sssd-devel April 2014

sssd-devel@lists.fedorahosted.org

22 participants
87 discussions

[PATCH] BUILD: Link libsss_krb5_common.so to libkeyutils.so
by Benjamin Franzke 28 Apr '14

28 Apr '14

Hi List, The symbol add_key is used by src/providers/krb5/krb5_delayed_online_authentication.c which is part of libsss_krb5_common.so Fixes following error: [sssd[be[default]]] [load_backend_module] (0x0010): Unable to load ad module with path (/usr/lib64/sssd/libsss_ad.so), error: /usr/lib64/sssd/libsss_krb5_common.so: undefined symbol: add_key -lkeyutils was passed to the libraries libsss_{krb5,ipa,ad}.so, but when compiling with -Wl,--as-needed this flag will be ignored, since it is not used directly. So it was unavailable to libsss_krb5_common.so which actually needs it. This patch removes $(KEYUTILS_LIBS) from those libraries and adds it to libsss_krb5_common.so Maybe libsss_krb5_common.so should be added to dlopen-tests? But then other libraries and functions are needed as well, which it currently inherits from libsss_{krb5,ipa,ad}.so. BTW: are these common libraries (i mean ldap too) convenience build libraries, or to save disk space? If they're just for convencience maybe they should not be installed? Regards, Ben

4 16

[PATCH] CRYPTO: Fix access to uninitialized data
by Lukas Slebodnik 28 Apr '14

28 Apr '14

ehlo, The size of output buffer(obufsize) was longer than initialised data. In calculation, uint32_t was used for length of the cryptotext, but uint16_t was written into buffer. The end of buffer was not initialised and it caused valgrind warning. Use of uninitialised value of size 8 at 0x37AE40F363: pl_base64_encode_buffer (nssb64e.c:180) by 0x37AE40F6ED: NSSBase64_EncodeItem_Util (nssb64e.c:482) by 0x37AE40F87A: BTOA_DataToAscii_Util (nssb64e.c:721) by 0x40208A: sss_base64_encode (nss_base64.c:47) by 0x403305: sss_password_encrypt (nss_obfuscate.c:358) The easiest reproducer is the crypto-test. CK_FORK=no libtool --mode=execute valgrind ./crypto-tests LS

2 2

[sssd] user's write permission on sssd.conf
by Pavel Reichl 28 Apr '14

28 Apr '14

Hello, we recently received following bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1089098 Reporter is quite unhappy that setting access mode on sssd.conf to 0400 will result in SSSD's failure to start and error message requesting to set access mode to 0600. Does it matter what access mode is set for user if it is required that user must be ROOT? I didn't find out the original reason for requiring write permission for user so it possible that it is needless. But I'm afraid that simple changing the required access mode from 0600 to 0400 would cause failure to start SSSD for users who upgrade SSSD to newer version. Maybe we can allow both modes (0400 and 0600) but is it worth doing? Thank you for your opinions. Pavel Reichl

7 18

Design Discussion: D-Bus responder
by Pavel Březina 28 Apr '14

28 Apr '14

https://fedorahosted.org/sssd/wiki/DesignDocs/DBusResponder Hi, I couldn't find the original thread so I'm starting a new one. I would like us to agree on best practice of naming methods. The current design is somewhat inconsistent, since it uses e.g. FindUserByName(name) and GetDomain(name) for obtaining one object path by name. I'm proposing the following convention: * List<class>() returning array of object paths, no arguments - ListUsers - ListDomains * Find<class><condition>(arg1, ...) returning array of object paths - FindUsersByName(filter) - FindGroupsByName(filter) * Get<class><condition>(arg1, ...) returning single object path - GetUserById(id) - GetDomainByName(name)

4 20

Fwd: FW: RE: RE: Internet Explorer 9 Bilet Detayı Görüntüleme Sorunu
by Aziz Sasmaz 28 Apr '14

