sssd-devel June 2015

sssd-devel@lists.fedorahosted.org

17 participants
64 discussions

[PATCH] Workaround for dyndns_test_ok failiure on mips(el). Child part has finished before the child handler was created.
by Jurica Stanojkovic 14 Sep '15

14 Sep '15

Hello, Package sssd_1.11.5.1-1 on Debian FTBFS for mips and mipsel. https://buildd.debian.org/status/fetch.php?pkg=sssd&arch=mips&ver=1.11.5.1-… https://buildd.debian.org/status/fetch.php?pkg=sssd&arch=mipsel&ver=1.11.5.… dyndns_test_ok is failing with following log: [ RUN ] dyndns_test_ok(Tue Jul 8 15:53:55:004476 2014) [sssd] [be_nsupdate_args] (0x0200): (Tue Jul 8 15:53:55:004521 2014) [sssd] [child_handler_setup] (0x2000): nsupdate auth type: GSS-TSIGSetting up signal handler up for pid [21397](Tue Jul 8 15:53:55:004693 2014) [sssd] [__wrap_execv] (0x0200): nsupdate success test case(Tue Jul 8 15:53:55:004825 2014) [sssd] [__wrap_execv] (0x1000): Child exiting with status 0(Tue Jul 8 15:53:55:005275 2014) [sssd] [child_handler_setup] (0x2000): Signal handler set up for pid [21397](Tue Jul 8 15:54:55:837623 2014) [sssd] [write_pipe_handler] (0x0020): write failed [32][Broken pipe].(Tue Jul 8 15:54:55:837801 2014) [sssd] [nsupdate_child_stdin_done] (0x1000): Sending nsupdate data complete(Tue Jul 8 15:54:55:837869 2014) [sssd] [nsupdate_child_stdin_done] (0x0040): Sending nsupdate data failed [32]: Broken pipe(Tue Jul 8 15:54:55:837947 2014) [sssd] [be_nsupdate_done] (0x0040): nsupdate child execution failed [1432158228]: Dynamic DNS update failed(Tue Jul 8 15:54:55:837985 2014) [sssd] [dyndns_test_ok] (0x1000): Child request returned [1432158228]: Unknown error 14321582280x555d0014 != 0../src/tests/cmocka/test_dyndns.c:222: error: Failure![ FAILED ] dyndns_test_okChild part has finished before the child handler was created. I have created and attached a patch which is workaround for this issue. Could someone please take a look and comment this? Thank you! Sincerely, Jurica

4 6

[PATCH] DYNDNS: Add a new option dyndns_server
by Jakub Hrozek 28 Jul '15

28 Jul '15

Hi, one of our users ran into an interesting problem -- her AD infrastructure was different from the DNS server. Because by default, we perform update against the server we're connected to, the DNS update didn't work. Per Simo's suggestion, I've implemented a new option that allows the administrator to override the DNS server used for DNS updates.

4 5

[PATCH] Fix minor typos in messages, commnts and docs
by Yuri Chornoivan 23 Jul '15

23 Jul '15

Hi, There are several minor typos in SSSD code. Thanks for fixing them. Best regards, Yuri

3 5

[PATCHES] AUDIT: Add audit support for SSSD
by Michal Židek 21 Jul '15

21 Jul '15

These two patches are initial patches for tickets https://fedorahosted.org/sssd/ticket/2373 https://fedorahosted.org/sssd/ticket/2372 I will add wrappers for more libaudit functions as needed in later patches. As for now, the audit support is not build by default so you need to run --with-libaudit. I would like to make it default when we have the above tickets solved. Thanks, Michal

2 5

[PATCHES] Wildcard lookups for InfoPipe
by Jakub Hrozek 20 Jul '15

20 Jul '15

Hi, the attached patches implement https://fedorahosted.org/sssd/ticket/2553. I'm sorry the patches took so long, but only during testing I realized the deleting of users not updated by the wildcard lookup is flawed. In case there were more entries in cache that match the wildcard than the limit on the wildcard search, we might be deleting legitimate entries that might contain cached credentials.. What I did instead was never remove any entries during wildcard lookups, but instead, only return entries that were updated during the wildcard lookup in the cache_req. That way, stale entries would be deleted by a direct lookup (maybe as a result of getpwuid when examining a file) or can be deleted by the cleanup task. I'm a bit nervous about the LDAP changes, please review ruthlessly :-) I would also like for the option defaults to be carefully checked during review. One question about the by-name-and-domain lookups -- should we check the domain we receive from the cache_req is the same as we requested? btw I really like how the cache_req and the infopipe code are structured. It was quite easy to extend without any hacks.

3 11

[PATCH] Update few debug messages
by Lukas Slebodnik 17 Jul '15

17 Jul '15

ehlo, I noticed the same noise in log files as user in ticker 2678. It was a little bit related to the latest changes with setting initgroups flag in the right time. LS

4 9

[PATCHES] PAM: authenticate agains cache
by Pavel Reichl 06 Jul '15

06 Jul '15

Hello, please see first version of these patches. I'm currently working on unit test for the second patch which will be part of the second revision of the patch set. Thanks!

4 31

[PATCHES] The fast memory cache should cache initgroups
by Lukas Slebodnik 03 Jul '15

03 Jul '15

ehlo, patches are attached. LS

3 3

[PATCH] sss_client: Re-check memcache after acquiring the lock
by Lukas Slebodnik 03 Jul '15

03 Jul '15

ehlo, patches for ticket #2581 are attached. They depends on previous mmap patches because also initgroups memory chace should be rechecked after acquiring the lock. LS

3 2

[PATCH] test_ipa_subdomains_server: Fix build with --coverage
by Lukas Slebodnik 02 Jul '15

02 Jul '15

ehlo, I was able to reproduce failed build in covergae phase on local machine. It seems that gcc did some optimization and used execve instead of execle when the code was instrumented for coverage analysis. So the exec* function was not wrapped and it tried to call real binary ipa-getkeytab. Obviously it failed. LS

3 6

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel June 2015