sssd-devel May 2017

sssd-devel@lists.fedorahosted.org

9 participants
73 discussions

[sssd PR#276][opened] KRB5: Advise the user to inspect the krb5_child.log if the child doesn't return a valid response
by jhrozek 23 May '17

23 May '17

URL: https://github.com/SSSD/sssd/pull/276 Author: jhrozek Title: #276: KRB5: Advise the user to inspect the krb5_child.log if the child doesn't return a valid response Action: opened PR body: """ If the child returns a runtime error, it is often not clear from the domain debug logs what to do next. This patch adds a DEBUG message that tells the admin to look into the krb5_child.log Resolves: https://pagure.io/SSSD/sssd/issue/2955 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/276/head:pr276 git checkout pr276

2 5

[sssd PR#266][opened] IPA: Fix the PAM error code that auth code expects to start migration
by jhrozek 22 May '17

22 May '17

URL: https://github.com/SSSD/sssd/pull/266 Author: jhrozek Title: #266: IPA: Fix the PAM error code that auth code expects to start migration Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/3394 To support PKINIT, we now return PAM_NO_MODULE_DATA when the krb5_child process returns ERR_NO_AUTH_METHOD_AVAILABLE. Previously, we used to return PAM_CRED_ERR which the IPA auth code expects in order to start password migration. This patch syncs the two again. To reproduce, add an ipa user without password: ipa user-add migration_user Then try to log in as that user: ssh migration_user@myclient The IPA auth code should be then executed. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/266/head:pr266 git checkout pr266

3 6

[sssd PR#230][opened] Failure to filter out AD subdomain with flatname is used
by justin-stephenson 19 May '17

19 May '17

URL: https://github.com/SSSD/sssd/pull/230 Author: justin-stephenson Title: #230: Failure to filter out AD subdomain with flatname is used Action: opened PR body: """ Ticket: https://pagure.io/SSSD/sssd/issue/3365 SSSD fails to filter out the child domain it is connected to when domain flatname is used instead of fully qualified domain name in `sssd.conf`, this leads to creation of an empty subdomain. After the patch, no duplicate subdomain is created. Tested by performing `id` against user in connected-to child domain(used 2 AD domains:root and child for this). ``` [sssm_ad_subdomains_init] (0x2000): Initializing AD subdomains handler [new_subdomain] (0x0400): Creating [AD.JSTEPHEN] as subdomain of [winchld]! [ad_subdomains_process] (0x0400): Enabling subdomain WINCHLD.AD.JSTEPHEN [ad_subdomains_process] (0x2000): Not including primary domain winchld in the subdomain list [ad_subdomains_refresh_done] (0x0400): Subdomains refreshed. ``` I wrote a test for this but I may have gotten some talloc heirarchy incorrect so please let me know if there is a problem to fix here. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/230/head:pr230 git checkout pr230

4 7

[sssd PR#270][opened] Subdomains direct integration
by mzidek-rh 19 May '17

19 May '17

URL: https://github.com/SSSD/sssd/pull/270 Author: mzidek-rh Title: #270: Subdomains direct integration Action: opened PR body: """ Note: I know the commit message misses an issue number. I will add it tomorrow when I clone the BZ. However this should not block the review. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/270/head:pr270 git checkout pr270

5 20

Fragile test enumeration
by Lukas Slebodnik 19 May '17

19 May '17

2 3

[sssd PR#259][opened] RESPONDER: Also populate cr_domains when initializing the responders
by fidencio 17 May '17

17 May '17

URL: https://github.com/SSSD/sssd/pull/259 Author: fidencio Title: #259: RESPONDER: Also populate cr_domains when initializing the responders Action: opened PR body: """ sss_resp_populate_cr_domains() must be called also when initializing the responder for basically two reasons: - Some methods of the IFP responder don't call sss_parse_inp_send(), causing then the cr_domains to not be populated when cache_req_select_domains() is called; - As the operation is not that costly, is better to have it done on responder's common code in sss_process_init() than just do it in the IFP responder itself. Resolves: https://pagure.io/SSSD/sssd/issue/3387 Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/259/head:pr259 git checkout pr259

5 47

[sssd PR#273][opened] CACHE_REQ_SEARCH: Avoid using of unitialized value
by fidencio 15 May '17

15 May '17

URL: https://github.com/SSSD/sssd/pull/273 Author: fidencio Title: #273: CACHE_REQ_SEARCH: Avoid using of unitialized value Action: opened PR body: """ This issue was introduced by commit 4ef0b19a and may lead to use of unitialized "req". In order to fix the issue, let's just allocate tmp_ctx after req is already set. The issue was caught by the internal coverity instance. Related: https://pagure.io/SSSD/sssd/issue/3362 Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/273/head:pr273 git checkout pr273

3 16

[sssd PR#272][opened] cache_req: Fix warning maybe-uninitialized
by lslebodn 15 May '17

15 May '17

URL: https://github.com/SSSD/sssd/pull/272 Author: lslebodn Title: #272: cache_req: Fix warning maybe-uninitialized Action: opened PR body: """ the variable `req` could be used uninitialized in done section if talloc_new returns `NULL` src/responder/common/cache_req/cache_req_search.c: In function 'cache_req_search_done': src/responder/common/cache_req/cache_req_search.c:467:9: error: 'req' may be used uninitialized in this function [-Werror=maybe-uninitialized] tevent_req_error(req, ret); ^ src/responder/common/cache_req/cache_req_search.c:424:24: note: 'req' was declared here struct tevent_req *req; ^ cc1: all warnings being treated as errors """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/272/head:pr272 git checkout pr272

3 5

Merging sss_cache and sss_debuglevel into sssctl
by Justin Stephenson 11 May '17

11 May '17

Hello, I wanted to check if anyone has objections or concerns with moving existing code for sss_cache and sss_debuglevel into sssctl for ticket #3057 - Merge existing command line tools into sssctl. The deprecated tools will become shell wrappers to the sssctl commands implementing the same functionality so I think it should be transparent to the end-user. Kind regards, Justin Stephenson

2 3

[sssd PR#264][opened] sss_nss_getlistbycert: return results from multiple domains
by sumit-bose 10 May '17

10 May '17

URL: https://github.com/SSSD/sssd/pull/264 Author: sumit-bose Title: #264: sss_nss_getlistbycert: return results from multiple domains Action: opened PR body: """ Currently only the results from one domain were returned although all domains were searched and the results were available. Unit tests are updated to cover this case as well. Resolves https://pagure.io/SSSD/sssd/issue/3393 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/264/head:pr264 git checkout pr264

3 10

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel May 2017