sssd-devel January 2015

sssd-devel@lists.fedorahosted.org

18 participants
89 discussions

[PATCH] RESOLV: Add an internal function to read TTL from a DNS packet
by Jakub Hrozek 11 Feb '15

11 Feb '15

Hi, The attached patch is a self-contained change related to https://fedorahosted.org/sssd/ticket/1884. I also wrote code that uses the TTL values in the failover code: https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/log/?h=srvttl But when creating the unit tests I stumbled upon: https://fedorahosted.org/sssd/ticket/2533 and especially: https://fedorahosted.org/sssd/ticket/2532 Until these two are fixed, I don't think we can merge the TTL patch. Feel free to review the changes in my git branch, though, I don't think they'd change.

2 6

[PATCH] AD: use GC for SID requests as well
by Sumit Bose 11 Feb '15

11 Feb '15

Hi, another issue found by Steeve during testing. To reproduce this you need a universal group with members from different domains. Then either look up the group by SID e.g. with python -c "import pysss_nss_idmap; print pysss_nss_idmap.getnamebysid('S-1-5-21-3456664713-2053453454-4165325232-1234')" and then with getent group groupname. Or use IPA views, override the group name in the 'default trust view' on the IPA server and look up the group by the overridden name. In both case the group should not already be in the cache. Only members from the domain of the group should be show without the patch. bye, Sumit

2 8

[PATCH] fill_id() fix LE/BE issue with wrong data type
by Sumit Bose 11 Feb '15

11 Feb '15

Hi, we try to squeeze a 64bit type into a 32bit one which kind of works on little-endian because we checked that the value is not larger then UINT32_MAX before but fails on big-endian. This patch tries to fix it. bye, Sumit

2 2

[PATCH] MAN: amend sss_ssh_authorizedkeys
by Pavel Reichl 30 Jan '15

30 Jan '15

Hello, please see attached simple patch. Thanks!

4 6

[PATCH 2/2] test_nested_groups: Additional unit tests
by Lukas Slebodnik 30 Jan '15

30 Jan '15

ehlo, attached patch is unit test for ticket #2351. * apply patches with unit tests. * revert fix for #2351 (0d47aef7577f8cf651255cf59df87b3847dbe1ad ) - fix conflict in debug message. * run ./nestedgroups-tests -result: crash LS

3 2

[PATCH] IPA: Resolve IPA user groups' overrideDN in non-default view
by Jakub Hrozek 30 Jan '15

30 Jan '15

Hi, the attached patches fix https://fedorahosted.org/sssd/ticket/2571 for me. Sumit was kind to provide first round of review comments on IRC. I hope I managed to implement them all. Feel free to suggest even better name for the new async request.

2 2

[PATCH] pysss: Fix double free
by Lukas Slebodnik 30 Jan '15

30 Jan '15

ehlo, the patch for ticket "functions with reference leaks within sssd" #1195 was not tested proerly and double free was introduced. Simple patch is attached. LS

3 5

[PATCH] PROXY: Fix use after free
by Lukas Slebodnik 30 Jan '15

30 Jan '15

ehlo, The dbus_req and associated talloc context are no longer valid after execution of the function sbus_request_return_and_finish even if error code was returned. Simple patch is attached. LS

3 4

Design Discussion: Domains, users and groups over D-Bus
by Pavel Březina 29 Jan '15

29 Jan '15

https://fedorahosted.org/sssd/wiki/DesignDocs/DBusResponder Hi, I have take the following tikcet that is about implementing D-Bus calls for domains, users and groups. I have some questions. https://fedorahosted.org/sssd/ticket/2150 *List and Find methods interface* At this moment we implement all List* and Find* methods on /org/freedesktop/sssd/infopipe and org.freedesktop.sssd.infopipe interface. The patches I sent today enables having support for different interfaces on /path and /path/*, therefore we can implement the methods as: /infopipe/Users infopipe.Users.ListUsers() /infopipe/Users/$UID user specific methods and properties instead of: /infopipe infopipe.ListUsers() /infopipe/Users/$UID user specific methods and properties I think it make sense. Is this something we want? *Domains* The interface from the design page is already implemented. Is there any method or property that is missing? *Users* Do we want also to have methods ListDomainUsers() and ListUsers() without the name filter? Do we want some other filter options as well? Should extraAttributes be present in Properties.GetAll() output? What is UpdateGroupList() supposed to do? Property groups - do we really want to return list of object paths instead of pure group names? I think that more common use case will want only the names. Or we can even implement both. *Groups* Basically the same questions and per Users.

5 48

[PATCH] SELINUX: Set permissive umask for selinux operations
by Jakub Hrozek 27 Jan '15

27 Jan '15

Hi, to reproduce, set a SELinux label for a user. Log in as the user and observer the permissions of /etc/selinux/targeted/modules/active changing to 0600. As a result, even local semanage tools didn't work..

4 14

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel January 2015