September 2017 - sssd-devel - Fedora Mailing-Lists

[sssd PR#366][opened] SUDO: Use initgr_with_views when looking up a sudo user

by jhrozek

URL: https://github.com/SSSD/sssd/pull/366 Author: jhrozek Title: #366: SUDO: Use initgr_with_views when looking up a sudo user Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/3488 The sudo responder code didn't take views into account when looking for rules, which resulted in sudo rules being ignored if the user's name was overriden. Please see the ticket for a detailed info on how to reproduce the bug. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/366/head:pr366 git checkout pr366

6 years, 7 months

4
25
0 / 0

[sssd PR#261][opened] Add systemtap probes into the top-level data provider requests

by justin-stephenson

URL: https://github.com/SSSD/sssd/pull/261 Author: justin-stephenson Title: #261: Add systemtap probes into the top-level data provider requests Action: opened PR body: """ Adding Data Provider probes and SystemTap script **dp_request.stp** to probe DP requests for performance analysis primarily based on elapsed time to complete a request. The intention is to identify delays during logins and user lookups. I'm not sure if the comments in **src/systemtap/sssd.stp.in** are worthwhile but the intention for someone writing their own stap script they could avoid having to look at the actual source code to see which target variables are retrieved(though the variable names are self-explanatory). Resolves: https://pagure.io/SSSD/sssd/issue/3061 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/261/head:pr261 git checkout pr261

6 years, 7 months

5
27
0 / 0

[sssd PR#368][opened] ipa: make sure view name is initialized at startup

by sumit-bose

URL: https://github.com/SSSD/sssd/pull/368 Author: sumit-bose Title: #368: ipa: make sure view name is initialized at startup Action: opened PR body: """ sysdb_master_domain_update() can only set the view name properly if it was not set before but it might be called multiple times before the view name is available if the cache is empty. Since ipa_apply_view() keeps track if the view name was already set at startup or not the name can safely be cleaned here before sysdb_master_domain_update() is called. Resolves https://pagure.io/SSSD/sssd/issue/3501 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/368/head:pr368 git checkout pr368

6 years, 7 months

3
8
0 / 0

[sssd PR#351][opened] NSS: Look for name attribute also in nss_cmd_getsidbyid

by lslebodn

URL: https://github.com/SSSD/sssd/pull/351 Author: lslebodn Title: #351: NSS: Look for name attribute also in nss_cmd_getsidbyid Action: opened PR body: """ We always check negcache after getting data from backend since commit 4c09cd008967c5c0ec358dc658ffc6fc1cef2697 because we usually do have a name in begging of requests "* by ID". We were not interested in name in request sid by id before. However, function cache_req_search_ncache_filter always expect name otherwise it returns ERR_INTERNAL. [sssd[nss]] [cache_req_set_plugin] (0x2000): CR #8: Setting "Object by ID" plugin [sssd[nss]] [cache_req_send] (0x0400): CR #8: New request 'Object by ID' [sssd[nss]] [cache_req_select_domains] (0x0400): CR #8: Performing a multi-domain search [sssd[nss]] [cache_req_search_domains] (0x0400): CR #8: Search will check the cache and check the data provider [sssd[nss]] [cache_req_validate_domain_type] (0x2000): Request type POSIX-only for domain sssdad2012r2.com type POSIX is valid [sssd[nss]] [cache_req_set_domain] (0x0400): CR #8: Using domain [sssdad2012r2.com] [sssd[nss]] [cache_req_search_send] (0x0400): CR #8: Looking up ID:233600513@sssdad2012r2.com [sssd[nss]] [cache_req_search_ncache] (0x0400): CR #8: Checking negative cache for [ID:233600513@sssdad2012r2.com] [sssd[nss]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/UID/sssdad2012r2.com/233600513] [sssd[nss]] [cache_req_search_ncache] (0x0400): CR #8: [ID:233600513@sssdad2012r2.com] is not present in negative cache [sssd[nss]] [cache_req_search_cache] (0x0400): CR #8: Looking up [ID:233600513@sssdad2012r2.com] in cache [sssd[nss]] [cache_req_search_send] (0x0400): CR #8: Returning [ID:233600513@sssdad2012r2.com] from cache [sssd[nss]] [cache_req_search_ncache_filter] (0x0400): CR #8: Filtering out results by negative cache [sssd[nss]] [cache_req_search_ncache_filter] (0x0020): CR #8: sss_get_name_from_msg() returned NULL, which should never happen in this scenario! [sssd[nss]] [cache_req_process_result] (0x0400): CR #8: Finished: Error 1432158209: Internal Error [sssd[nss]] [nss_protocol_done] (0x4000): Sending reply: error [1432158209]: Internal Error [sssd[nss]] [client_recv] (0x0200): Client disconnected! Resolves: https://pagure.io/SSSD/sssd/issue/3485 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/351/head:pr351 git checkout pr351

