sssd-devel November 2018

sssd-devel@lists.fedorahosted.org

4 participants
39 discussions

Cannot start sssd from source [libsss_ldap_common.so: undefined symbol: ldap_tls_inplace]
by Amit Kumar 19 Nov '18

19 Nov '18

Hello, I build sssd-1.16.0-19 from source. #./configure; make; make install # /usr/local/sbin/sssd -i -d 1 ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_module_open_lib] (0x0010): Unable to load module [ad] with path [/usr/local/lib/sssd/libsss_ad.so]: /usr/local/lib/sssd/libsss_ldap_common.so: undefined symbol: ldap_tls_inplace (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_load_module] (0x0020): Unable to create DP module. (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_target_init] (0x0010): Unable to load module ad (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_load_targets] (0x0020): Unable to load target [id] [80]: Accessing a corrupted shared library. (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_init] (0x0020): Unable to initialize DP targets [1432158209]: Internal Error (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [be_process_init] (0x0010): Unable to setup data provider [1432158209]: Internal Error (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [main] (0x0010): Could not initialize backend [1432158209] ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_module_open_lib] (0x0010): Unable to load module [ad] with path [/usr/local/lib/sssd/libsss_ad.so]: /usr/local/lib/sssd/libsss_ldap_common.so: undefined symbol: ldap_tls_inplace (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_load_module] (0x0020): Unable to create DP module. (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_target_init] (0x0010): Unable to load module ad (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_load_targets] (0x0020): Unable to load target [id] [80]: Accessing a corrupted shared library. (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [dp_init] (0x0020): Unable to initialize DP targets [1432158209]: Internal Error (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [be_process_init] (0x0010): Unable to setup data provider [1432158209]: Internal Error (Mon Nov 19 12:49:31 2018) [sssd[be[atest.com]]] [main] (0x0010): Could not initialize backend [1432158209] ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header (Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_module_open_lib] (0x0010): Unable to load module [ad] with path [/usr/local/lib/sssd/libsss_ad.so]: /usr/local/lib/sssd/libsss_ldap_common.so: undefined symbol: ldap_tls_inplace (Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_load_module] (0x0020): Unable to create DP module. (Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_target_init] (0x0010): Unable to load module ad (Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_load_targets] (0x0020): Unable to load target [id] [80]: Accessing a corrupted shared library. (Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [dp_init] (0x0020): Unable to initialize DP targets [1432158209]: Internal Error (Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [be_process_init] (0x0010): Unable to setup data provider [1432158209]: Internal Error (Mon Nov 19 12:49:33 2018) [sssd[be[atest.com]]] [main] (0x0010): Could not initialize backend [1432158209] (Mon Nov 19 12:49:36 2018) [sssd] [services_startup_timeout] (0x0020): Providers did not start in time, forcing services startup! ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header (Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sbus_client_init] (0x0020): check_file failed for [/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com]. (Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sss_process_init] (0x0010): fatal error setting up backend connector (Mon Nov 19 12:49:36 2018) [sssd[ssh]] [ssh_process_init] (0x0010): sss_process_init() failed (Mon Nov 19 12:49:36 2018) [sssd[pam]] [sbus_client_init] (0x0020): check_file failed for [/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com]. (Mon Nov 19 12:49:36 2018) [sssd[pam]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Mon Nov 19 12:49:36 2018) [sssd[pam]] [sss_process_init] (0x0010): fatal error setting up backend connector (Mon Nov 19 12:49:36 2018) [sssd[pam]] [pam_process_init] (0x0010): sss_process_init() failed (Mon Nov 19 12:49:36 2018) [sssd[nss]] [sbus_client_init] (0x0020): check_file failed for [/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com]. (Mon Nov 19 12:49:36 2018) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Mon Nov 19 12:49:36 2018) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Mon Nov 19 12:49:36 2018) [sssd[nss]] [nss_process_init] (0x0010): sss_process_init() failed ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header (Mon Nov 19 12:49:36 2018) [sssd[nss]] [sbus_client_init] (0x0020): check_file failed for [/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com]. (Mon Nov 19 12:49:36 2018) [sssd[nss]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Mon Nov 19 12:49:36 2018) [sssd[nss]] [sss_process_init] (0x0010): fatal error setting up backend connector (Mon Nov 19 12:49:36 2018) [sssd[nss]] [nss_process_init] (0x0010): sss_process_init() failed ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header (Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sbus_client_init] (0x0020): check_file failed for [/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com]. (Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Mon Nov 19 12:49:36 2018) [sssd[ssh]] [sss_process_init] (0x0010): fatal error setting up backend connector (Mon Nov 19 12:49:36 2018) [sssd[ssh]] [ssh_process_init] (0x0010): sss_process_init() failed (Mon Nov 19 12:49:36 2018) [sssd[pam]] [sbus_client_init] (0x0020): check_file failed for [/usr/local/var/lib/sss/pipes/private/sbus-dp_atest.com]. (Mon Nov 19 12:49:36 2018) [sssd[pam]] [sss_dp_init] (0x0010): Failed to connect to monitor services. (Mon Nov 19 12:49:36 2018) [sssd[pam]] [sss_process_init] (0x0010): fatal error setting up backend connector (Mon Nov 19 12:49:36 2018) [sssd[pam]] [pam_process_init] (0x0010): sss_process_init() failed ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la : /usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header (Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_module_open_lib] (0x0010): Unable to load module [ad] with path [/usr/local/lib/sssd/libsss_ad.so]: /usr/local/lib/sssd/libsss_ldap_common.so: undefined symbol: ldap_tls_inplace (Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_load_module] (0x0020): Unable to create DP module. (Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_target_init] (0x0010): Unable to load module ad (Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_load_targets] (0x0020): Unable to load target [id] [80]: Accessing a corrupted shared library. (Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [dp_init] (0x0020): Unable to initialize DP targets [1432158209]: Internal Error (Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [be_process_init] (0x0010): Unable to setup data provider [1432158209]: Internal Error (Mon Nov 19 12:49:37 2018) [sssd[be[atest.com]]] [main] (0x0010): Could not initialize backend [1432158209] (Mon Nov 19 12:49:37 2018) [sssd] [monitor_restart_service] (0x0010): Process [atest.com] definitely stopped! (Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Terminating [nss][12122] (Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Couldn't kill [nss][12122]: [No such process] (Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Terminating [pam][12121] (Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Couldn't kill [pam][12121]: [No such process] (Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Terminating [ssh][12120] (Mon Nov 19 12:49:37 2018) [sssd] [monitor_quit] (0x0020): Couldn't kill [ssh][12120]: [No such process] (Mon Nov 19 12:49:37 