sssd-devel October 2013

sssd-devel@lists.fedorahosted.org

19 participants
84 discussions

[PATCHES] Clean up documentation on debug levels
by Stephen Gallagher 07 Oct '13

07 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Originally, we planned to deprecate the decimal values for the debug levels, but that has proven to be too difficult for most users to understand. Instead, we will document both the simple decimal and complex bitmask values and recommend the use of the decimal values. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlJStNIACgkQeiVVYja6o6P2mACgjZ8LySsQ+c1ooH/Z14cx7UbZ uoIAoJys2wgpP9r7wEAtdXAarBA33TyC =a4e4 -----END PGP SIGNATURE-----

3 3

[INI][PATCH] Fix for the parsing of the multi value strings
by Dmitri Pal 07 Oct '13

07 Oct '13

Hello, Patch fixes https://fedorahosted.org/sssd/ticket/2110 - Processing miltivalue strings does not return last token -- Thank you, Dmitri Pal Sr. Engineering Manager for IdM portfolio Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/

2 2

[PATCH] CIFS idmap Plugin using SSSD
by Benjamin Franzke 07 Oct '13

07 Oct '13

Hello list, I've started to implement a plugin for the cifs-utils idmap interface. Currently it lives in an own repository and can be build outside the sssd tree, thanks to the public sssd libraries libsss_idmap.so and libsss_nss_idmap.so: http://git.bnfr.net/cifs_idmap_sss/tree/cifs_idmap_sss.c git://git.bnfr.net/cifs_idmap_sss Still missing is the mapping of Samba's Unix SIDs and some well known SIDs (more info in cifs_idmap_sss.c) Are you intrested in reviewing it and/or have it included in the sssd git tree or somehow else as a sssd project? Thanks, Ben

3 4

[PATCH] possible alternative for #2071
by Simo Sorce 06 Oct '13

06 Oct '13

Attached an untested possible alternative for #2071 The other option is the last patch of my previous patchset in the thread named: "[SSSD] [PATCHES] Simplify credential krb5 cache manipulation". Let's discuss if any of these approaches is ok, or if a third way needs to be found. Simo. -- Simo Sorce * Red Hat, Inc * New York

4 17

[INI][PATCH] Fix doc strings
by Dmitri Pal 05 Oct '13

05 Oct '13

Hello, Patch addresses the following ticket: https://fedorahosted.org/sssd/ticket/2107 - Description of the parse flags use is missing in header file -- Thank you, Dmitri Pal Sr. Engineering Manager for IdM portfolio Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/

2 2

[PATCH] AD: properly intitialize GC from ad_server option
by Sumit Bose 04 Oct '13

04 Oct '13

Hi, this patch fixes a copy-n-paste error in the init code of the AD provider. bye, Sumit

3 4

[PATCH] sudo: allow specifying only one time restriction
by Pavel Březina 04 Oct '13

04 Oct '13

https://fedorahosted.org/sssd/ticket/2100

3 7

[PATCH] Two fixes for subdomain krb5 offline auth
by Jakub Hrozek 02 Oct '13

02 Oct '13

Hi, I was playing with different offline krb5 authentication ways today when testing Sumit's patches and I don't think the offline authentication of subdomain users was correct. Attached are two patches -- one is just a better error code, the other actually makes the SSSD search for the right user entry during krb5 offline auth. To test the first one, pause of shutdown a trusted AD while remaining connected to the root domain AD.

3 5

1.11.1 runtime error undefined symbol:sss_idmap_domain_has_algorithmic_mapping
by steve 02 Oct '13

02 Oct '13

Hi openSUSE 12.3 build and installed fine, but fails with: (Sat Sep 28 18:04:27 2013) [sssd[be[default]]] [load_backend_module] (0x0010): Unable to load ad module with path (/usr/local/lib/sssd/libsss_ad.so), error: /usr/local/lib/sssd/libsss_ldap_common.so: undefined symbol: sss_idmap_domain_has_algorithmic_mapping 1.10.0 runs fine on the same box. Can you help me? Cheers, Steve [sssd] #debug_level = 6 services = nss, pam, autofs config_file_version = 2 domains = default [nss] [pam] [autofs] [domain/default] #debug_level = 6 dyndns_update=true #dyndns_refresh_interval = 16 ad_hostname = catral.hh3.site ad_server = hh16.hh3.site ad_domain = hh3.site ldap_schema = ad id_provider = ad access_provider = simple enumerate = false cache_credentials = true #entry_cache_timeout = 60 auth_provider = krb5 chpass_provider = krb5 krb5_realm = HH3.SITE krb5_server = hh16.hh3.site krb5_kpasswd = hh16.hh3.site ldap_id_mapping=false ldap_referrals = false ldap_uri = ldap://hh16.hh3.site ldap_search_base = dc=hh3,dc=site #ldap_tls_cacertdir = /usr/local/samba/private/tls #ldap_id_use_start_tls = true #entry_negative_timeout = 1 ldap_user_object_class = user ldap_user_name = samAccountName ldap_user_uid_number = uidNumber ldap_user_gid_number = gidNumber ldap_user_home_directory = unixHomeDirectory ldap_user_shell = loginShell ldap_group_object_class = group ldap_group_search_base = dc=hh3,dc=site ldap_group_name = cn ldap_group_member = member ldap_sasl_mech = gssapi ldap_sasl_authid = CATRAL$(a)HH3.SITE #krb5_keytab = /etc/krb5.keytab ldap_krb5_init_creds = true autofs_provider=ldap #ldap_autofs_search_base = CN=hh3,CN=defaultMigrationContainer30,DC=hh3,DC=site #ldap_autofs_map_object_class = nisMap #ldap_autofs_entry_object_class = nisObject #ldap_autofs_map_name = nisMapName #ldap_autofs_entry_key = cn #ldap_autofs_entry_value = nisMapEntry ldap_autofs_search_base = OU=automount,DC=hh3,DC=site ldap_autofs_map_object_class = automountMap ldap_autofs_entry_object_class = automount ldap_autofs_map_name = automountMapName ldap_autofs_entry_key = automountKey ldap_autofs_entry_value = automountInformation

4 14

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel October 2013