[sssd PR#552][opened] GPO: Store security CSE settings of all applicable GPOs
by rdratlos
URL: https://github.com/SSSD/sssd/pull/552
Author: rdratlos
Title: #552: GPO: Store security CSE settings of all applicable GPOs
Action: opened
PR body:
"""
When two or more GPO rules were defined on the server
and one of them contained no SIDs (no users or groups
were specified), then SSSD failed to store such rule
and users were denied access (system error).
Access control settings for users and groups (e.g.
allow/deny interactive login) may be split on more than
one GPO. Current SSSD implementation overwrites settings
of previously analyzed GPOs with the settings of
subsequently analyzed GPOs.
Check if allowed or denied SIDs retrieved from previous
GPOs are stored in the group policy result object within
the GPO cache and append missing SIDs, that have been
retrieved from subsequent GPOs in the GPO list.
Resolves:
https://pagure.io/SSSD/sssd/issue/3680
Signed-off-by: Thomas Reim <reimth(a)gmail.com>
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/552/head:pr552
git checkout pr552
6 years
[sssd PR#378][opened] [RFC] Use GNULIB's compiler warning code
by fidencio
URL: https://github.com/SSSD/sssd/pull/378
Author: fidencio
Title: #378: [RFC] Use GNULIB's compiler warning code
Action: opened
PR body:
"""
This is the 3rd tentative to have this patch reviewed. For more references, please, see: PR #50.
So, I've re-worked those patches a little bit and here is the time difference when running reconfing with the patches:
```
real 0m26.047s
user 0m21.318s
sys 0m4.635s
```
And now without:
```
real 0m25.565s
user 0m20.696s
sys 0m4.433s
```
This patch set is rebased on top of PR #377.
I really would appreciate if someone could review and give their opinion.
The reason this PR was blocked is because this time difference has been considered a "performance issue".
@jhrozek , could you take a look on this?
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/378/head:pr378
git checkout pr378
6 years
[sssd PR#515][opened] sssctl: Showing help even when sssd not configured
by amitkumar50
URL: https://github.com/SSSD/sssd/pull/515
Author: amitkumar50
Title: #515: sssctl: Showing help even when sssd not configured
Action: opened
PR body:
"""
Current Issue:
On a clean and unconfigured system, it's not possible
to use --help.
`# dnf install sssd-tools`
`# sssctl cache-remove --help`
Shows:
[confdb_get_domains] (0x0010): No domains configured, fatal error!
Solution: Donot check for confdb initialization when sssctl 3rd
command line argument passed is '--help'.
Please note when we run 'sssctl --help' on unconfigured system
confdb check is not done and proper o/p is seen.
Also suggest if we have better alternative..
Resolves: https://pagure.io/SSSD/sssd/issue/3634
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/515/head:pr515
git checkout pr515
6 years