2018) [sssd] [monitor_cleanup] (0x0010): Error removing pidfile! (2 [No such file or directory]) # # ldd /usr/local/lib/sssd/libsss_ldap_common.so linux-vdso.so.1 => (0x00007ffc5c391000) libsss_krb5_common.so => /usr/local/lib/sssd/libsss_krb5_common.so (0x00007f9f0364f000) libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f9f0344b000) libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f9f03163000) libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f9f02f30000) libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f9f02d2c000) libsss_idmap.so.0 => /usr/local/lib/libsss_idmap.so.0 (0x00007f9f02b25000) libsss_util.so => /usr/local/lib/sssd/libsss_util.so (0x00007f9f0289f000) librt.so.1 => /lib64/librt.so.1 (0x00007f9f02697000) libpopt.so.0 => /lib64/libpopt.so.0 (0x00007f9f0248d000) libldb.so.1 => /lib64/libldb.so.1 (0x00007f9f0225c000) libdbus-1.so.3 => /lib64/libdbus-1.so.3 (0x00007f9f0200c000) libpcre.so.1 => /lib64/libpcre.so.1 (0x00007f9f01daa000) libini_config.so.5 => /usr/local/lib/libini_config.so.5 (0x00007f9f01b91000) libpath_utils.so.1 => /usr/local/lib/libpath_utils.so.1 (0x00007f9f0198d000) libbasicobjects.so.0 => /usr/local/lib/libbasicobjects.so.0 (0x00007f9f0178a000) libref_array.so.1 => /usr/local/lib/libref_array.so.1 (0x00007f9f01587000) libcollection.so.4 => /usr/local/lib/libcollection.so.4 (0x00007f9f0137b000) libldap-2.4.so.2 => /usr/local/lib/libldap-2.4.so.2 (0x00007f9f01139000) liblber-2.4.so.2 => /usr/local/lib/liblber-2.4.so.2 (0x00007f9f00f2a000) libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f9f00d11000) libsasl2.so.3 => /lib64/libsasl2.so.3 (0x00007f9f00af4000) libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f9f008cd000) libtdb.so.1 => /lib64/libtdb.so.1 (0x00007f9f006b6000) libsystemd.so.0 => /lib64/libsystemd.so.0 (0x00007f9f00485000) libglib-2.0.so.0 => /lib64/libglib-2.0.so.0 (0x00007f9f00171000) libsss_child.so => /usr/local/lib/sssd/libsss_child.so (0x00007f9efff6b000) libtevent.so.0 => /usr/local/lib/libtevent.so.0 (0x00007f9effd57000) libsss_cert.so => /usr/local/lib/sssd/libsss_cert.so (0x00007f9effb52000) libsss_crypt.so => /usr/local/lib/sssd/libsss_crypt.so (0x00007f9eff94b000) libdhash.so.1 => /usr/local/lib/libdhash.so.1 (0x00007f9eff747000) libsss_debug.so => /usr/local/lib/sssd/libsss_debug.so (0x00007f9eff543000) libsss_certmap.so.0 => /usr/local/lib/libsss_certmap.so.0 (0x00007f9eff334000) libtalloc.so.2 => /lib64/libtalloc.so.2 (0x00007f9eff124000) libssl3.so => /lib64/libssl3.so (0x00007f9efeed2000) libsmime3.so => /lib64/libsmime3.so (0x00007f9efecab000) libnss3.so => /lib64/libnss3.so (0x00007f9efe97e000) libnssutil3.so => /lib64/libnssutil3.so (0x00007f9efe74f000) libplds4.so => /lib64/libplds4.so (0x00007f9efe54b000) libplc4.so => /lib64/libplc4.so (0x00007f9efe346000) libnspr4.so => /lib64/libnspr4.so (0x00007f9efe108000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f9efdeec000) libdl.so.2 => /lib64/libdl.so.2 (0x00007f9efdce8000) libc.so.6 => /lib64/libc.so.6 (0x00007f9efd91b000) libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f9efd70d000) /lib64/ld-linux-x86-64.so.2 (0x00007f9f03b0c000) libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f9efd4d6000) libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f9efd289000) libcap.so.2 => /lib64/libcap.so.2 (0x00007f9efd084000) libm.so.6 => /lib64/libm.so.6 (0x00007f9efcd82000) liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f9efcb5c000) liblz4.so.1 => /lib64/liblz4.so.1 (0x00007f9efc947000) libgcrypt.so.11 => /lib64/libgcrypt.so.11 (0x00007f9efc6c6000) libgpg-error.so.0 => /lib64/libgpg-error.so.0 (0x00007f9efc4c1000) libdw.so.1 => /lib64/libdw.so.1 (0x00007f9efc27a000) libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f9efc064000) libattr.so.1 => /lib64/libattr.so.1 (0x00007f9efbe5f000) libfreebl3.so => /lib64/libfreebl3.so (0x00007f9efbc5c000) libelf.so.1 => /lib64/libelf.so.1 (0x00007f9efba44000) libz.so.1 => /lib64/libz.so.1 (0x00007f9efb82e000) libbz2.so.1 => /lib64/libbz2.so.1 (0x00007f9efb61e000) # # ldd /usr/lib64/sssd/libsss_ldap_common.so linux-vdso.so.1 => (0x00007ffe6650c000) libsss_krb5_common.so => /usr/lib64/sssd/libsss_krb5_common.so (0x00007f4722c31000) libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f4722a2d000) libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f4722745000) libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f4722512000) libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f472230e000) libsss_idmap.so.0 => /lib64/libsss_idmap.so.0 (0x00007f4722107000) libsss_util.so => /usr/lib64/sssd/libsss_util.so (0x00007f4721e7c000) librt.so.1 => /lib64/librt.so.1 (0x00007f4721c74000) libpopt.so.0 => /lib64/libpopt.so.0 (0x00007f4721a6a000) libldb.so.1 => /lib64/libldb.so.1 (0x00007f4721839000) libdbus-1.so.3 => /lib64/libdbus-1.so.3 (0x00007f47215e9000) libpcre.so.1 => /lib64/libpcre.so.1 (0x00007f4721387000) libini_config.so.3 => /lib64/libini_config.so.3 (0x00007f472116d000) libbasicobjects.so.0 => /lib64/libbasicobjects.so.0 (0x00007f4720f6a000) libref_array.so.1 => /lib64/libref_array.so.1 (0x00007f4720d67000) libcollection.so.2 => /lib64/libcollection.so.2 (0x00007f4720b5a000) liblber-2.4.so.2 => /lib64/liblber-2.4.so.2 (0x00007f472094b000) libldap-2.4.so.2 => /lib64/libldap-2.4.so.2 (0x00007f47206f6000) libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f47204cf000) libtdb.so.1 => /lib64/libtdb.so.1 (0x00007f47202b8000) libglib-2.0.so.0 => /lib64/libglib-2.0.so.0 (0x00007f471ffa4000) libsss_child.so => /usr/lib64/sssd/libsss_child.so (0x00007f471fd9e000) libtevent.so.0 => /lib64/libtevent.so.0 (0x00007f471fb8e000) libsss_cert.so => /usr/lib64/sssd/libsss_cert.so (0x00007f471f989000) libsss_crypt.so => /usr/lib64/sssd/libsss_crypt.so (0x00007f471f782000) libdhash.so.1 => /lib64/libdhash.so.1 (0x00007f471f57e000) libsss_debug.so => /usr/lib64/sssd/libsss_debug.so (0x00007f471f379000) libsystemd.so.0 => /lib64/libsystemd.so.0 (0x00007f471f148000) libsss_certmap.so.0 => /lib64/libsss_certmap.so.0 (0x00007f471ef39000) libtalloc.so.2 => /lib64/libtalloc.so.2 (0x00007f471ed29000) libssl3.so => /lib64/libssl3.so (0x00007f471ead7000) libsmime3.so => /lib64/libsmime3.so (0x00007f471e8b0000) libnss3.so => /lib64/libnss3.so (0x00007f471e583000) libnssutil3.so => /lib64/libnssutil3.so (0x00007f471e354000) libplds4.so => /lib64/libplds4.so (0x00007f471e150000) libplc4.so => /lib64/libplc4.so (0x00007f471df4b000) libnspr4.so => /lib64/libnspr4.so (0x00007f471dd0d000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f471daf1000) libdl.so.2 => /lib64/libdl.so.2 (0x00007f471d8ed000) libc.so.6 => /lib64/libc.so.6 (0x00007f471d520000) libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f471d312000) libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f471d0f9000) /lib64/ld-linux-x86-64.so.2 (0x00007f47230f0000) libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f471cec2000) libpath_utils.so.1 => /lib64/libpath_utils.so.1 (0x00007f471ccbe000) libsasl2.so.3 => /lib64/libsasl2.so.3 (0x00007f471caa1000) libssl.so.10 => /lib64/libssl.so.10 (0x00007f471c830000) libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007f471c3cf000) libcap.so.2 => /lib64/libcap.so.2 (0x00007f471c1ca000) libm.so.6 => /lib64/libm.so.6 (0x00007f471bec8000) liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f471bca2000) liblz4.so.1 => /lib64/liblz4.so.1 (0x00007f471ba8d000) libgcrypt.so.11 => /lib64/libgcrypt.so.11 (0x00007f471b80c000) libgpg-error.so.0 => /lib64/libgpg-error.so.0 (0x00007f471b607000) libdw.so.1 => /lib64/libdw.so.1 (0x00007f471b3c0000) libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f471b1aa000) libfreebl3.so => /lib64/libfreebl3.so (0x00007f471afa7000) libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f471ad5a000) libz.so.1 => /lib64/libz.so.1 (0x00007f471ab44000) libattr.so.1 => /lib64/libattr.so.1 (0x00007f471a93f000) libelf.so.1 => /lib64/libelf.so.1 (0x00007f471a727000) Thanks Amit

