sssd-devel September 2012

sssd-devel@lists.fedorahosted.org

16 participants
77 discussions

[PATCH] sdap_get_ad_tokengroups_initgroups_lookup_done(): fix group_name may be uninitialized warning
by Pavel Březina 24 Sep '12

24 Sep '12

Recent AD patches introduced another warning. If I read the code correctly it is safe to just initialize the variable to NULL.

1 0

[PATCH] Mark the fastcache files in the spec file as %ghost
by Jakub Hrozek 24 Sep '12

24 Sep '12

https://fedorahosted.org/sssd/ticket/1487

3 3

[PATCH] autofs, sudo and ssh are not experimental anymore
by Jakub Hrozek 24 Sep '12

24 Sep '12

The autofs integration, ssh integration and the PAC responder are not experimental in the 1.9.0 release anymore. The features are now built by default. I was wondering if that was a good idea because other platforms than Fedora would have to turn the features explicitly off -- but on the other hand, I've seen maintainers mentioning that they would turn feature X on only if they knew it was there. I think all stable features can be on by default.

2 4

[PATCH] sdap_add_incomplete_groups(): fix ret may be uninitialized warning
by Pavel Březina 24 Sep '12

24 Sep '12

This warning was seen with: -m64 -mtune=generic -O3 -D_FORTIFY_SOURCE=2 -fstack-protector-all -Wall -Wextra -Wno-sign-compare -Wno-unused-parameter

2 2

[PATCHES] Performance enhancements for AD provider
by Stephen Gallagher 24 Sep '12

24 Sep '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 * [PATCH 1/2] AD: Detect domain controller compatibility version This patch allows us to read the domain controller version from the RootDSE, if it exists. This will be used by the next patch to determine if the SSSD can use tokenGroups for lookups. * [PATCH 2/2] AD: Optimize initgroups lookups with tokenGroups If we are doing ID-mapped lookups, we can take advantage of the AD-specific option "tokenGroups", which allows us to retrieve a pre-flattened list of all the group SIDs for which this user is a member. From this, we can convert them to GIDs and conclude the initgroups() lookup with only two LDAP queries (the search for the user and the base search for the user's tokengroups; the latter must be performed as a base search due to restrictions imposed on the tokenGroups attribute by AD). When we save these groups to the sysdb, if the group is being seen for the first time it will be temporarily given the name of the SID representing it. Later, when we look it up by name or GID, this group will be replaced with the real one. Fixes https://fedorahosted.org/sssd/ticket/1355 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBbG2wACgkQeiVVYja6o6M9CQCdFwXQ2yBIlo7wPtJ4PAXW8Lt1 VLwAoINgdsNnq/2Z4Sl2KlQe68e3FXmJ =uyEO -----END PGP SIGNATURE-----

2 4

[PATCHES] sss_cache tool invalidates records in memory cache
by Michal Židek 24 Sep '12

24 Sep '12

Patch 1 - tools_util.h now provides signal_sssd function. It replaces send_sighup function from sss_debuglevel.c. It can be used to send any signal to monitor (used in patch 2). Patch 2 - https://fedorahosted.org/sssd/ticket/1311 Patches are in attachment. Michal

5 15

[PATCH] AD: autorid compatibility should recommend the use of, default domain
by Stephen Gallagher 24 Sep '12

24 Sep '12

Previously, we were failing to start if ldap_idmap_autorid_compat was True but the default domain SID was unspecified. This is the recommended configuration, but it is functional without it. There is just a slight risk that the IDs will be inconsistent between machines if the first user requested is not from the default domain. Fixes https://fedorahosted.org/sssd/ticket/1530

2 3

[PATCH] KRB5: Return PAM_AUTH_ERR on incorrect password
by Jakub Hrozek 21 Sep '12

21 Sep '12

This is a backport of a fix for https://fedorahosted.org/sssd/ticket/1515 to the 1-8 branch.

3 8

[PATCH] Add more debuginfo into ldap_child
by Ondrej Kos 21 Sep '12

21 Sep '12

fixes https://fedorahosted.org/sssd/ticket/1225 , krb5_child already updated before. Adding more debuginfo into ldap_child. Also old debug levels rewritten into new macros. Patch is attached O. -- Ondrej Kos Associate Software Engineer Identity Management Red Hat Czech cell: +420-736-417-909 phone: +420-532-294-558 ext.: 82-62558 irc: okos @ #brno

2 2

[PATCH] Add provider specific default regular expressions
by Sumit Bose 20 Sep '12

20 Sep '12

Hi, this patch add specific default values for the regular expression to split user names for the AD and IPA provider. In a perfect patch the ID provider itself would report back what he would like to use as a regular expression, but all solutions I could think of would require some bigger changes to the startup process which are not suitable at this stage of the 1.9 development. So I picked a more direct solution. bye, Sumit

3 3

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel September 2012