sssd-devel August 2012

sssd-devel@lists.fedorahosted.org

22 participants
98 discussions

[PATCH] Backport ipa_hbac_support_srchost option to 1.5.x
by Stephen Gallagher 21 Aug '12

21 Aug '12

This patch backports commit 6fb75e297bf7fc83e3db1f5ae8560624656ef319 to the 1.5.x branch. It makes one major change: 1.5.x does not have support for deref/ASQ searches, so the deref lookup for hostgroups has been replaced by parallel LDAP "base" searches. I'm attaching two patches. One is the complete patch to backport, the other is just an interdiff of the changes from Jan's original patch to support the parallel lookups. I'm still in the process of testing this patch, but I wanted to get it out for review in the meantime.

2 12

[PATCH] remove compilation warning: ret may be uninitialized
by Pavel Březina 21 Aug '12

21 Aug '12

I found this warning while reviewing Michal's transaction patch. It was introduced in 9356e8f50436724e985d9a8f5d4f2bc0f5b837bc and it is visible with the following CFLAGS: -m64 -mtune=generic -O3 -D_FORTIFY_SOURCE=2 -fstack-protector-all -Wall -Wextra -Wno-sign-compare -Wno-unused-parameter

3 4

[PATCH] Close LDAP connection when unable to install TLS
by Pavel Březina 21 Aug '12

21 Aug '12

https://bugzilla.redhat.com/show_bug.cgi?id=849081

3 8

[PATCH] accept_fd_handler: add missing return
by Sumit Bose 21 Aug '12

21 Aug '12

Hi, I just found this missing return while looking for a different issue. I wonder why Coverity and friends didn't found it. Is there a way to tell Coverity to handle talloc_free() similar for free()? bye, Sumit

3 3

[PATCH] Process all groups from a single nesting level
by Jakub Hrozek 21 Aug '12

21 Aug '12

https://bugzilla.redhat.com/show_bug.cgi?id=846664 If the first group was cached when processing the nested group membership, we would call tevent_req_done, effectivelly marking the whole nesting level as done. That is wrong, we should only move to next group in the same nesting level. Attached are two patches. One that applies on the 1.5 branch and another one that can be applied on top of both 1.8 and master. I haven't yet figured out why we're not seeing the bug on master even though the buggy code is there. Probably this issue is being shadowed b another bug in the ghost users..I'll investigate more. For now, I'm sending the patches for review to unblock the branches that are affected by the bug.

2 4

Files 'group' and 'passwd' in /var/lib/sss/mc/ still present even after sssd quits
by Michal Židek 17 Aug '12

17 Aug '12

Turning off sssd does not remove files in /var/lib/sss/mc. This allows to respond on requests like 'id username' with sssd turned off. Is this behavior OK or is it a bug? I think it is not very logical to keep this files present. If someone turns off sssd, he probably wants to turn off all services that sssd provides. Or is there some other reason not to remove these files? Thanks Michal

4 5

[PATCH] Fix compilation error in Python murmurhash bindings
by Jakub Hrozek 16 Aug '12

16 Aug '12

The attached patch fixes compiling the python murmurhash bindings on RHEL5.

2 2

Only create the SELinux login file if there are mappings on the server
by Jakub Hrozek 16 Aug '12

16 Aug '12

[PATCH 1/2] Do not try to remove the temp login file if already renamed write_selinux_string() would try to unlink the temporary file even after it was renamed. Failure to unlink the file would not be fatal, but would produce a confusing error message. Also don't use "0" for the default fd number, that's reserved for stdin. Using -1 is safer. [PATCH 2/2] Only create the SELinux login file if there are mappings on the server https://fedorahosted.org/sssd/ticket/1455 In case there are no rules on the IPA server, we must simply avoid generating the login file. That would make us fall back to the system-wide default defined in /etc/selinux/targeted/seusers. The IPA default must be only used if there *are* rules on the server, but none matches.

3 7

[PATCH] Build SELinux code in responder conditionally
by Jakub Hrozek 16 Aug '12

16 Aug '12

https://fedorahosted.org/sssd/ticket/1480 I've tested by removing libselinux-devel, reconfiguring --without-selinux. Then "make" and a simple sanity check (login still worked) passed.

2 2

[PATCH] Fix LOCAL domain lookups
by Pavel Březina 15 Aug '12

15 Aug '12

This bug was probably introduced with the subdomain patches. The problem was that sss_dp_get_domains_send() is called even for the local provider. There are certainly many possible solutions of this issue. I decided to modify sss_dp_issue_request() to call the callback immediately if it is issued for local domain. This way, I believe, we can avoid further problems with issuing request for local domains.

3 14

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel August 2012