sssd-devel August 2013

sssd-devel@lists.fedorahosted.org

18 participants
81 discussions

[PATCH] print password complexity hint when change password failed
by Pavel Březina 11 Aug '13

11 Aug '13

Now the output looks like: $ su test-user Password: Password expired. Change your password now. Current Password: New password: Retype new password: Password change failed. Please make sure the password meets the complexity constraints. su: incorrect password

3 8

[PATCH] ldap, krb5: More descriptive msg on chpass failure.
by Michal Židek 11 Aug '13

11 Aug '13

During password change operation if wrong current password was given we gave no hint to the user about what went wrong. The "Authentication token manipulation error" message alone was not very descriptive. resolves: https://fedorahosted.org/sssd/ticket/2029 Thanks Michal

2 4

[PATCH] backport be_refresh to sssd-1-9
by Pavel Březina 11 Aug '13

11 Aug '13

2 2

[PATCH] mmap_cache: Check if slot and name_ptr are not invalid.
by Michal Židek 11 Aug '13

11 Aug '13

This is very ugly hotfix for ticket: https://fedorahosted.org/sssd/ticket/2018 So far we were not able to find out why the slot or name_ptr values were corrupted, but this should at least prevent segfaults. Comments are highly appreciated. Thanks Michal

3 5

[PATCH 1/2] Set default DNS resolution timeout to 15 seconds.
by Michal Židek 09 Aug '13

09 Aug '13

https://fedorahosted.org/sssd/ticket/1966 (SSSD failover doesn't work if the first DNS server in resolv.conf is unavailable). The problem here is, that if first nameserver in resolv.conf is down, the resolution is too slow and SSSD will not wait for the result of ares_search and go offline. In my case the resolution was sometimes more than a minute, because all search domains in resolv.conf were searched inside ares_search() call using the first (not working) nameserver in the first place and then with the working nameserver (and before that, SSSD tried to figure out the domain name from my incorrectly set hostname, which added more unnecessary DNS lookups). To avoid this problem, the option dns_discovery_domain must be set properly, so that only the correct domain is searched, but even that is not enough, because the default timeout for dns resolver operation in sssd is too low. This patch rises the default value to 15 seconds (instead of 5 seconds). Another option might be to lower the amount of time ares waits for a nameserver to respond (currently it is 5 seconds, that is why 5 second for the entire dns resolution is not sufficient), but I do not want to do this. These patches also change man pages, so probably master only (string freeze)? Even if this is a really small change. I was also thinking, would it make sense to write a warning to the logs if the dns_discovery_domain option is not set? It seem to be important to set it properly for cases like this one. Thanks Michal

3 14

[PATCH] AD: Cast SASL callbacks to propper type
by Ondrej Kos 09 Aug '13

09 Aug '13

Hi, While working on another issue, I noticed a warning in recently added code (commit fb945a2c). On F18 the build works fine, but not on F19. This is caused by the change of cyrus-sasl API, they changed the *sasl_callback_t* callback member from int (*proc)(); to int (*proc)(void); Attached patch adds typedef for propper cast and fixes the issue. Ondra -- Ondrej Kos Associate Software Engineer Identity Management - SSSD Red Hat Czech

5 5

[PATCH] Two minor failover fixes
by Jakub Hrozek 09 Aug '13

09 Aug '13

Hi, I found these when backporting a failover fix for RHEL-6.5. Michal, can you take a look? I think you know the are best currently. btw I'm wondering if for SRV resolving we should use a larger timeout as the operation consists of resolving the SRV query and then the host name itself..

2 2

[PATCH] An idea for a default commit message
by Simo Sorce 09 Aug '13

09 Aug '13

This is just an idea, but if people like it and agree with the format it would be nice to have it in tree. Simo. -- Simo Sorce * Red Hat, Inc * New York

4 6

[PATCH] init script: source /etc/sysconfig/sssd
by Pavel Březina 08 Aug '13

08 Aug '13

https://fedorahosted.org/sssd/ticket/1959 Is there anyway how to achieve this in systemd? Do we want the path configurable?

4 10

[PATCHES] Do not call sss_cmd_done in function check_cache
by Lukas Slebodnik 08 Aug '13

08 Aug '13

ehlo, Attached patches should fix https://fedorahosted.org/sssd/ticket/1980 The first patch adds check after sysdb_getnetgr. If sysdb_getnetgr returns more result than 1, sssd will return error. sysdb_getpwnam has already had this check. The second patch removes function call sss_cmd_done inside of check_cache, because function is sss_cmd_done is called in parent functions. This was a reason of sssd crash. How to reproduce this crash. 1.Add Netgroup to sysdb cache with base cn=Netgroups,cn=<domain>,cn=sysdb This netgroup should have the same attribute (name or nameAlias or memberOf) as another netgroup. 2. call sudo with user, which is member of ^^^ netgroup. Those patches fix only sssd crash, but we should find out: Why were those netgroups stored in sysdb. LS

2 7

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel August 2013