for use_fully_qualified_names
by Stef Walter 09 May '12

09 May '12

Patch adds clearer documentation use_fully_qualified_names. Previously only contained warning about side effect. Cheers, Stef

2 2

[PATCH] Assorted fixed found by the clang static analyzer
by Jakub Hrozek 09 May '12

09 May '12

I scanned the SSSD source code with the clang static analyzer and found a number of issues. Patches are attached -- I think that most of them are OK to just include in master. Patches #1, #13 and #16 may be something that we want to include sooner. Because the clang analyzer is freely available in Fedora, I think it would make sense to run a scan at least before a release. Developers can also run the clang tool themselves - I'll add info how into our Developers page.

3 8

Using SSSD with Samba 4 (ldap_result error: [Can't contact LDAP server])
by Rubin 08 May '12

08 May '12

Hi All, I'm trying to get sssd to work with samba 4 and am having a rather difficult time to get things to work. I can see that sssd can actually talk to the samba 4 ldap service, and I have verified that all attributes as specified in my sssd.conf exist. I have verified that I can do ldapsearch queries identical to those done by ldap_search_ext. The attached sssd.conf is known_working with a "real" Active Directory 2003 R2. I have set TLS_REQCERT = never and TLS_CACERT in /etc/ldap/ldap.conf because I know that one of the error messages (see subject) might be related to that. In sssd.conf I've set ldap_tls_reqcert=never and temporarily set ldap_auth_disable_tls_never_use_in_production to True. This has not made any difference. I'm using Ubuntu LTS 12.04, on x86_64 with sssd 1.8.2-0ubuntu1. I've attached my sssd.conf and a selection of relevant lines from the sssd_SAMBA.log file. Essentially, I can see that results are returned from the ldap server: [sdap_parse_entry] (0x4000): OriginalDN: [CN=Rubin \ Simons,OU=Organization,DC=raaftech,DC=nl]. But then I see it reconnecting to the base domain name (probably typical for Active Directory?): [sdap_rebind_proc] (0x1000): Successfully bind to \ [ldap://raaftech.nl/CN=Configuration,DC=raaftech,DC=nl]. Which seems to fail later on (10 lines later): [sdap_process_result] (0x0040): ldap_result error: \ [Can't contact LDAP server] Since raaftech.nl is not in my ca.crt certificate I was suspecting an typical tls hostname mismatch to be the cause, but since I've set ldap_tls_reqcert=never and ldap_auth_disable_tls_never_use_in_production I would not expect this error to occur (I know the error is very generic but it is often related to tls). The following ldap searches work (the search filter is lifted literally from sssd_SAMBA.log): # Without host uri specification (will default to 127.0.0.1): ldapsearch -x -ZZ -L -D ldap-elohim(a)raaftech.nl -W -b "dc=raaftech,dc=nl" '(&(objectclass=person)(msSFU30Name=*)(uidNumber=*)(gidNumber=*))' # With short hostname: ldapsearch -x -ZZ -L -H ldap://elohim -D ldap-elohim(a)raaftech.nl -W -b "dc=raaftech,dc=nl" '(&(objectclass=person)(msSFU30Name=*)(uidNumber=*)(gidNumber=*))' # With domainname: ldapsearch -x -ZZ -L -H ldap://raaftech.nl -D ldap-elohim(a)raaftech.nl -W -b "dc=raaftech,dc=nl" '(&(objectclass=person)(msSFU30Name=*)(uidNumber=*)(gidNumber=*))' In short, I think I tried everything and am suspecting an issue inside sssd. As an aside, I don't understand fully why the reconnect occurs to ldap://raaftech.nl/CN=Configuration,DC=raaftech,DC=nl .. I suspect this has to do with why I'm having a problem. Any pointers would be GREATLY appreciated!! Kind regards, Rubin Simons, RAAF Technology

2 2

[PATCH] Only reset kpasswd server status when performing a chpass operation
by Jakub Hrozek 07 May '12

07 May '12

https://fedorahosted.org/sssd/ticket/1316

2 2

[PATCH] krb5 locator: Do not leak addrinfo
by Jakub Hrozek 07 May '12

07 May '12

I found this small leak (well, valgrind did..) when I was testing one of Stef Walter's patches.

2 3

[PATCH] Kerberos locator: Include the correct krb5.h header file
by Jakub Hrozek 07 May '12

07 May '12

https://fedorahosted.org/sssd/ticket/1325 A Gentoo user reported configuration and build issues when building the SSSD with Heimdal. He confirmed that the attached patch (which is a modified version of his original patch) fixes the problem for him.

2 3

← Newer
1
2
3
4
5
6
7
8
9
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel May 2012