sssd-devel September 2016

sssd-devel@lists.fedorahosted.org

18 participants
95 discussions

[sssd PR#7] Fix initgroups with nested groups (comment)
by fidencio 01 Sep '16

01 Sep '16

jhrozek commented on a pull request """ On Wed, Aug 31, 2016 at 07:15:10AM -0700, lslebodn wrote: > On (31/08/16 01:47), sumit-bose wrote: > >On Wed, Aug 31, 2016 at 01:30:12AM -0700, Jakub Hrozek wrote: > >> On Wed, Aug 31, 2016 at 12:36:37AM -0700, sumit-bose wrote: > >> > On Tue, Aug 30, 2016 at 12:36:20PM -0700, Jakub Hrozek wrote: > >> > > On Tue, Aug 30, 2016 at 11:47:09AM -0700, lslebodn wrote: > >> > > > >> > > About the discussion I saw on #sssd in backscroll, the rfc2307bis schema > >> > > only uses the member attribute because IIRC the RFC doesn't talk about > >> > > memberof at all. But in IPA, we know the specifics on the schema, so we > >> > > are able to dereference the memberof attribute to get a complete list of > >> > > all groups with one call. > >> > > >> > Unfortunately it is more complicated with IPA because memberOf only > >> > contains the direct memberships, there is a second attribute > >> > memberofindirect which hold the indirect memberships. > >> > >> This is only how IPA UI displays indirect memberships, if you check the > >> memberships with ldapsearch, you'll see it's really only memberof. > > > >bummer, you are right, I thought the --raw option of ipa user-show really > >means 'raw' but it looks some of the values are still processed. > > > >Sorry for the noise. > > > I haven't found any regression caused by this patch. > So at least; issues in ipa-trust test are not caused by this bug. > CI: http://sssd-ci.duckdns.org/logs/job/52/88/summary.html """ See the full comment at https://github.com/SSSD/sssd/pull/7#issuecomment-244052286

1 0

[PATCH] DEBUG: Apend line feed to messages from libsemanage
by Lukas Slebodnik 01 Sep '16

01 Sep '16

ehlo, @see (Wed Aug 31 14:12:18 2016) [[sssd[selinux_child[7088]]]] [libsemanage] (0x0020): could not query record value(Wed Aug 31 14:12:18 2016) [[sssd[selinux_child[7088]]]] [get_seuser] (0x0020): Cannot query for dennis (Wed Aug 31 14:12:18 2016) [[sssd[selinux_child[7088]]]] [seuser_needs_update] (0x2000): get_seuser: ret: 5 seuser: unknown mls: unknown (Wed Aug 31 14:12:30 2016) [[sssd[selinux_child[7088]]]] [libsemanage] (0x0020): setfiles returned error code 1.(Wed Aug 31 14:12:33 2016) [[sssd[selinux_child[7088]]]] [libsemanage] (0x0020): setfiles returned error code 1.(Wed Aug 31 14:12:33 2016) [[sssd[selinux_child[7088]]]] [set_seuser] (0x0020): Cannot commit SELinux transaction (Wed Aug 31 14:12:33 2016) [[sssd[selinux_child[7088]]]] [main] (0x0020): Cannot set SELinux login context. LS

2 2

[sssd PR#10] UTIL: Remove support to libini older than 1.0.0 (edited)
by fidencio 01 Sep '16

01 Sep '16

fidencio's pull request #10: "UTIL: Remove support to libini older than 1.0.0" was edited See the full pull-request at https://github.com/SSSD/sssd/pull/10 ... or pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/10/head:pr10 git checkout pr10

1 0

[PATCH] GPO: Cat vals with same key from different GPOs
by Michal Židek 01 Sep '16

01 Sep '16

Hi, here is patch for ticket #3161. See more in the ticket description. I was thinking why we originally replaced the lists and I think it comes from confusion on how we handle the same keys in single GPO ini file, however that is handled by libini not by SSSD. Michal

6 7

[sssd PR#10] UTIL: Remove support to libini older than 1.0.0 (synchronize)
by fidencio 01 Sep '16

01 Sep '16

fidencio's pull request #10: "UTIL: Remove support to libini older than 1.0.0" was synchronize See the full pull-request at https://github.com/SSSD/sssd/pull/10 ... or pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/10/head:pr10 git checkout pr10

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel September 2016