sssd-devel November 2015

sssd-devel@lists.fedorahosted.org

12 participants
80 discussions

[PATCHES] sudo provider improvements
by Pavel Březina 15 Dec '15

15 Dec '15

Hi, I'm sending some sudo provider patches. I wanted to fix/improve things in the ldap sudo provider prior my work on ipa provider so I get familiar with it again and avoid making the same mistakes. It fixes tevent style, shuffles the code around a little bit, convert periodic task to use be_ptask module, renew hostinfo when needed, fix sdap_id_op logic, recude code duplication, remove dead code, simplify error handling, etc. Ticket fixed: https://fedorahosted.org/sssd/ticket/1943 https://fedorahosted.org/sssd/ticket/2672 I let Dan run downstream tests on those patches. We had to fix one test that was prone to a race condition which my patches revealed, but everything is green now.

3 19

[PATCHES] cleanup task: Expire all memberof targets when removing user
by Michal Židek 14 Dec '15

14 Dec '15

Hi, see the attached patches for ticket https://fedorahosted.org/sssd/ticket/2676 Removing the user during cleanup task completely removes that user from local database, so that user is no longer part of any group in sysdb. Such user may, or may not have been removed from LDAP so the only way to figure out is check on the next refresh otherwise we may get inconsistent results. The third patch adds integration test for this Apply and run the intgcheck without the first 2 patches to see the failed test (you will also see that all the tests after this failed one will end with errors as well, that is probably due to incomplete clean up after the ldap tests and I do not intend to solve this as part of this patchset but will investigate it later). Thanks, Michal -- Senior Principal Intern

4 14

[PATCH] IPA: fix override with the same name
by Sumit Bose 11 Dec '15

11 Dec '15

Hi, this patch fixes an issue in the IPA override code described in https://fedorahosted.org/sssd/ticket/2874. If the user name is overridden with itself the name is written to the alias attribute twice causing an ldb error. bye, Sumit

3 4

[PATCH] IPA_PROVIDER: Explicit no handle of services
by Petr Cech 11 Dec '15

11 Dec '15

Hello, please see first attempt of patch for: https://fedorahosted.org/sssd/ticket/2747 Regards Petr PS: # reproducer getent services -s sss ldap(a)cygnus.dev

3 16

[PATCH] AD: Add autofs provider
by Jakub Hrozek 10 Dec '15

10 Dec '15

Hi, please see the attached patch. I tested it by following: https://ovalousek.wordpress.com/2015/08/03/autofs/ with the new patch, just adding: autofs_provider = ad is enough. I wrote the new provider because it's IMO the more systematic solution to #2862 than any hacks in failover.

4 12

[PATCH] KRB5: Handle KRB5_REALM_UNKNOWN as ERR_NETWORK_IO
by Jakub Hrozek 07 Dec '15

07 Dec '15

Hi, in some cases when an IPA-AD trust client is offline, the libkrb5 functions in krb5_child would error out with KRB5_REALM_UNKNOWN, because the client is completely autoconfigured. I think we should handle this error code as ERR_NETWORK_IO internally and I hope this change would fix bugs like https://fedorahosted.org/sssd/ticket/2866 but I haven't heard from the reporter yet.

2 3

[PATCH] KRB5: Handle preauth request timeout more gracefully
by Jakub Hrozek 07 Dec '15

07 Dec '15

Hi, this is more or less a cosmetic issue, but it can be irritating nonetheless. If the krb5_child process times out during preauth, we would print an EINVAL error message. I think the error should be more graceful (and I don't insist on PAM_CRED_UNAVAIL).

2 2

[PATCH] MAN: Clarify that subdomains always use service discovery
by Jakub Hrozek 04 Dec '15

04 Dec '15

Hi. attached is a simple manpage patch for #2881.

3 5

[PATCH] CONTRIB: Add clang-format support
by Petr Cech 02 Dec '15

02 Dec '15

Hi, there is little patch which adds clang-format support. More info is in header of patch. My previous patch set [PATCH SET] TEST_TOOLS_COLONDB: Add tests for sss_colondb_* public API is formatted by clang-format. Regards Petr

3 3

Re: Patch for Invalid link in BUILD.txt
by Jakub Hrozek 30 Nov '15

30 Nov '15

On Fri, Nov 20, 2015 at 01:41:36PM -0500, Dan Lavu wrote: > I think linking contribute makes more sense as it actually contains build instructions, but I don't see any harm in adding both. > I still had trouble applying the patch from the mail, but hopefully I reconstructed it well: https://github.com/jhrozek/sssd/commit/3aea0f328f97bc437968e01fa39da5507794… CI wouldn't touch BUILD.txt, so ACK to this patch

1 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel November 2015