May 2017 - sssd-devel - Fedora Mailing-Lists

[sssd PR#276][opened] KRB5: Advise the user to inspect the krb5_child.log if the child doesn't return a valid response

by jhrozek

URL: https://github.com/SSSD/sssd/pull/276 Author: jhrozek Title: #276: KRB5: Advise the user to inspect the krb5_child.log if the child doesn't return a valid response Action: opened PR body: """ If the child returns a runtime error, it is often not clear from the domain debug logs what to do next. This patch adds a DEBUG message that tells the admin to look into the krb5_child.log Resolves: https://pagure.io/SSSD/sssd/issue/2955 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/276/head:pr276 git checkout pr276

6 years, 11 months

2
5
0 / 0

[sssd PR#266][opened] IPA: Fix the PAM error code that auth code expects to start migration

by jhrozek

URL: https://github.com/SSSD/sssd/pull/266 Author: jhrozek Title: #266: IPA: Fix the PAM error code that auth code expects to start migration Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/3394 To support PKINIT, we now return PAM_NO_MODULE_DATA when the krb5_child process returns ERR_NO_AUTH_METHOD_AVAILABLE. Previously, we used to return PAM_CRED_ERR which the IPA auth code expects in order to start password migration. This patch syncs the two again. To reproduce, add an ipa user without password: ipa user-add migration_user Then try to log in as that user: ssh migration_user@myclient The IPA auth code should be then executed. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/266/head:pr266 git checkout pr266

6 years, 11 months

3
6
0 / 0

[sssd PR#230][opened] Failure to filter out AD subdomain with flatname is used

by justin-stephenson

URL: https://github.com/SSSD/sssd/pull/230 Author: justin-stephenson Title: #230: Failure to filter out AD subdomain with flatname is used Action: opened PR body: """ Ticket: https://pagure.io/SSSD/sssd/issue/3365 SSSD fails to filter out the child domain it is connected to when domain flatname is used instead of fully qualified domain name in `sssd.conf`, this leads to creation of an empty subdomain. After the patch, no duplicate subdomain is created. Tested by performing `id` against user in connected-to child domain(used 2 AD domains:root and child for this). ``` [sssm_ad_subdomains_init] (0x2000): Initializing AD subdomains handler [new_subdomain] (0x0400): Creating [AD.JSTEPHEN] as subdomain of [winchld]! [ad_subdomains_process] (0x0400): Enabling subdomain WINCHLD.AD.JSTEPHEN [ad_subdomains_process] (0x2000): Not including primary domain winchld in the subdomain list [ad_subdomains_refresh_done] (0x0400): Subdomains refreshed. ``` I wrote a test for this but I may have gotten some talloc heirarchy incorrect so please let me know if there is a problem to fix here. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/230/head:pr230 git checkout pr230

6 years, 11 months

4
7
0 / 0

[sssd PR#270][opened] Subdomains direct integration

by mzidek-rh

URL: https://github.com/SSSD/sssd/pull/270 Author: mzidek-rh Title: #270: Subdomains direct integration Action: opened PR body: """ Note: I know the commit message misses an issue number. I will add it tomorrow when I clone the BZ. However this should not block the review. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/270/head:pr270 git checkout pr270

6 years, 11 months

5
20
0 / 0

Fragile test enumeration

by Lukas Slebodnik

6 years, 11 months

2
3
0 / 0

[sssd PR#259][opened] RESPONDER: Also populate cr_domains when initializing the responders

by fidencio

URL: https://github.com/SSSD/sssd/pull/259 Author: fidencio Title: #259: RESPONDER: Also populate cr_domains when initializing the responders Action: opened PR body: """ sss_resp_populate_cr_domains() must be called also when initializing the responder for basically two reasons: - Some methods of the IFP responder don't call sss_parse_inp_send(), causing then the cr_domains to not be populated when cache_req_select_domains() is called; - As the operation is not that costly, is better to have it done on responder's common code in sss_process_init() than just do it in the IFP responder itself. Resolves: https://pagure.io/SSSD/sssd/issue/3387 Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/259/head:pr259 git checkout pr259

6 years, 11 months

5
47
0 / 0

[sssd PR#273][opened] CACHE_REQ_SEARCH: Avoid using of unitialized value

by fidencio

URL: https://github.com/SSSD/sssd/pull/273 Author: fidencio Title: #273: CACHE_REQ_SEARCH: Avoid using of unitialized value Action: opened PR body: """ This issue was introduced by commit 4ef0b19a and may lead to use of unitialized "req". In order to fix the issue, let's just allocate tmp_ctx after req is already set. The issue was caught by the internal coverity instance. Related: https://pagure.io/SSSD/sssd/issue/3362 Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/273/head:pr273 git checkout pr273

6 years, 11 months

3
16
0 / 0

[sssd PR#272][opened] cache_req: Fix warning maybe-uninitialized

by lslebodn

URL: https://github.com/SSSD/sssd/pull/272 Author: lslebodn Title: #272: cache_req: Fix warning maybe-uninitialized Action: opened PR body: """ the variable `req` could be used uninitialized in done section if talloc_new returns `NULL` src/responder/common/cache_req/cache_req_search.c: In function 'cache_req_search_done': src/responder/common/cache_req/cache_req_search.c:467:9: error: 'req' may be used uninitialized in this function [-Werror=maybe-uninitialized] tevent_req_error(req, ret); ^ src/responder/common/cache_req/cache_req_search.c:424:24: note: 'req' was declared here struct tevent_req *req; ^ cc1: all warnings being treated as errors """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/272/head:pr272 git checkout pr272

6 years, 11 months

3
5
0 / 0

Merging sss_cache and sss_debuglevel into sssctl

by Justin Stephenson

Hello, I wanted to check if anyone has objections or concerns with moving existing code for sss_cache and sss_debuglevel into sssctl for ticket #3057 - Merge existing command line tools into sssctl. The deprecated tools will become shell wrappers to the sssctl commands implementing the same functionality so I think it should be transparent to the end-user. Kind regards, Justin Stephenson

6 years, 11 months

2
3
0 / 0

[sssd PR#264][opened] sss_nss_getlistbycert: return results from multiple domains

by sumit-bose

URL: https://github.com/SSSD/sssd/pull/264 Author: sumit-bose Title: #264: sss_nss_getlistbycert: return results from multiple domains Action: opened PR body: """ Currently only the results from one domain were returned although all domains were searched and the results were available. Unit tests are updated to cover this case as well. Resolves https://pagure.io/SSSD/sssd/issue/3393 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/264/head:pr264 git checkout pr264

6 years, 11 months

3
10
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel May 2017