sssd-devel August 2019

sssd-devel@lists.fedorahosted.org

9 participants
59 discussions

[sssd PR#867][opened] ci: use python2 version of pytest
by pbrezina 23 Aug '19

23 Aug '19

URL: https://github.com/SSSD/sssd/pull/867 Author: pbrezina Title: #867: ci: use python2 version of pytest Action: opened PR body: """ Fedora 31 changed symlink of /usr/bin/py.test from pytest2 to pytest3. We need to run the python2 version in order to run our tests with python2. We might want to switch to Python3 in the future, but this is a quick fix for current situation when we cannot test against rawhide. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/867/head:pr867 git checkout pr867

2 11

[sssd PR#865][opened] KCM: Use int32_t type conversion in DEBUG message for int32_t variable
by jhrozek 23 Aug '19

23 Aug '19

URL: https://github.com/SSSD/sssd/pull/865 Author: jhrozek Title: #865: KCM: Use int32_t type conversion in DEBUG message for int32_t variable Action: opened PR body: """ The KDC offset is stored as int32_t, but a DEBUG message in KCM was using an uint32_t. This lead to confusion as it appeared that the offset does not work. Resolves: https://pagure.io/SSSD/sssd/issue/4063 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/865/head:pr865 git checkout pr865

3 6

[sssd PR#861][opened] IPA: Allow paging when fetching external groups
by jhrozek 23 Aug '19

23 Aug '19

URL: https://github.com/SSSD/sssd/pull/861 Author: jhrozek Title: #861: IPA: Allow paging when fetching external groups Action: opened PR body: """ For some reason (I guess a mistake during refactoring..) the LDAP search request that fetches the external groups does not enable the paging control. This means that the number of external groups that SSSD can fetch is limited to 2000. Resolves: https://pagure.io/SSSD/sssd/issue/4058 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/861/head:pr861 git checkout pr861

2 6

[sssd PR#820][opened] ad: delete domains disabled through ad_enabled_domains from cache
by pbrezina 23 Aug '19

23 Aug '19

URL: https://github.com/SSSD/sssd/pull/820 Author: pbrezina Title: #820: ad: delete domains disabled through ad_enabled_domains from cache Action: opened PR body: """ Steps to reproduce: 1. Have at least one subdomain in ad domain (e.g. child.ad.vm is subdomain of ad.vm). 2. Enable all domains, set ad_enabled_domains = [ad.vm] ... ad_enabled_domains = 3. Look up 'administrator(a)child.ad.vm' $ id administrator(a)child.ad.vm uid=1678800500(administrator(a)child.ad.vm) ... 4. Disable the subdomain by setting 'ad_enabled_domains = ad.vm' 5. Restart sssd without clearing the cache 6. Request for *(a)child.ad.vm will go to data provider and try to lookup the user in child.ad.vm domain which will yield 'domain not found'. However if the user is cached it will return the user. $ id administrator(a)child.ad.vm uid=1678800500(administrator(a)child.ad.vm) ... Subdomains that are not root domains are removed from cache. Root domains are disabled in sysdb with new `enabled` attribute. Resolves: https://pagure.io/SSSD/sssd/issue/4009 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/820/head:pr820 git checkout pr820

2 21

sss_nfs_[ug]id_to_name not properly respecting the libnfsidmap interface
by Richard Sharpe 22 Aug '19

22 Aug '19

Hi folks, In the current code downloaded from github I see the following function: src/sss_client/nfs/sss_nfs_client.c:sss_nfs_uid_to_name: static int sss_nfs_uid_to_name(uid_t uid, char *domain, char *name, size_t len) { int rc; if (name == NULL) { IDMAP_LOG(0, ("%s: name is null", __func__)); return -EINVAL; } rc = get_user_from_mc(name, len, uid); if (rc != 0) { rc = id_to_name(name, len, uid, SSS_NSS_GETPWUID); } log_actual_rc(__func__, rc); rc = normalise_rc(rc); return -rc; } The code does nothing with the domain parameter, however, the interface requirement is that if an unqualified name is to be returned, perhaps from /etc/passwd, if domain is non null, it should be appended to the name to be returned preceded by an '@'. Eg, administrators@localhost. The same goes for sss_nfs_gid_to_name. See, for example, nfs-utils:support/nfsidmap/nss.c:nss_uid_to_name which calls write_name to handle appending the local domain name passed in if one is not present. Have I missed something here? -- Regards, Richard Sharpe (何以解憂？唯有杜康。--曹操)(传说杜康是酒的发明者)

3 2

[sssd PR#873][comment] pytest: Use idm:DL1 module to install 389-ds
by pbrezina 22 Aug '19

22 Aug '19

URL: https://github.com/SSSD/sssd/pull/873 Title: #873: pytest: Use idm:DL1 module to install 389-ds pbrezina commented: """ ok to test """ See the full comment at https://github.com/SSSD/sssd/pull/873#issuecomment-523903176

1 0

[sssd PR#866][comment] autofs: do not enumerate when only single entry is requested
by pbrezina 22 Aug '19

22 Aug '19

URL: https://github.com/SSSD/sssd/pull/866 Title: #866: autofs: do not enumerate when only single entry is requested pbrezina commented: """ There would be some conflict in cache_req conversion and then in data provider where we now use sbus2. But in general, I think it is possible. Given the amount of change required, I think we can leave it as 2.* feature only. """ See the full comment at https://github.com/SSSD/sssd/pull/866#issuecomment-523837002

1 0

[sssd PR#873][comment] pytest: Use idm:DL1 module to install 389-ds
by mrniranjan 22 Aug '19

22 Aug '19

URL: https://github.com/SSSD/sssd/pull/873 Title: #873: pytest: Use idm:DL1 module to install 389-ds mrniranjan commented: """ @jhrozek @mzidek-rh please review. This change was already done in downstream and passed in osci pipeline. """ See the full comment at https://github.com/SSSD/sssd/pull/873#issuecomment-523821258

1 0

[sssd PR#873][comment] pytest: Use idm:DL1 module to install 389-ds
by centos-ci 22 Aug '19

22 Aug '19

URL: https://github.com/SSSD/sssd/pull/873 Title: #873: pytest: Use idm:DL1 module to install 389-ds centos-ci commented: """ Can one of the admins verify this patch? """ See the full comment at https://github.com/SSSD/sssd/pull/873#issuecomment-523821045

1 0

[sssd PR#866][comment] autofs: do not enumerate when only single entry is requested
by jhrozek 22 Aug '19

22 Aug '19

URL: https://github.com/SSSD/sssd/pull/866 Title: #866: autofs: do not enumerate when only single entry is requested jhrozek commented: """ @pbrezina do you think this patchset is backportable to sssd-1-16 at all? """ See the full comment at https://github.com/SSSD/sssd/pull/866#issuecomment-523820577

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel August 2019