sssd-devel March 2018

sssd-devel@lists.fedorahosted.org

10 participants
61 discussions

[sssd PR#436][opened] subdomains: Remove code only used in tests
by amitkumar50 21 May '18

21 May '18

URL: https://github.com/SSSD/sssd/pull/436 Author: amitkumar50 Title: #436: subdomains: Remove code only used in tests Action: opened PR body: """ When setting the ad_options in subdomain code there is an condition if (cdb == NULL || conf_path == NULL) True branch is only usable in tests that use old code to initialize the options without confdb context. It would be good to remove dead code. Since cdb, conf_path NULL check is already done inside ad_create_options() Resolves: https://pagure.io/SSSD/sssd/issue/3338 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/436/head:pr436 git checkout pr436

6 15

[sssd PR#410][opened] IPA: sanitize name in override search filter
by lslebodn 21 May '18

21 May '18

URL: https://github.com/SSSD/sssd/pull/410 Author: lslebodn Title: #410: IPA: sanitize name in override search filter Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/3545 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/410/head:pr410 git checkout pr410

4 17

[sssd PR#387][opened] Setting ldap_sudo_include_regexp to false
by amitkumar50 21 May '18

21 May '18

URL: https://github.com/SSSD/sssd/pull/387 Author: amitkumar50 Title: #387: Setting ldap_sudo_include_regexp to false Action: opened PR body: """ Disable ldap_sudo_include_regexp option by default since this is costly operation for evaluation on ldap server. Resolves: https://pagure.io/SSSD/sssd/issue/3515 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/387/head:pr387 git checkout pr387

4 13

[sssd PR#247][opened] Subdomain inherit
by mzidek-rh 21 May '18

21 May '18

URL: https://github.com/SSSD/sssd/pull/247 Author: mzidek-rh Title: #247: Subdomain inherit Action: opened PR body: """ I tested if the options that work in subdomain inherit also work in trusted domain section in sssd.conf. Most seem to work without any changes in the code except for two. With these two patches only one that does not work remains (I wanted to send patchset that adds all the options, but I got stuck on the option that sets the ldap principal, so I am sending this in the meantime). """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/247/head:pr247 git checkout pr247

4 13

[sssd PR#531][opened] Add the needed machinery to have automated builds for our COPR repos
by fidencio 16 May '18

16 May '18

URL: https://github.com/SSSD/sssd/pull/531 Author: fidencio Title: #531: Add the needed machinery to have automated builds for our COPR repos Action: opened PR body: """ As the title says, these patches are introducing the needed machinery to have automated builds for our COPR repos. The next steps are: - On Pagure, someone who has admin rights will have to: - Go to the project's web page: https://pagure.io/SSSD/sssd - Click in the "Settings" button - Go down to the "Hook" section - Click in the "Fedmsg" field - Check the "Active" checkbox - Click in the "Update" button - On COPR: - Go to the each project's webpage: - https://copr.fedorainfracloud.org/coprs/g/sssd/sssd-1-13/ - https://copr.fedorainfracloud.org/coprs/g/sssd/sssd-1-14/ - To be created - https://copr.fedorainfracloud.org/coprs/g/sssd/sssd-1-16/ - https://copr.fedorainfracloud.org/coprs/g/sssd/sssd-master/ - Go to the "Packages" tab - Click in "sssd" package - In "Default Build Source" section, click in the "Edit" button - In the SCM tab do: - Type: Git - Clone url: https://pagure.io/SSSD/sssd.git - Committish: <branch name> (eg, master, sssd-1-13, sssd-1-14, ...) - In the "How to build SRPM from the source" section, select: - make srpm - Click in the "Submit" button After those steps, a new push would trigger a new copr build to the project. The OSes that we're targeting are: - el (all version, all arches) - fedora (all versions, all arches) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/531/head:pr531 git checkout pr531

2 12

[sssd PR#464][opened] SYSDB: Properly handle name/gid override when using domain resolution order
by fidencio 11 May '18

