[sssd PR#132][opened] Add "Wants=" to sssd unit and avoid PAC responder to be always running
by fidencio
URL: https://github.com/SSSD/sssd/pull/132
Author: fidencio
Title: #132: Add "Wants=" to sssd unit and avoid PAC responder to be always running
Action: opened
PR body:
"""
The first patch changes the current logic of having the services' sockets disabled by default as it adds a "Wants=" to the sssd unit file, making all the services' sockets enabled by the moment sssd service is enabled.
The second patch takes advantage of the first patch and avoids running PAC responder in case its socket is active, leaving the service to be socket-activated when needed.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/132/head:pr132
git checkout pr132
4 years, 3 months
[sssd PR#915][opened] Fix krb5-related debug
by alexey-tikhonov
URL: https://github.com/SSSD/sssd/pull/915
Author: alexey-tikhonov
Title: #915: Fix krb5-related debug
Action: opened
PR body:
"""
This PR is continuation of cleanup work done in #883.
`KEYTAB_CLEAN_NAME` macro was replaced with `sss_printable_keytab_name()` function and a number of issues related with usage of `krb5_get_error_message()` were fixed.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/915/head:pr915
git checkout pr915
4 years, 4 months
ipa: kerberos locator plugin and AD sites - sssd 1.13.x
by Ziomek, M. (Maciej)
Hello everyone,
I would kindly ask whether there are any plans / possibilities to port features introduced in sssd 1.16.3 back to sssd 1.13.x (LTM) ? These features are:
1. Since 1.16.3 the kdcinfo files are generated automatically also for trusted domains in setups that use id_provider=ad and IPA masters in a trust relationship with an AD domain.
2. SSSD Kerberos locator plugin can now process multiple address if SSSD generates more than one.
3. On IPA clients the AD DCs or the AD site which should be used to authenticate users can now be listed in a subdomain section.
These three mentioned features help us a lot but at the same time we are suffering from their lack in 1.13.x ( LTM ).
We are still using systems where version 1.13.x is the only one officially available.
Have a nice day,
Regards
Maciej Ziomek
ING Business Shared Services B.V. z siedzibą w Amsterdamie, Holandia, VAT PL 526-319-58-54, działająca w Polsce w formie oddziału, pod firmą ING Business Shared Services B.V. spółka z ograniczoną odpowiedzialnością Oddział w Polsce z siedzibą w Katowicach, ul. Konduktorska 35, 40-155 Katowice, NIP: 2050005130, wpisana do rejestru przedsiębiorców Krajowego Rejestru Sądowego prowadzonego przez Sąd Rejonowy Katowice-Wschód w Katowicach, VIII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem KRS 0000702305.
4 years, 5 months