sssd-devel September 2016

sssd-devel@lists.fedorahosted.org

18 participants
95 discussions

MONITOR: Add disable_netlink sssd.conf option
by Justin Stephenson 12 Sep '16

12 Sep '16

Hello, The attached patches resolve https://fedorahosted.org/sssd/ticket/3142 However, I am having difficult with the man page addition to 'src/man/sssd.conf.5.xml' for this new option. I have stared at the open and close xml tags(for far too long) and it looks correct but when I build sssd I never see the sssd.conf man page inclusion. Could anyone tell me what I am missing here? If you feel there is better wording for the description please let me know. Kind regards, Justin Stephenson

4 17

[sssd PR#16] TOOLS: sss_groupshow did not work (opened)
by fidencio 12 Sep '16

12 Sep '16

mzidek-rh's pull request #16: "TOOLS: sss_groupshow did not work" was opened PR body: """ sss_groupshow used shortname to search in sysdb database. We have to u e sysdb_fqname (aka internal_fqname) format for all sysdb oprations. Resolves: https://fedorahosted.org/sssd/ticket/3175 """ See the full pull-request at https://github.com/SSSD/sssd/pull/16 ... or pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/16/head:pr16 git checkout pr16

1 11

[sssd PR#11] SECRETS: Don't remove a container when it has children (+Changes requested)
by fidencio 11 Sep '16

11 Sep '16

fidencio's pull request #11: "SECRETS: Don't remove a container when it has children" label *Changes requested* has been added See the full pull-request at https://github.com/SSSD/sssd/pull/11

1 0

[sssd PR#19] KRB5: Send the output username, not internal fqname to krb5_child (opened)
by fidencio 11 Sep '16

11 Sep '16

jhrozek's pull request #19: "KRB5: Send the output username, not internal fqname to krb5_child" was opened PR body: """ Resolves: https://fedorahosted.org/sssd/ticket/3172 krb5_child calls krb5_kuserok() during the access phase which checks if a particular user is allowed to authenticate as a particular principal. We used to pass the internal fqname to krb5_kuserok() which broke the functionality and all users were denied access. This patch changes that to send the 'output' username to krb5_child, because that's the username the system receives through getpwnam() or getpwuid() anyway. The patch also adds a new structure member fo the krb5child_req structure to avoid reusing the pd->user variable but have an explicit one that serves as the input for the child process. """ See the full pull-request at https://github.com/SSSD/sssd/pull/19 ... or pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/19/head:pr19 git checkout pr19

1 7

[sssd PR#18] [PATCHES] sss_user/groupmod fixes (opened)
by fidencio 11 Sep '16

11 Sep '16

mzidek-rh's pull request #18: "[PATCHES] sss_user/groupmod fixes" was opened PR body: """ Hi, This PR is blocked by PR#16 (TOOLS: sss_groupshow did not work). It includes fix for the ticket https://fedorahosted.org/sssd/ticket/3178. Michal """ See the full pull-request at https://github.com/SSSD/sssd/pull/18 ... or pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/18/head:pr18 git checkout pr18

1 8

[sssd PR#11] SECRETS: Don't remove a container when it has children (synchronize)
by fidencio 08 Sep '16

08 Sep '16

fidencio's pull request #11: "SECRETS: Don't remove a container when it has children" was synchronize See the full pull-request at https://github.com/SSSD/sssd/pull/11 ... or pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/11/head:pr11 git checkout pr11

1 0

[PATCH] failover: proceed normally when no new server is found
by Pavel Březina 07 Sep '16

07 Sep '16

https://fedorahosted.org/sssd/ticket/3131 I couldn't reproduce manually so I used the second patch as a by-code reproducer. If you apply the patch then sssd will try to resolve meta server twice simultaneously and triggering the problematic code path. You can search for RESOLV SRV DONE in logs.

2 1

[sssd PR#14] Attempting to create a qualified name from a NULL pointer broke sss_groupadd (opened)
by fidencio 07 Sep '16

07 Sep '16

jhrozek's pull request #14: "Attempting to create a qualified name from a NULL pointer broke sss_groupadd" was opened PR body: """ The log said: (Tue Sep 6 15:18:31:935105 2016) [sss_groupadd] [sysdb_timestamp_cache_connect] (0x0400): No timestamp cache for LOCAL (Tue Sep 6 15:18:31:935255 2016) [sss_groupadd] [sss_names_init_from_args] (0x0100): Using re [(?P<name>[^@]+)@?(?P<domain>[^@]*$)]. (Tue Sep 6 15:18:31:935277 2016) [sss_groupadd] [sss_fqnames_init] (0x0100): Using fq format [%1$s@%2$s]. (Tue Sep 6 15:18:31:935392 2016) [sss_groupadd] [parse_name_domain] (0x0200): Parsed username: group10000 (Tue Sep 6 15:18:31:935418 2016) [sss_groupadd] [ldb] (0x4000): start ldb transaction (nesting: 0) (Tue Sep 6 15:18:31:935504 2016) [sss_groupadd] [ldb] (0x4000): cancel ldb transaction (nesting: 0) (Tue Sep 6 15:18:31:935629 2016) [sss_groupadd] [main] (0x0020): sysdb operation failed (12)[Cannot allocate memory] """ See the full pull-request at https://github.com/SSSD/sssd/pull/14 ... or pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/14/head:pr14 git checkout pr14

1 15

Getting overridden shell in pam_sss
by Nikolai Kondrashov 07 Sep '16

07 Sep '16

Hi Sumit, Now I'm again approaching the implementation of tlog integration in pam_sss, and as planned, I need to get the actual user shell to put it into TLOG_REC_SHELL environment variable upon opening of the session. However, the get_shell_override, which does all the hops and tricks to get it, requires nss_ctx, which belongs to NSS responder, specifically various shell-related configuration settings (override_shell/allowed_shells/vetoed_shells/etc_shells). I.e. essentially the PAM responder needs to be an NSS responder to get it. To me it seems that there is no exit but to finally put that override machinery into a library, instead of having it directly in the NSS responder. Am I wrong? Is there perhaps another way? Do you have any suggestion how to best do it? Thanks a lot! Nick

3 6

My development scripts
by Pavel Březina 07 Sep '16

07 Sep '16

Hi folks, while converting my workflow scripts to github [1] I decided to polish them, give them some help and publish them on github. Feel free to use them and improve them as you wish. I'll gladly learn about your workflow and simplification. [1] https://github.com/pbrezina/sssd-dev-utils

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel September 2016