July 2017 - sssd-devel - Fedora Mailing-Lists

[sssd PR#274][opened] Merge sss_cache and sss_debuglevel into sssctl

by justin-stephenson

URL: https://github.com/SSSD/sssd/pull/274 Author: justin-stephenson Title: #274: Merge sss_cache and sss_debuglevel into sssctl Action: opened PR body: """ Move `sss_cache` into a new command **sssctl expire-cache** and `sss_debuglevel` into new command **sssctl debug-level** for ticket https://pagure.io/SSSD/sssd/issue/3057 Shell redirect wrappers replace the `sss_{debuglevel,cache}` binaries and man pages updated to point admins towards the new **sssctl** commands. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/274/head:pr274 git checkout pr274

6 years, 7 months

5
38
0 / 0

[sssd PR#334][opened] Print a warning when enumeration is requested but disabled

by amitkumar50

URL: https://github.com/SSSD/sssd/pull/334 Author: amitkumar50 Title: #334: Print a warning when enumeration is requested but disabled Action: opened PR body: """ Purpose of this PR is to add an explanatory message to be logged once at the start-up explaning that if enumeration is off 'getent passwd' will not return all users information. This is by design. Again Log level for this message it kept low [SSSDBG_OP_FAILURE 0x0040 /* level 2 */]. We want this message to be printed in almost all cases because it tells this functionality is be design and prevents anyone from opening a bug. Resolves: https://pagure.io/SSSD/sssd/issue/2301 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/334/head:pr334 git checkout pr334

6 years, 7 months

5
55
0 / 0

[sssd PR#332][opened] sydb: index improvements

by sumit-bose

URL: https://github.com/SSSD/sssd/pull/332 Author: sumit-bose Title: #332: sydb: index improvements Action: opened PR body: """ This patch first adds some missing attributes to the index. The most important one here is 'ghost' which is used in the backed during group lookups. Additionally the index for one-level searches @IDXONE is removed. One level searches were only used in a few places and are replace by this patch with sub-tree searches. The main reason for the removal is that maintaining the index is quite costly because it is basically a single huge blob in the underlying tdb database. Finally this patch removes the index on the objectClass attribute and adds a new index on an new attribute called objectCategory which is used instead of objectClass for all objects expect user and group. Typically user and group searches are done by name or ID attributes which are more specific then objectClass. And since most of the objects in the cache will be users and groups a search for all users or groups will be near to a full database search so that the index won't help much in this case either. The reason for removing it are the costs to manage it when there are many users or groups. Due to the index changes some search results are returned in different order. I updated the related tests so that the checks do not depend on a specific order anymore. If 'LDB_WARN_UNINDEXED=1' is set in /etc/sysconfig/sssd full database searches are indicated with a 'ldb FULL SEARCH: ...' debug message. Since there are no extra costs we might want to enable this by default with a certain debug level. Currently there are two types of un-indexed searches. Searches with '(distinguishedName=*)' in the filter are related to sub-tree deletes and '(dataExpireTimestamp<=...)' are related to refresh and cleanup tasks. Please note that '<=' and sub-string searches cannot be indexed. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/332/head:pr332 git checkout pr332

6 years, 7 months

2
19
0 / 0

[sssd PR#326][opened] IPA: check if IPA hostname is a FQDN

by amitkumar50

URL: https://github.com/SSSD/sssd/pull/326 Author: amitkumar50 Title: #326: IPA: check if IPA hostname is a FQDN Action: opened PR body: """ Some users change the IPA hostname post-install which results in strange bugs. Code change make sure that the ipa_hostname contains at least one domain component. Resolves: https://pagure.io/SSSD/sssd/issue/1946 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/326/head:pr326 git checkout pr326