28 Apr '14

---------- Forwarded message ---------- From: <baris(a)tjk.org> Date: 2014-04-28 12:11 GMT+03:00 Subject: RE: FW: RE: RE: Internet Explorer 9 Bilet Detayı Görüntüleme Sorunu To: aziz.sasmaz(a)gmail.com Selam, Ekte msg formatında gönderiyorum. *From:* Aziz Sasmaz [mailto:aziz.sasmaz@gmail.com] *Sent:* Monday, April 28, 2014 12:06 PM *To:* Barış Başar *Subject:* Re: FW: RE: RE: Internet Explorer 9 Bilet Detayı Görüntüleme Sorunu baris selam, bilyoner.com a mail attiginiz zaman donen hatayi atar mısın. Mailinde onu goremedim. 2014-04-28 12:05 GMT+03:00 <baris(a)tjk.org>: Barış Başar Bilişim Teknolojileri Müdürlüğü Interactive Systems Assistant Manager İnteraktif Sistemler Müdür Yardımcısı Barış Başar *Türkiye Jokey Kulübü* Bilişim Teknolojileri Müdürlüğü İnteraktif Sistemler Müdür Yardımcısı Interactive Systems Assistant Manager Tel : 0 (212) 414 6877 Faks : 0 (212) 414 6966 Ekrem Kurt Bulvarı Veliefendi Hipodromu 34144 Bakırköy*/*İstanbul Bu elektronik posta ve onunla iletilen bütün dosyalar sadece göndericisi tarafından alması amaçlanan yetkili gerçek ya da tüzel kişinin kullanımı içindir. Eğer söz konusu yetkili alıcı değilseniz bu elektronik postanın içeriğini açıklamanız, kopyalamanız, yönlendirmeniz ve kullanmanız kesinlikle yasaktır ve bu elektronik postayı derhal silmeniz gerekmektedir. Türkiye Jokey Kulübü bu mesajın içerdiği bilgilerin doğruluğu veya eksiksiz olduğu konusunda herhangi bir garanti vermemektedir. Bu nedenle bu bilgilerin ne şekilde olursa olsun içeriğinden, iletilmesinden, alınmasından ve saklanmasından sorumlu değildir. Bu mesajdaki görüşler yalnızca gönderen kişiye aittir ve Türkiye Jokey Kulübü’nün görüşlerini yansıtmayabilir. Bu e-posta bilinen bütün bilgisayar virüslerine karşı taranmıştır. ------------------------------ This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are hereby notified that any dissemination,forwarding, copying or use of any of the information is strictly prohibited, andthe e-mail should immediately be deleted. TJK makes no warranty as to the accuracy or completeness of any information contained in this message and hereby excludes any liability of any kind for the information contained therein or for the information transmission, reception, storage or use of such in anyway what so ever. The opinions expressed in this message belong to sender alone and may not necessarily reflect the opinions of TJK. This e-mail has been scanned for all known computer viruses.

1 0

[PATCH] mmap: Get errno when unlink fails
by Michal Židek 25 Apr '14

25 Apr '14

Hi, I found this small bug while working on different patch. Patch is attached. Thanks, Michal

3 2

[PATCHES] Always store home directory expansions to sysdb
by Pavel Reichl 23 Apr '14

23 Apr '14

Hello, attached patches implement ticket: https://fedorahosted.org/sssd/ticket/2205 Maybe I split the changes into too many patches, please feel free to suggest squashing them. Regards, Pavel Reichl

4 7

[PATCH] KRB5: Print a verbose error message on failure reading the keytab
by Jakub Hrozek 23 Apr '14

23 Apr '14

Hi, this patch prints an error message in case a keytab is missing completely to avoid confusing admins as in the case on sssd-users today.

3 4

[PATCH 1/1] build: List test extensions
by Nikolai Kondrashov 22 Apr '14

22 Apr '14

Hi everyone, This will let us skip running Python tests under Valgrind, as they produce too many interpreter-specific errors, which are hard to suppress. Sincerely, Nick

3 4

[PATCH] Implement a reusable parse-name request
by Jakub Hrozek 22 Apr '14

22 Apr '14

Hi, the NSS and PAM responders copy quite a bit of code around for the purpose of splitting an input string into name-domain components with optionally firing a request to refresh subdomains. I think the caller should not do all these chores, but instead just call an opaque request that will decide whether to refresh subdomains or whether to reuse the cached list. Instead of adding even more duplication to the DBus responder, I've implemented such request, did a minor cleanup (removing of the DP force flag) and added a bunch of unit tests. If these patches are accepted, I would like to convert the NSS and PAM responder code for parsing input to this new request.

3 2

← Newer
1
2
3
4
5
6
7
8
9
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel April 2014