6 years, 7 months

5
23
0 / 0

[sssd PR#370][opened] certmap: Suppress warning Wmissing-braces

by lslebodn

URL: https://github.com/SSSD/sssd/pull/370 Author: lslebodn Title: #370: certmap: Suppress warning Wmissing-braces Action: opened PR body: """ Older version of gcc(e.g. gcc-4.8.5-11.el7) had a false positive warning with c99 struct initialisation "{ 0 }". https://gcc.gnu.org/bugzilla/show_bug.cgi?id=53119 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64709 CC src/lib/certmap/libsss_certmap_la-sss_cert_content_nss.lo src/lib/certmap/sss_cert_content_nss.c: In function 'add_pkinit_princ_to_san_list': src/lib/certmap/sss_cert_content_nss.c:475:12: error: missing braces around initializer [-Werror=missing-braces] struct kerberos_principal_name kname = { 0 }; ^ src/lib/certmap/sss_cert_content_nss.c:475:12: error: (near initialization for 'kname.realm') [-Werror=missing-braces] """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/370/head:pr370 git checkout pr370

6 years, 7 months

2
9
0 / 0

[sssd PR#342][opened] SELINUX: Use getseuserbyname to get IPA seuser

by justin-stephenson

URL: https://github.com/SSSD/sssd/pull/342 Author: justin-stephenson Title: #342: SELINUX: Use getseuserbyname to get IPA seuser Action: opened PR body: """ libsemanage API function semanage_seuser_query can fail in certain circumstances preventing user logins. The libselinux function getseuserbyname will be a more reliable method to retrieve SELinux usernames and is recommended by SELinux developers. Replace get_seuser function with getseuserbyname. Resolves: https://pagure.io/SSSD/sssd/issue/3308 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/342/head:pr342 git checkout pr342

6 years, 7 months

8
36
0 / 0

[sssd PR#295][opened] MAN: Document that the secrets provider can only be specified in a per-client section

by jhrozek

URL: https://github.com/SSSD/sssd/pull/295 Author: jhrozek Title: #295: MAN: Document that the secrets provider can only be specified in a per-client section Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/3417 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/295/head:pr295 git checkout pr295

6 years, 7 months

4
18
0 / 0

[sssd PR#316][opened] MAN: Improve failover documentation by explaining the timeout better

by jhrozek

URL: https://github.com/SSSD/sssd/pull/316 Author: jhrozek Title: #316: MAN: Improve failover documentation by explaining the timeout better Action: opened PR body: """ There were some customer cases recently where just tuning the timeout for service resolution helped the customer, but it was not apparent from the man pages what exactly to tune. This man page patch aims to improve that. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/316/head:pr316 git checkout pr316

6 years, 7 months

3
12
0 / 0

[sssd PR#321][opened] certmap: add OpenSSL implementation

by sumit-bose

URL: https://github.com/SSSD/sssd/pull/321 Author: sumit-bose Title: #321: certmap: add OpenSSL implementation Action: opened PR body: """ The OpenSSL 1.1 API is used but there is a short macro block which should added the needed compatibility if and older OpenSSL version is used. Related to https://pagure.io/SSSD/sssd/issue/3050 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/321/head:pr321 git checkout pr321

6 years, 7 months

4
19
0 / 0

[sssd PR#325][opened] MAN: Improve description of 'trusted domain section' in sssd.conf's man page

by amitkumar50

URL: https://github.com/SSSD/sssd/pull/325 Author: amitkumar50 Title: #325: MAN: Improve description of 'trusted domain section' in sssd.conf's man page Action: opened PR body: """ PR generated to include explaination for ipa ad trust sssd configuration where ad has a child domain. Explanation is added to 'TRUSTED DOMAIN SECTION'. Also an example is included to better understanding. Resolves: https://pagure.io/SSSD/sssd/issue/3399 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/325/head:pr325 git checkout pr325

6 years, 7 months

4
18
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel September 2017