URL: https://github.com/SSSD/sssd/pull/793
Author: pbrezina
Title: #793: ci: improve Jenkinsfile and add Fedora 30
Action: opened
PR body:
"""
I updated boxes and created box for Fedora 30 which is now
in beta. I've been testing it for a week in my local repo
and it seems that the infrastructure issues we were hitting
are fixed so I will reenable ci from upstream repository
and we will see.
I made some changes to Jenkinsfile - notably reduce code
duplication to minimum and workaroud some issues (like
if one distro failed, all distros were marked as failed).
I added test-suite.log to archived files and enabled moderate
tests to run (intgcheck, distcheck, rpms, ...). Tests now
takes around 2 hours per distro.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/793/head:pr793
git checkout pr793
URL: https://github.com/SSSD/sssd/pull/709
Author: tdukaric
Title: #709: Regex fails if there's a whitespace before option name
Action: opened
PR body:
"""
self.OPTCRE.match(line) fails if there's a whitespace before option name, which is valid for SSSD. This change will ignore any whitespace before the option name.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/709/head:pr709
git checkout pr709
URL: https://github.com/SSSD/sssd/pull/783
Author: branen
Title: #783: knownhostsproxy: friendly error msg for NXDOMAIN
Action: opened
PR body:
"""
This patch writes a brief, familiar error message to stderr when no addresses are able to be resolved for the host specified in argv:
```
(with patch)$ ssh the-void
sss_ssh_knownhostsproxy: Could not resolve hostname the-void
ssh_exchange_identification: Connection closed by remote host
```
Users accustomed to using SSH in environments where SSSD is not deployed may expect the usual "Could not resolve hostname" error from SSH when a domain name is misspelled or otherwise invalid:
```
(no sssd)$ ssh the-void
ssh: Could not resolve hostname the-void: Name or service not known
```
When such users begin using SSH in an SSSD-enabled environment, they may be confused when this familiar and straightforward message is replaced by a new one:
```
(sssd)$ ssh the-void
ssh_exchange_identification: Connection closed by remote host
```
If such users aren't aware that the system `ssh_config` is proxying their connection through `sss_ssh_knownhostsproxy`, they may mistakenly conclude that a connection had been made all the way to a remote host and, therefore, that the hostname they specified was valid and able to be resolved. This patch mitigates this opportunity for confusion.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/783/head:pr783
git checkout pr783
URL: https://github.com/SSSD/sssd/pull/806
Author: pbrezina
Title: #806: sudo: always use server highest usn for smart refresh
Action: opened
PR body:
"""
The sudo attributes may not be indexed on the server, therefore if
smart refresh filter is run on the server it may first search using
the indexed entryusn attribute and run the rest of the filter on
non-sudo objects. The number of objects that are filtered may increased
dramatically if sudo rules are not changed for a long time (and thus
keeping smaller and smaller last sudo usn number).
This patch makes sure that highest sudo usn number is always set to
the highest server usn number after each refresh.
Resolves:
https://pagure.io/SSSD/sssd/issue/3997
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/806/head:pr806
git checkout pr806
URL: https://github.com/SSSD/sssd/pull/804
Author: jhrozek
Title: #804: PAM: Also cache SSS_PAM_PREAUTH
Action: opened
PR body:
"""
Related: https://pagure.io/SSSD/sssd/issue/3960
Even if cached_auth_timeout was set, the pam responder would still forward
the preauthentication requests to the back end. This could trigger unwanted
traffic towards the KDCs.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/804/head:pr804
git checkout pr804