2 1

PAM Authentication is returning failure when I am trying to use MFA
by MOHIT KUMAR 19 Nov '18

19 Nov '18

I have hooked one pam implementation module pam_custom.so which does multi factor authentication for a user I am trying to use pam_get_item for otp in my internal pam pam_custom.so module with msg.style type as PAM_TEXT_INFO. But it is failing as i am getting error message as Conversation style 3 not supported. This is breaking my existing functionality and I am not able to use sssd. Is it a limitation with sssd? Although normal username and password is authenticated successfully for which MFA is not there. sssd.conf --------------------[sssd] config_file_version = 2 services = nss, pam domains = proxy_proxy [nss] [pam] [domain/proxy_proxy] auth_provider = proxy id_provider = proxy proxy_lib_name = customnss proxy_pam_target = sssdproxycustom enumerate = false cache_credentials = false debug_level = 9 min_id = 500 sssdproxycustom -------------------------- auth required pam_custom.so account required pam_custom.so password required pam_custom.so session required pam_custom.so

2 7

[sssd PR#692][opened] pam_sss: return PAM_AUTHINFO_UNAVAIL if sc options are set
by sumit-bose 13 Nov '18

13 Nov '18

URL: https://github.com/SSSD/sssd/pull/692 Author: sumit-bose Title: #692: pam_sss: return PAM_AUTHINFO_UNAVAIL if sc options are set Action: opened PR body: """ If pam_sss is called for PAM_USER root it currently returns PAM_USER_UNKNOWN since SSSD does not handle root. To meet the documented behavior if one to the sc options is used pam_sss should return PAM_AUTHINFO_UNAVAIL in this case as well. Related to https://pagure.io/SSSD/sssd/issue/3876 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/692/head:pr692 git checkout pr692

2 4

[sssd PR#685][opened] Hi,
by jhrozek 07 Nov '18

07 Nov '18

URL: https://github.com/SSSD/sssd/pull/685 Author: jhrozek Title: #685: Hi, Action: opened PR body: """ this PR allows the administrator to only restart the KCM service in order to apply changes in sssd.conf's [kcm] section. I think this would be nice for admins, but the code feels already a bit hackish to me. I think we should keep on working on the static files with the read-only configuration, because then: - we could get rid of the special case to remove the section, because the section would always be there - we could remove different cases for adding/replacing sections - ..and of course the other things like config-show or running with no config file, just snippets I also didn't enable this functionality for the other responders. I don't know if it makes sense without more testing and in general I don't think there are too many users of socket activated responders except kcm. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/685/head:pr685 git checkout pr685

2 14

[sssd PR#691][opened] CI: Make the c-ares suppression file more relaxed to prevent failures on Debian
by jhrozek 07 Nov '18

