sssd-devel July 2016

sssd-devel@lists.fedorahosted.org

18 participants
103 discussions

Start a nNew thread

[PATCH] sudo man page: say that we support IPA schema
by Pavel Březina 16 Sep '16

16 Sep '16

SSIA

5 12

[PATCH] LDAP: Improving debug message
by Petr Cech 31 Aug '16

31 Aug '16

Hello list, in my opinion we might refer to user by their name and not by 'for loop' variable. This patch fixes this issue. I hit the issue during some debugging. Regards -- Petr^4 Čech

4 9

[PATCH] LDAP: Fixing of removing netgroup from cache
by Petr Cech 19 Aug '16

19 Aug '16

Hi list, there is patch solving [1] attached. It is possible that we will have similiar problem with other local keys, so I wrote special function for adding key to list of missing with condition if it is needed or not. [1] https://fedorahosted.org/sssd/ticket/2841 Regards -- Petr^4 Čech

4 12

[PATCH] intg: test nested membership
by Lukas Slebodnik 18 Aug '16

18 Aug '16

ehlo, attched patch is an integration test for regression #3093. I prepared a test and I let someone else to fix it :-) I will try to find more bugs in downstream tests. BTW we might move test from test_ts_cache somewhere else. But it was the fastest way how to write a test without enumeration. LS

2 11

[PATCH] Warn if ad_server contains IP address
by Justin Stephenson 16 Aug '16

16 Aug '16

First patch, see attached. This is for easy fix from ticket https://fedorahosted.org/sssd/ticket/2789 I am going on the assumption that if the first 2 characters of ad_server are digits then it is likely an IP address and not hostname. If you have a better idea for this please let me know. Kind regards, Justin Stephenson

4 11

[PATCH] Remove old DP interface
by Pavel Březina 16 Aug '16

16 Aug '16

CI: http://sssd-ci.duckdns.org/logs/job/50/01/summary.html The failure is about missing dependencies, unrelated to these patches. It depends on the sssctl failover patches due to changes in attaching dbus message to a talloc context. Now it is possible to also free the message with both dbus_message_unref() and talloc_free(). Since the sssctl patches are already in late review process I didn't want to change them.

2 9

[PATCHES] sssctl: print active server and server list
by Pavel Březina 16 Aug '16

16 Aug '16

Failover patches for the sssctl tool. The output looks like: [master.ipa.pb: ~]$ sudo sssctl domain-status ad.pb Online status: Online Active servers: AD Global Catalog: root-dc.ad.pb AD Domain Controller: root-dc.ad.pb IPA: master.ipa.pb Discovered AD Global Catalog servers: - root-dc.ad.pb - invalid.ad.pb - root-dc.ad.pb Discovered AD Domain Controller servers: - root-dc.ad.pb Discovered IPA servers: - master.ipa.pb This is the best output format I could thing of so far, but I'm opened for suggestions.

3 21

[PATCH] gpo: gPCMachineExtensionNames with just whitespaces
by Michal Židek 11 Aug '16

11 Aug '16

Hi, the attached patch fixes: https://fedorahosted.org/sssd/ticket/3114 We have a user that can not login with enforced GPO because of this. I do not think it is a common issue, I could not create groupPolicyContainer with gPCMachineExtensionNames containing only whitespaces, but you can create it with a script and the blank value is not an error so we should handle it properly (and maybe thre is a way in the GUI maze to create such GPOs as well, I just could not find it). I was able to reproduce the same "sssd log path" the user has and this patch fixed the issue. Thanks. Michal

4 10

[PATCH] Handle unparseable names in the simple access list correctly
by Jakub Hrozek 10 Aug '16

10 Aug '16

Hi, please see the attached patches. I'm not sure how this bug got in, because in the patch that broke the functionality (eef359b508b898ae99d2bf292a43f0f295a2ba5e) I said in the commit message that I did the change that is only implemented in the first attached patch. My guess is that the rebasing after the DP patches were merged went wrong. To make sure we don't regress, I added more tests and switched the tests to calling the DP handler.

2 7

[PATCH] SYSDB: Check changed virtual attributes before modified timestamp
by Lukas Slebodnik 10 Aug '16

10 Aug '16

ehlo, attached patch fixes acces denied after activating user in 389ds. Jakub had some comments/ideas in ticket but I think it's better to discuss about virtual attributes and timestamp cache on mailing list. LS

3 37

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel July 2016