[PATCHES] sudo provider improvements
by Pavel Březina
Hi,
I'm sending some sudo provider patches. I wanted to fix/improve things
in the ldap sudo provider prior my work on ipa provider so I get
familiar with it again and avoid making the same mistakes.
It fixes tevent style, shuffles the code around a little bit, convert
periodic task to use be_ptask module, renew hostinfo when needed, fix
sdap_id_op logic, recude code duplication, remove dead code, simplify
error handling, etc.
Ticket fixed:
https://fedorahosted.org/sssd/ticket/1943
https://fedorahosted.org/sssd/ticket/2672
I let Dan run downstream tests on those patches. We had to fix one test
that was prone to a race condition which my patches revealed, but
everything is green now.
8 years, 4 months
[PATCHES] cleanup task: Expire all memberof targets when removing user
by Michal Židek
Hi,
see the attached patches for ticket
https://fedorahosted.org/sssd/ticket/2676
Removing the user during cleanup task completely
removes that user from local database, so that
user is no longer part of any group in sysdb.
Such user may, or may not have been removed from
LDAP so the only way to figure out is check
on the next refresh otherwise we may get
inconsistent results.
The third patch adds integration test for this
Apply and run the intgcheck without the first 2
patches to see the failed test (you will also see that
all the tests after this failed one will end with
errors as well, that is probably due to incomplete
clean up after the ldap tests and I do not intend to
solve this as part of this patchset but will
investigate it later).
Thanks,
Michal
--
Senior Principal Intern
8 years, 4 months
[PATCH] KRB5: Handle preauth request timeout more gracefully
by Jakub Hrozek
Hi,
this is more or less a cosmetic issue, but it can be irritating
nonetheless. If the krb5_child process times out during preauth, we
would print an EINVAL error message. I think the error should be more
graceful (and I don't insist on PAM_CRED_UNAVAIL).
8 years, 4 months
[PATCH] CONTRIB: Add clang-format support
by Petr Cech
Hi,
there is little patch which adds clang-format support. More info is in
header of patch.
My previous patch set [PATCH SET] TEST_TOOLS_COLONDB: Add tests for
sss_colondb_* public API is formatted by clang-format.
Regards
Petr
8 years, 4 months