11 May '18

URL: https://github.com/SSSD/sssd/pull/464 Author: fidencio Title: #464: SYSDB: Properly handle name/gid override when using domain resolution order Action: opened PR body: """ When using name/gid override together with domain resolution order the mpg name/gid may be returned instead of the overridden one. In order to avoid that, let's add a check in case the domain supports mpg so we can ensure that the originalADname and originalADgidNumber attributes are the very same as the ones searched and then normally proceed with the current flow in the code. In case those are not the same, we *must* follow the code path for the non-mpg domains and then return the proper values. Resolves: https://pagure.io/SSSD/sssd/issue/3595 Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/464/head:pr464 git checkout pr464

4 29

[sssd PR#511][opened] Do not shutdown KCM/Secrets responders when activities are happening ...
by fidencio 27 Apr '18

27 Apr '18

URL: https://github.com/SSSD/sssd/pull/511 Author: fidencio Title: #511: Do not shutdown KCM/Secrets responders when activities are happening ... Action: opened PR body: """ Firstly, I'd like to make it **explicit** that this PR is **missing tests**, but I won't write them down till we have an agreement whether the proposed patches do look right/good. Basically, while trying to reproduce https://pagure.io/SSSD/sssd/issue/3470 I've noticed that both secrets and kcm responders were going down due to the responder_idle_timeout expiring ... even with a lot of activities happening on them. Does this approach look right? If yes, then, what would be the easiest way to test: - A responder actually goes down after x seconds; - Any activity on that responder will make the responder alive for more x seconds; """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/511/head:pr511 git checkout pr511

3 36

[sssd PR#547][opened] Tests for #511
by fidencio 27 Apr '18

27 Apr '18

URL: https://github.com/SSSD/sssd/pull/547 Author: fidencio Title: #547: Tests for #511 Action: opened PR body: """ We've decided to split the fix/tests in two different PRs. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/547/head:pr547 git checkout pr547

1 5

[sssd PR#128][opened] Fix group renaming issue when "id_provider = ldap" is set
by fidencio 25 Apr '18

25 Apr '18

URL: https://github.com/SSSD/sssd/pull/128 Author: fidencio Title: #128: Fix group renaming issue when "id_provider = ldap" is set Action: opened PR body: """ Those two patches fix https://bugzilla.redhat.com/show_bug.cgi?id=1401241 The sssd.conf used in order to reproduce this issue looks like: ``` [sssd] config_file_version = 2 services = nss, pam domains = ad.fidencio.lan [nss] [pam] [domain/ad.fidencio.lan] ad_domain = ad.fidencio.lan krb5_realm = AD.FIDENCIO.LAN realmd_tags = manages-system joined-with-adcli cache_credentials = True krb5_store_password_if_offline = True default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = True fallback_homedir = /home/%u@%d ldap_referrals = false enumerate = false id_provider = ldap #id_provider = ad auth_provider = krb5 chpass_provider = krb5 access_provider = ldap ldap_sasl_mech = GSSAPI ldap_schema = ad ldap_user_object_class = user ldap_user_home_directory = unixHomeDirectory ldap_user_principal = userPrincipalName ldap_group_object_class = group ldap_access_order = expire ldap_account_expire_policy = ad ldap_force_upper_case_realm = true ``` The reproducer can be found in the bug report. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/128/head:pr128 git checkout pr128

5 90

[sssd PR#501][opened] SDAP: Improve a DEBUG message about GC detection
by jhrozek 18 Apr '18

18 Apr '18

URL: https://github.com/SSSD/sssd/pull/501 Author: jhrozek Title: #501: SDAP: Improve a DEBUG message about GC detection Action: opened PR body: """ It was not entirely clear what the message means. We should improve the debug message to make it clear that all or none attributes should be replicated to the Global Catalog. This patch can be reverted once we fix https://pagure.io/SSSD/sssd/issue/3538 and only use the GC to look up the entry DN, not the entry itself. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/501/head:pr501 git checkout pr501

2 14

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel March 2018