6 years, 7 months

4
38
0 / 0

[sssd PR#50][opened] [RFC] Use GNULIB's compiler warning code

by fidencio

URL: https://github.com/SSSD/sssd/pull/50 Author: fidencio Title: #50: [RFC] Use GNULIB's compiler warning code Action: opened PR body: """ This patch series was sent to the sssd-devel and some discussions already happened there[0]. I've decided to open the PR because there are some few patches that can be pushed even if we decide to not use the "many warnings" patches. Let's keep track of those patches (and discussions related to them) in the github, in this way we can avoid them to get lost. :-) [0]: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahoste... Best Regards, Changes: 683f72d (Fabiano Fidêncio, 10 weeks ago) BUILD: Make use of GNULIB's compiler warning code As GNULIB has the 'manywarnings' module, which basically turns on every GCC warning, let's make use of it. We can easily blacklist the warnings we cannot cope with, but the main goal should be to have enabled every possible GCC warning. When new GCC warnings are created the 'manywarnings' file can be refreshed from upstream GNULIB. Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> f59828a (Fabiano Fidêncio, 5 days ago) NSS: Fix "old-style-definition" warning caught by GCC Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> f22aff7 (Fabiano Fidêncio, 5 days ago) SIFP: Fix a "jump-misses-init" warning caught by GCC Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> 58609d3 (Fabiano Fidêncio, 5 days ago) RESOLV: Fix a "-Werror=null-dereference" caught by GCC Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> bd1d7fd (Fabiano Fidêncio, 5 days ago) RESOLV: Simplify reply_weight_rearrange() a little bit Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/50/head:pr50 git checkout pr50

6 years, 7 months

1
20
0 / 0

[sssd PR#261][opened] Add systemtap probes into the top-level data provider requests

by justin-stephenson

URL: https://github.com/SSSD/sssd/pull/261 Author: justin-stephenson Title: #261: Add systemtap probes into the top-level data provider requests Action: opened PR body: """ Adding Data Provider probes and SystemTap script **dp_request.stp** to probe DP requests for performance analysis primarily based on elapsed time to complete a request. The intention is to identify delays during logins and user lookups. I'm not sure if the comments in **src/systemtap/sssd.stp.in** are worthwhile but the intention for someone writing their own stap script they could avoid having to look at the actual source code to see which target variables are retrieved(though the variable names are self-explanatory). Resolves: https://pagure.io/SSSD/sssd/issue/3061 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/261/head:pr261 git checkout pr261

6 years, 7 months

5
27
0 / 0

[sssd PR#342][opened] SELINUX: Use getseuserbyname to get IPA seuser

by justin-stephenson

URL: https://github.com/SSSD/sssd/pull/342 Author: justin-stephenson Title: #342: SELINUX: Use getseuserbyname to get IPA seuser Action: opened PR body: """ libsemanage API function semanage_seuser_query can fail in certain circumstances preventing user logins. The libselinux function getseuserbyname will be a more reliable method to retrieve SELinux usernames and is recommended by SELinux developers. Replace get_seuser function with getseuserbyname. Resolves: https://pagure.io/SSSD/sssd/issue/3308 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/342/head:pr342 git checkout pr342

6 years, 7 months

8
36
0 / 0

[sssd PR#295][opened] MAN: Document that the secrets provider can only be specified in a per-client section

by jhrozek

URL: https://github.com/SSSD/sssd/pull/295 Author: jhrozek Title: #295: MAN: Document that the secrets provider can only be specified in a per-client section Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/3417 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/295/head:pr295 git checkout pr295

6 years, 7 months

4
18
0 / 0

[sssd PR#316][opened] MAN: Improve failover documentation by explaining the timeout better

by jhrozek

URL: https://github.com/SSSD/sssd/pull/316 Author: jhrozek Title: #316: MAN: Improve failover documentation by explaining the timeout better Action: opened PR body: """ There were some customer cases recently where just tuning the timeout for service resolution helped the customer, but it was not apparent from the man pages what exactly to tune. This man page patch aims to improve that. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/316/head:pr316 git checkout pr316

6 years, 7 months

3
12
0 / 0

[sssd PR#321][opened] certmap: add OpenSSL implementation

by sumit-bose

URL: https://github.com/SSSD/sssd/pull/321 Author: sumit-bose Title: #321: certmap: add OpenSSL implementation Action: opened PR body: """ The OpenSSL 1.1 API is used but there is a short macro block which should added the needed compatibility if and older OpenSSL version is used. Related to https://pagure.io/SSSD/sssd/issue/3050 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/321/head:pr321 git checkout pr321

6 years, 7 months

4
19
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel July 2017