sssd-devel October 2014

sssd-devel@lists.fedorahosted.org

16 participants
100 discussions

Start a nNew thread

[PATCH] SYSDB: move sysdb_get_real_name() from sysdb.c to sysdb_search.c
by Jakub Hrozek 06 Oct '14

06 Oct '14

Another cleanup patch I had in my branch.

2 2

[RFE] Ability of sssd to override shell per group and per user
by Pavel Reichl 06 Oct '14

06 Oct '14

Hello, we have an RFE: Ability of sssd to override shell per group and per user (described in ticket - https://fedorahosted.org/sssd/ticket/2135 and BZ - https://bugzilla.redhat.com/show_bug.cgi?id=986394) Is it generally a good idea to override shell per group and user or are there any hidden security threats? IIRC we can override shell based on primary group only because in time when shell overrides are processed no secondary groups are known, is it OK? Would introducing new configuration options 'override_shell_per_{user,group}' in NSS section be the right way to implement this RFC? override_shell_per_user = user1@domain1:sh1, user2:sh2, uid1:sh3 override_shell_per_group = group1@domain1:sh1, group2:sh2, gid1:sh3 Thanks for opinions!

1 0

[PATCH] GPO: remove unused talloc contexts
by Lukas Slebodnik 03 Oct '14

03 Oct '14

ehlo, Talloc context was not used in functions ad_gpo_parse_gpo_child_response ad_gpo_process_cse_recv, ad_gpo_store_policy_settings. Patch is attached. LS

3 2

[PATCH] GPO: Use argument ndg_flags instead of constant
by Lukas Slebodnik 03 Oct '14

03 Oct '14

ehlo, Some internal gpo functions [1] were called just once and with constant NDR_SCALARS as 2nd argument(ndr_flags), but 2nd argument was not used in these functions[1]. They used constant NDR_SCALARS. [1] ndr_pull_security_ace_flags, ndr_pull_security_ace_type, ndr_pull_security_ace_object_flags, ndr_pull_security_acl_revision, ndr_pull_security_descriptor_revision, ndr_pull_security_descriptor_type Patch is attached. LS

3 2

[PATCH] nss: Preserve case of group members
by Michal Židek 03 Oct '14

03 Oct '14

Hi, see attached simple patch that fixes ticket: https://fedorahosted.org/sssd/ticket/2453 Michal

5 16

NSS - use of allowed_shells
by Pavel Reichl 02 Oct '14

02 Oct '14

Hello, We have a user whose use-case seems quite legit to me but is impossible to be achieved without changing the code. (https://fedorahosted.org/sssd/ticket/2219) What user wants: in case that user's shell is not in /etc/shells he simply wants to use value of 'shell_fallback' option as user's shell. This can be achieved if the user's shell is in 'allowed_shells' option, but to maintain this option to enumerate all possible shells is not very convenient when you got huge heterogeneous network for different projects with different administrators. Instead the user proposed a patch adding special value '*' to 'allowed_shells' which would mean that any user's shell is a member of 'allowed_shells'. I believe that the patch will work, but the solution will IMO complicate the shell magic even more. Could we change the code so in case when user's shell is not in /etc/shells and 'allowed_shells' is empty to use 'shell_fallback'? Or do you find the '*' as a better option? Thanks!

2 1

[PATCH] AD: conflicting gpo policy settings not being resolved correctly
by Yassir Elley 02 Oct '14

02 Oct '14

Hi, The attached patch fixes ticket #2437 (conflicting gpo policy settings not being resolved correctly) https://fedorahosted.org/sssd/ticket/2437 Regards, Yassir.

3 8

[PATCH] MAN: Document the domains option of pam_sss
by Jakub Hrozek 01 Oct '14

01 Oct '14

I realized we forgot to add a description of the new pam_sss option to the man pages.

2 4

[PATCH] sssd.api.conf: Declare case_sensitive as string
by Michal Židek 01 Oct '14

01 Oct '14

Hi, I forgot to declare the case_sensitive option as string in the sssd.api.conf when I changed it to 3 state option (true|false|preserving). This caused authconfig to fail when case_sensitive was set to preserving. See attached simple patch. Michal

3 6

[PATCH] pam: sub-domain authentication fix
by Sumit Bose 01 Oct '14

01 Oct '14

Hi, I'm sorry but I introduced a regression with the recent patches which added support for looking up users with an UPN. This patch should fix it, please see commit message for details. bye, Sumit

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel October 2014