sssd-devel March 2013

sssd-devel@lists.fedorahosted.org

16 participants
92 discussions

Start a nNew thread

[PATCH] Removing unused parameter type from sudosrv_get_sudorules_query_cache()
by Lukas Slebodnik 28 Aug '13

28 Aug '13

Hi, this patch should solve ticket https://fedorahosted.org/sssd/ticket/1825 LS

3 5

[PATCH] Don't use srcdir with tests
by Jakub Hrozek 21 Jun '13

21 Jun '13

Without this patch I can't build SSSD for rawhide as new autoconf versions error out when $(srcdir) is used in TESTS: Makefile.am:149: error: using '$(srcdir)' in TESTS is currently broken: '$(srcdir)/src/config/SSSDConfigTest.py' parallel-tests: installing 'build/test-driver' Makefile.am:149: error: using '$(srcdir)' in TESTS is currently broken: '$(srcdir)/src/tests/pyhbac-test.py' Makefile.am:149: error: using '$(srcdir)' in TESTS is currently broken: '$(srcdir)/src/tests/pysss_murmur-test.py' Not using srcdir is OK as the GNU manual states: "Automake ensures that each file listed in TESTS is built before it is run; you can list both source and derived programs (or scripts) in TESTS; the generated rule will look both in srcdir and .." This is an excerpt from: http://www.gnu.org/software/automake/manual/automake.html#Scripts_002dbased…

3 9

[PATCH] Split the providers into separate subpackages
by Jakub Hrozek 11 Jun '13

11 Jun '13

Hi, the attached patch splits the previously monolithic sssd package into sssd-common that contains the deamon and the responders and per-provider packages such as sssd-ldap or sssd-ipa. This split would benefit two parties: 1) security auditors who are often trying to find the smallest package set including dependencies needed for the package to function. They would be able to i.e. install sssd-ldap and not bother about sssd-ipa or sssd-ad pulling in more dependencies. 2) 3rd party programs such as realmd or authconfig that would only be able to require or install on demand the needed packages. The patch addresses https://fedorahosted.org/sssd/ticket/1510 and must b applied on the two specfile patches I sent earlier (the thread subject included libsss_sudo).

5 22

Ticket #1376 -- Add support for suppressing group members
by Paul B. Henson 31 May '13

31 May '13

I'm attaching an initial draft of the implementation of ignore_group_members per ticket #1376. I still need to update the documentation (and some python code in SSSDConfig it looks like), but functionality wise this prevents ldap from requesting the member attribute and sssd from returning any cached members that might be left in the local db. As this is my first attempt at working with sssd, I wanted to get early feedback in case I'm doing something silly ;). Also, regarding the comment on the ticket: "The trickiest piece of this functionality would be ensuring that we don't delete existing member/memberOf linkages from the cache during group lookups that were put there by previous initgroups() requests. Thus, when this option is in play, member/memberOf should only be managed by initgroups() calls." My understanding of this is that an initgroups call will set up some state in the cache regarding members of groups, and a getgrnam or getgrgid call that skips retrieving the member attribute will wipe these out of the cache. However, it's also my understanding that *every* initgroups call hits ldap directly to make sure stale data isn't used for authorization purposes. If so, why do we care that the data in the cache, which isn't going to be used, gets wiped out? When ignore_group_members is enabled, the only thing that cares about group members is initgroups, correct? Thanks...

6 23

[PATCH] Set cloexec flag for log files
by Jakub Hrozek 16 May '13

16 May '13

https://fedorahosted.org/sssd/ticket/1708 The services kept the fd to /var/log/sssd/sssd.log open. I don't think there's any point in keeping the logfiles open after exec-ing for the child, so I set the CLOEXEC flag.

2 3

#570-fall back to defaults from krb5.conf if the realm is not specified explicitly in sssd.conf
by Ariel Barria 14 May '13

14 May '13

Hi. Apologies, I have been working in ticket #570 and I send for your comments before the send a patch final. I was reviewing where else needs to change and I find this places 1 - krb5_auth.c ---> tevent_req *krb5_auth_send( 2 - krb5_utils.c ---> char *expand_ccname_template( 3 - ipa_dyndns.c ---> int create_nsupdate_message( This correct? https://fedorahosted.org/sssd/ticket/570 Thanks

2 2

RFC: dropping upstream support of RHEL5 starting with 1.10
by Jakub Hrozek 01 May '13

01 May '13

Hi, many new features rely on library APIs and features that are only available in recent versions of SSSD dependencies. As a result, the code often needs #ifdefs and special branches in order to at least compile or run on RHEL5. So far we've been doing nightly builds also for RHEL5 and fixing issues as we were finding them. But recently we are considering dropping support for RHEL5 -- it is causing some engineering effort and at the same time the audience is probably very limited. If you are running super-stable enterprise distribution, chances are you are not all that interested in the latest and possibly very unstable SSSD version. The proposal would be to keep building and supporting the 1.9.x branch for RHEL5 and switch to using RHEL6 as the oldest supported release starting from the 1.10 upstream version. Of course we would still accept patches from any potential contributors. Any objections against the plan?

3 5

Tool for querying SSSD database
by David Bambušek 30 Apr '13

30 Apr '13

Greetings, my name is David Bambusek, and I am working on an application , that will be used as a tool for querying SSSD database. I am curently a student of FIT VUT Brno and this is topic of my bachelor thesis. It will be a command line application able to query various types of data, that is stored in SSSD database. I made a web page, where I will add information about this application I named sss_query, so far, you can find there information about basic user interface ( www.bambusekd.cz/sss_query.html ). My project is on my Github account https://github.com/bambusekd/SSSD.git there I created branch sss_query, where I work on my application I will be glad for any advice, recommendation or comment to it. Thanks David Bambusek

7 27

[PATCH] DB: Switch to new libini_config API
by Ondrej Kos 26 Apr '13

26 Apr '13

Hi, Attached is patch for https://fedorahosted.org/sssd/ticket/1786 Patch extends sssd code so it's capable to build with current version of libini_config (0.7 at the time, supported versions up from 0.6.1) and with version 1.0.0, which will be released soon. Ondra -- Ondrej Kos Associate Software Engineer Identity Management Red Hat Czech phone: +420-532-294-558 cell: +420-736-417-909 ext: 82-62558 loc: 1013 Brno 1 office irc: okos @ #sssd #brno

4 17

[PATCH] Use UPN from Kerberos ticket
by Sumit Bose 22 Apr '13

22 Apr '13

Hi, this patch should fix https://fedorahosted.org/sssd/ticket/1634 and eliminates the need to guess the UPN in the PAC responder. bye, Sumit

3 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel March 2013