sssd-devel August 2020

sssd-devel@lists.fedorahosted.org

3 participants
90 discussions

Start a nNew thread

[sssd PR#5246][+Accepted] Drop support of libnss as a crypto backend
by pbrezina 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5246 Title: #5246: Drop support of libnss as a crypto backend Label: +Accepted

1 0

[sssd PR#5246][+Ready to push] Drop support of libnss as a crypto backend
by pbrezina 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5246 Title: #5246: Drop support of libnss as a crypto backend Label: +Ready to push

1 0

[sssd PR#5246][-Waiting for review] Drop support of libnss as a crypto backend
by pbrezina 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5246 Title: #5246: Drop support of libnss as a crypto backend Label: -Waiting for review

1 0

[sssd PR#5246][comment] Drop support of libnss as a crypto backend
by pbrezina 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5246 Title: #5246: Drop support of libnss as a crypto backend pbrezina commented: """ Ack. """ See the full comment at https://github.com/SSSD/sssd/pull/5246#issuecomment-679059938

1 0

[sssd PR#5241][comment] GPO: respect ad_gpo_implicit_deny when evaluation rules
by sumit-bose 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules sumit-bose commented: """ > Ah, ok. And shouldn't it work also the other way - if ad_gpo_implicit_deny = False and there is not explicit deny rule then allow access? yes, but this should already work. Here is an overview: ``` ad_gpo_implicit_deny = False (default) - no allow-rules no deny-rules present: all users are allowed - no allow-rules deny-rules present: all users not in deny-rules are allowed - allow-rules no deny-rules present: only users in allow-rules are allowed - allow-rules deny-rules present: only users in allow-rules and not in deny-rules are allowed ad_gpo_implicit_deny = True - no allow-rules no deny-rules present: no users are allowed - no allow-rules deny-rules present: no users are allowed - allow-rules no deny-rules present: only users in allow-rules are allowed - allow-rules deny-rules present: only users in allow-rules and not in deny-rules are allowed ``` This PR should make sure the `no allow-rules` cases of `ad_gpo_implicit_deny = True` work as expected. HTH bye, Sumit """ See the full comment at https://github.com/SSSD/sssd/pull/5241#issuecomment-679046124

1 0

[sssd PR#5241][comment] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules pbrezina commented: """ Ah, ok. And shouldn't it work also the other way - if ad_gpo_implicit_deny = False and there is not explicit deny rule then allow access? """ See the full comment at https://github.com/SSSD/sssd/pull/5241#issuecomment-679012653

1 0

[sssd PR#5248][opened] Enable exclude functionality in sssd session recording configuration
by justin-stephenson 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5248 Author: justin-stephenson Title: #5248: Enable exclude functionality in sssd session recording configuration Action: opened PR body: """ This is a fix for https://github.com/SSSD/sssd/issues/5089 This PR adds support for two new options in the sssd session recording configuration, to be applied only when `scope=all` is set: * **exclude_users** * **exclude_groups** I separated out each commit logically, to hopefully make the review easier but I am happy to squash any commits together as needed. I updated the relevant codepaths based on my review of https://github.com/SSSD/sssd/pull/136 so please let me know if I missed anything. With this PR, responders will read the sessionRecording attribute when `scope=all` or `scope-some` to determine if recording should be enabled. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5248/head:pr5248 git checkout pr5248

2 12

[sssd PR#5287][opened] Got rid of ".tx" and "zanata.xml" due to migration to Weblate (1.16)
by alexey-tikhonov 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5287 Author: alexey-tikhonov Title: #5287: Got rid of ".tx" and "zanata.xml" due to migration to Weblate (1.16) Action: opened PR body: """ Backport of #5267 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5287/head:pr5287 git checkout pr5287

2 9

[sssd PR#5288][opened] KCM: Increase client idle timeout to 5 minutes
by justin-stephenson 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5288 Author: justin-stephenson Title: #5288: KCM: Increase client idle timeout to 5 minutes Action: opened PR body: """ Increase the default timeout to allow time for user interaction on the command-line with kinit. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5288/head:pr5288 git checkout pr5288

2 17

[sssd PR#5246][+Bugzilla] Drop support of libnss as a crypto backend
by alexey-tikhonov 24 Aug '20

24 Aug '20

URL: https://github.com/SSSD/sssd/pull/5246 Title: #5246: Drop support of libnss as a crypto backend Label: +Bugzilla

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel August 2020