07 Nov '18

URL: https://github.com/SSSD/sssd/pull/691 Author: jhrozek Title: #691: CI: Make the c-ares suppression file more relaxed to prevent failures on Debian Action: opened PR body: """ Prevents tests running under valgrind from failing with: ==9189== 2 bytes in 1 blocks are possibly lost in loss record 1 of 195 ==9189== at 0x48357BF: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==9189== by 0x60C7EF9: strdup (strdup.c:42) ==9189== by 0x6E6C0EE: ares_init_options (in /usr/lib/x86_64-linux-gnu/libcares.so.2.2.0) ==9189== by 0x5F96674: recreate_ares_channel (async_resolv.c:430) ==9189== by 0x5F967D6: resolv_init (async_resolv.c:471) ==9189== by 0x5F83147: be_res_init (data_provider_fo.c:884) ==9189== by 0x5F83147: be_res_init (data_provider_fo.c:865) ==9189== by 0x5F832B8: be_init_failover (data_provider_fo.c:70) ==9189== by 0x127876: test_ipa_server_create_trusts_setup (test_ipa_subdomains_server.c:311) ==9189== by 0x48541E2: ??? (in /usr/lib/x86_64-linux-gnu/libcmocka.so.0.5.1) ==9189== by 0x4854A16: _cmocka_run_group_tests (in /usr/lib/x86_64-linux-gnu/libcmocka.so.0.5.1) ==9189== by 0x1146CC: main (test_ipa_subdomains_server.c:999) The failure is expected as the tests fork but the child processes never clean up after themselves. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/691/head:pr691 git checkout pr691

2 6

[sssd PR#689][opened] IFP: Use subreq, not req when calling RefreshRules_recv
by jhrozek 05 Nov '18

05 Nov '18

URL: https://github.com/SSSD/sssd/pull/689 Author: jhrozek Title: #689: IFP: Use subreq, not req when calling RefreshRules_recv Action: opened PR body: """ This emits a failure when refreshing access control rules from e.g. sssctl access-report. Resolves: https://pagure.io/SSSD/sssd/issue/3874 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/689/head:pr689 git checkout pr689

2 5

[sssd PR#687][opened] sbus: allow access for sssd user
by pbrezina 05 Nov '18

05 Nov '18

URL: https://github.com/SSSD/sssd/pull/687 Author: pbrezina Title: #687: sbus: allow access for sssd user Action: opened PR body: """ D-Bus allows access for root and euid by default, however when running in non-root mode monitor continues to run as root but responsers as sssd user. Therefore monitor euid != sssd user and the connection is terminated. We must explicitly allow the connection for sssd user uid. Resolves: https://pagure.io/SSSD/sssd/issue/3871 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/687/head:pr687 git checkout pr687

2 5

[sssd PR#682][opened] DYNDNS: Drop support for legacy NSUPDATE
by thalman 05 Nov '18

05 Nov '18

URL: https://github.com/SSSD/sssd/pull/682 Author: thalman Title: #682: DYNDNS: Drop support for legacy NSUPDATE Action: opened PR body: """ We should drop support for legacy versions of NSUPDATE that doesn't support 'realm' option. The option 'realm' was added in BIND 9.8.0a1. Resolves: https://pagure.io/SSSD/sssd/issue/2817 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/682/head:pr682 git checkout pr682

2 5

[sssd PR#688][opened] Allow non-privileged sssd user connect to private dbus
by stanislavlevin 01 Nov '18

01 Nov '18

URL: https://github.com/SSSD/sssd/pull/688 Author: stanislavlevin Title: #688: Allow non-privileged sssd user connect to private dbus Action: opened PR body: """ During startup SSSD monitor launches the children and stands on a private dbus to waiting for a reply from them. But by default dbus auth rules connection is allowed if the client is root or has the same UID or anonymous is allowed. The forked children drop their root privileges in favor of non-privileged user (e.g sssd). In such a case there is no access to the monitor dbus connection to say: "Hey, i'm here.". Thus, sssd service becomes failed. This patch changes the default dbus authorization rules for a private connections to allow incomings from root or sssd user. Fixes: https://pagure.io/SSSD/sssd/issue/3871 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/688/head:pr688 git checkout pr688

3 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel November 2018