sssd-devel January 2015

sssd-devel@lists.fedorahosted.org

18 participants
89 discussions

Start a nNew thread

[PATCH] MAN: add dots as valid character in domain names
by Pavel Reichl 15 Jan '15

15 Jan '15

Please see attached trivial patch. Thanks!

2 2

[PATCH] nss-srv-tests: Add regression test for option re_expression
by Lukas Slebodnik 14 Jan '15

14 Jan '15

ehlo, Attached patches are unit test for ticket https://fedorahosted.org/sssd/ticket/2487 The ./nss-srv-tests passed with sssd-1.12.1. LS

2 4

[PATCH] krb5_child: Return ERR_NETWORK_IO on KRB5_KDCREP_SKEW
by Jakub Hrozek 14 Jan '15

14 Jan '15

Previously, we only handled KRB5KRB_AP_ERR_SKEW which meant that if krb5_child received KRB5_KDCREP_SKEW, SSSD returned System Error. See also: https://bugzilla.redhat.com/show_bug.cgi?id=889206#c4 and the next two comments.

2 2

[PATCHES] Various view related improvements
by Sumit Bose 14 Jan '15

14 Jan '15

Hi, this patch set contains some improvements for the view related code on IPA client. Most of them are performance related, patches 4,5 and 6 make sure that during group requests all members are properly resovled if a non-default view is applied to be able to handle user name overrides. bye, Sumit

3 13

[PATCH] GPO: Extract server hostname after connecting
by Jakub Hrozek 13 Jan '15

13 Jan '15

Hi, the attached patch is related to GPO offline functionality, please check the commit message. To reproduce, set up an AD client with GPOs, make sure credential caching is enabled. Log in as a permitted user to cache the credentials. Go offline, in my case by pointing resolv.conf to a DNS server that doesn't know the AD domain. Attempt to log in.

2 3

[PATCH] SYSDB: Reduce code duplication in sysdb_gpo.c
by Jakub Hrozek 13 Jan '15

13 Jan '15

A very simple patch, see the commit message for details.

2 6

IPA: resolve ghost members if a non-default view is applied
by Sumit Bose 13 Jan '15

13 Jan '15

Hi, these two patches add a missing part to https://fedorahosted.org/sssd/ticket/2481 (ID Views implementation does not support IPA user&group overrides). Since it is not allowed to have ghost members if a non-default view is applied because otherwise user name overrides would not be covered ghosts members have to be resolved for IPA groups in this case. The changes are only in the IPA provider so they should not cause a regression in other providers. Since the generic LDAP code use some IPA specific optimizations (derives user name from the user's DN to avoid LDAP lookups) there wouldn't be a performance benefit if this change would be in the generic LDAP code. bye, Sumit

3 7

[PATCH] GPO: Don't use stdout for output in gpo_child
by Jakub Hrozek 13 Jan '15

13 Jan '15

Hi, the attached patches work around the Samba bug https://bugzilla.samba.org/show_bug.cgi?id=11036 To reproduce, set a high "log level" in smb.conf and attempt to log in. At least with RHEL-7.1's Samba version, the gpo_child output would contain error messages unless there is a file called /root/.smb/smb.conf exists. Then processing the buffer gpo_child sends to parent would fail. I'm not thrilled about using such a heavy-weight change and special-casing where gpo_child sends output but I couldn't think of a different fix. I'll include unit test for the child_common change along with the other child_common tests (it's easier to build upon them).

2 4

[PATCH] LDAP: retain external members
by Pavel Reichl 13 Jan '15

13 Jan '15

Hello, please see attached patch for https://fedorahosted.org/sssd/ticket/2492 Thanks!

4 22

[patch] Python 3 support for sssd
by Bohuslav Kabrda 13 Jan '15

13 Jan '15

Hey all, for past few days, I've been working on python3-compat patch for sssd. The patch [1] is attached to the issue that requests this feature [2]. Some comments: - The patch tries to maintain backward compatibility for Python 2.6 and 2.7 - I admit I only tested 2.7 so far, but it seemed to work ok. - I didn't yet solve the build part - for now, I just handedit configure.ac to set "PYTHON=python3" and src/external/python.m4 to set "AC_PATH_PROG(PYTHON, python3)" and compile with that. - I managed to run Python tests in src/tests except python-test.py itself (it says "OSError: [Errno 5] Could not initialize connection to the confdb" and I didn't yet investigate why that happens). - To run tests, one must modify the hashbangs to /usr/bin/python3 (I now see that I left one of these in the actual patch, so please disregard that). I'd like to ask you, sssd devels, to give me some comments on the patch (or ask questions) and if you have some time to spare, doing more extensive testing would also be very welcome. -- Regards, Bohuslav "Slavek" Kabrda. [1] https://fedorahosted.org/sssd/attachment/ticket/2017/sssd-python3-compat.pa… [2] https://fedorahosted.org/sssd/ticket/2017

2 11

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel January 2015