sssd-devel February 2017

sssd-devel@lists.fedorahosted.org

10 participants
61 discussions

[sssd PR#137][opened] Initial pkinit support
by fidencio 23 Feb '17

23 Feb '17

URL: https://github.com/SSSD/sssd/pull/137 Author: sumit-bose Title: #137: Initial pkinit support Action: opened PR body: """ This series of patches add initial support for PKINIT (https://fedorahosted.org/sssd/ticket/3270) by forwarding the information about the selected certificate from the Smartcard to the backends. Currently only the krb5 backend supports Smartcard authentication the other backends will return an error code which will tell the PAM responder to fall back to local Smartcard authentication as it is currently the case. Testing requires a working PKINIT setup which e.g. can be done with AD by setting up a CA and generating certificates as described in https://fedorahosted.org/sssd/wiki/DesignDocs/SmartcardAuthenticationTestin…. But currently more important is regression testing, i.e. making sure all other authentication methods are still working as expected. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/137/head:pr137 git checkout pr137

4 24

[sssd PR#156][opened] FILES: Remove unnecessary check
by lslebodn 22 Feb '17

22 Feb '17

URL: https://github.com/SSSD/sssd/pull/156 Author: lslebodn Title: #156: FILES: Remove unnecessary check Action: opened PR body: """ "grp_iter->gr_mem" is an array of strings and not just a string. We tried to compare first string to NULL (acctually '\0') But after that we iterated over the array to find count of members and we check for NULL one more time. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/156/head:pr156 git checkout pr156

3 8

[sssd PR#155][opened] MONITOR: Don't return an error in case we fail to register a service
by fidencio 22 Feb '17

22 Feb '17

URL: https://github.com/SSSD/sssd/pull/155 Author: fidencio Title: #155: MONITOR: Don't return an error in case we fail to register a service Action: opened PR body: """ This behaviour was mistakenly changed by the {dbus,socket}-activation series and, as it's now, I've noticed the monitor may end up in some weird state due to this change, where it doesn't stop properly and leave some defuncts children processes. Let's change it back to what it was before and avoid possible regressions (even if no regression where hit yet). Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/155/head:pr155 git checkout pr155

3 6

[sssd PR#161][opened] pam_sss: check conversation callback
by sumit-bose 22 Feb '17

22 Feb '17

URL: https://github.com/SSSD/sssd/pull/161 Author: sumit-bose Title: #161: pam_sss: check conversation callback Action: opened PR body: """ With this patch pam_sss checks if a conversation callback is available before using it. Resolves https://fedorahosted.org/sssd/ticket/3296 There is currently no test because I'm waiting for the pam-wrapper based tests to be committed to add a test there. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/161/head:pr161 git checkout pr161

3 5

[sssd PR#160][opened] Fix files provider reallocation logic
by jhrozek 22 Feb '17

22 Feb '17

URL: https://github.com/SSSD/sssd/pull/160 Author: jhrozek Title: #160: Fix files provider reallocation logic Action: opened PR body: """ Fixes a potential crash in the files provider. A test and a detailed explanation are included in the commit message. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/160/head:pr160 git checkout pr160

2 4

[sssd PR#70][opened] check_duplicate: check name member before using it
by fidencio 22 Feb '17

22 Feb '17

URL: https://github.com/SSSD/sssd/pull/70 Author: sumit-bose Title: #70: check_duplicate: check name member before using it Action: opened PR body: """ The second patch resolves https://fedorahosted.org/sssd/ticket/3231 and adds a test for the issue. The first patches fixes a potential memory leak which so far was only relevant in the tests. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/70/head:pr70 git checkout pr70

3 20

[sssd PR#66][opened] Minor Dynamic DNS fixes
by fidencio 22 Feb '17

22 Feb '17

URL: https://github.com/SSSD/sssd/pull/66 Author: justin-stephenson Title: #66: Minor Dynamic DNS fixes Action: opened PR body: """ To provide a bit more information, one of the fixes is to correct NULL being printed here(https://fedorahosted.org/sssd/ticket/3220): [nsupdate_msg_create_common] (0x0200): Creating update message for realm [(null)]. For the other(https://bugzilla.redhat.com/show_bug.cgi?id=1386748), It is not uncommon for nsupdate to successfully update DNS records but report the error below which results in return(2) to be called inside nsupdate code TSIG error with server: tsig verify failure It is easy to reproduce with AD DNS changing Dynamic DNS to 'Nonsecure and secure' on the Zone Properties. This patch allows PTR records to continue when this happens, however in this case our debug log messages still report failure and I think some improvement should be made here(not sure how exactly though) [child_sig_handler] (0x1000): Waiting for child [3710]. [nsupdate_child_handler] (0x0040): Dynamic DNS child failed with status [512] [child_sig_handler] (0x0020): child [3710] failed with status [2]. [be_nsupdate_done] (0x0040): nsupdate child execution failed [1432158238]: Dynamic DNS update failed It would be nice to correct this at the nsupdate level if this is not the expected behavior also. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/66/head:pr66 git checkout pr66

3 22

[sssd PR#157][opened] intg: Fix python3 issues
by lslebodn 17 Feb '17

17 Feb '17

URL: https://github.com/SSSD/sssd/pull/157 Author: lslebodn Title: #157: intg: Fix python3 issues Action: opened PR body: """ Mostly string/bytes related issues. It looks like my comments to the integration tests were lost as part of review or due to rebases. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/157/head:pr157 git checkout pr157

3 16

[sssd PR#158][opened] IPA_SUDO: Unused value fix
by celestian 16 Feb '17

16 Feb '17

URL: https://github.com/SSSD/sssd/pull/158 Author: celestian Title: #158: IPA_SUDO: Unused value fix Action: opened PR body: """ Unused value was immediately overwritten. Resolves: https://fedorahosted.org/sssd/ticket/3309 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/158/head:pr158 git checkout pr158

3 5

[sssd PR#106][opened] Add a new "files" provider
by fidencio 15 Feb '17

15 Feb '17

URL: https://github.com/SSSD/sssd/pull/106 Author: jhrozek Title: #106: Add a new "files" provider Action: opened PR body: """ This patch set implements a new provider that mirrors the contents of passwd and groups files. The intent is to make these users and groups available through the SSSD memory cache to improve performance and make it possible to read extended attributes via the sssd D-Bus interface. As the next step, we will implement a writable D-Bus interface to make it possible to also manage local users with an API and supersede the AccountService API. At the moment, the domain must be enabled explicitly. When this branch is merged, another commit would also enable the files domain for all installations by default. In order to make the resolution precise, the files domain is disabled once an inotify notification arrives During testing, I realized there might be a delay between changing the UNIX files by replacing them and *receiving* the inotify notification. Therefore the tests add a sleep as well. That's not nice and I would be glad if the reviewer can spot how to speed up the inotify notification receiving. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/106/head:pr106 git checkout pr106

3 42

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel February 2017