sssd-devel August 2013

sssd-devel@lists.fedorahosted.org

18 participants
81 discussions

[PATCH] Minor man page patches
by Jakub Hrozek 08 Aug '13

08 Aug '13

Hi, attached are three man page patches. [PATCH 1/3] MAN: clarify the default access provider for AD https://fedorahosted.org/sssd/ticket/1965 After we added a section that clarified what access_provider=ad did, some users were confused and thought that "ad" was also the default access provider if "id_provider=ad" was specified. [PATCH 2/3] MAN: IP addresss does not work when used for ad_server https://fedorahosted.org/sssd/ticket/1998 Currently using IP address as value of ad_server is not supported, so the man pages should not mention that as an option. [PATCH 3/3] MAN: Clarify the min_id/max_id limits further https://fedorahosted.org/sssd/ticket/2005 Some users were confused by our description of min_id/max_id and thought the limits only applied to returning entries from the NSS responder. However, the limits are actually enforced on the back end side, so the entries are not even saved to cache.

2 3

[PATCHES] NSS: Clear cached netgroups if a request comes in from the sss_cache
by Lukas Slebodnik 08 Aug '13

08 Aug '13

ehlo, Attached patches fix ticket #1759 sss_cache -N/-n should invalidate the hash table in sssd_nss LS

3 7

[PATCH] LDAP: Fix crash when processing nested groups
by Jakub Hrozek 08 Aug '13

08 Aug '13

https://fedorahosted.org/sssd/ticket/1932 There is a rather strange workaround in the nested groups processing code that calls tevent_req_post outside _send(). However, it broke in certain situations where the tevent_req_call resulted in req being freed, which freed state by extension and then the subsequent _post call was a use-after-free. This patch saves the two variables used outside state so that it's safe to use them even after the callback.

3 8

[PATCH] Two minor enhancements on using the negative cache in the PAM responder
by Jakub Hrozek 07 Aug '13

07 Aug '13

Hi, Yassir who was going through the PAM code recently pointed out two strange issues with the PAM responder's usage of negative cache. Please see the attached patches for more details, but simplified version is: 1) The negative cache was only ever checked for domainless searches 2) The negative cache was only checked, never set I don't think this is a pressing issue because in most occasions, the negative cache would be hit by the application calling getpwnam() and so the PAM responder would not be called at all, but I think the code should at least be consistent. The alternative is of course to stop using negative cache in the PAM respnder completely, but I think it has some benefit if the application would only call the PAM conversation.

2 2

[PATCH] Fix memory context for hash entries
by Sumit Bose 07 Aug '13

07 Aug '13

Hi, here is another fix for a use-after-free of variables allocated on a temporary memory context. bye, Sumit

3 2

[PATCH] simple access provider: allow fully qualified names
by Pavel Březina 07 Aug '13

07 Aug '13

https://fedorahosted.org/sssd/ticket/2026 I created a separate ticket to support subdomain users and groups in allow/deny lists. https://fedorahosted.org/sssd/ticket/2034 There is a bug in PAC responder at the moment which makes simple access provider to always deny access to subdomain users. PAC responder currently fails to resolve group membership, thus we get error in access provider when looking up groups and access is denied. Jakub will look into this.

2 6

[PATCH] Add script make_srpm.sh to dist tarball.
by Lukas Slebodnik 07 Aug '13

07 Aug '13

ehlo, Simple script make_srpm.sh was added to git repo few weeks ago. With this script, source rpm file can be created without installed sssd build dependencies. I forgot to add this file to Makefile.am and therefore this script is not bundled to tarball. Simple patch attached. LS

3 2

[PATCH] Fix memory context for a state member
by Sumit Bose 07 Aug '13

07 Aug '13

Hi, I came across this while testing other stuff. I think the issue was introduced in 1.10, 1.9 looks fine. bye, Sumit

3 2

[PATCH] fix GSSAPI integrity detection for AD servers
by Simo Sorce 06 Aug '13

06 Aug '13

This patch (hopefully) fixes an interop issues with AD servers where they fail to realize the connection is indeed integrity protected. It's a bit of a hack as we need to work around openldap initialization of cyrus sasl libraries. But it should work unitl we get openldap libraries to expose SASL_CB_GETOPT to us. Ticket: https://fedorahosted.org/sssd/ticket/2040 Simo. -- Simo Sorce * Red Hat, Inc * New York

2 3

[PATCH] skip rule on error instead of failing completely
by Pavel Březina 05 Aug '13

05 Aug '13

https://fedorahosted.org/sssd/ticket/2031

2 4

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel August 2013