sssd-devel March 2021

sssd-devel@lists.fedorahosted.org

6 participants
48 discussions

[sssd PR#5498][opened] Covscan fixes
by abbra 08 Mar '21

08 Mar '21

URL: https://github.com/SSSD/sssd/pull/5498 Author: abbra Title: #5498: Covscan fixes Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5498/head:pr5498 git checkout pr5498

2 7

[sssd PR#5513][opened] TESTS: test socket path when systemd activation
by ikerexxe 05 Mar '21

05 Mar '21

URL: https://github.com/SSSD/sssd/pull/5513 Author: ikerexxe Title: #5513: TESTS: test socket path when systemd activation Action: opened PR body: """ Test socket path when sssd-kcm is activated by systemd. If socket in systemd unit and sssd.conf is defined in different locations then print a warning. Verifies: https://github.com/SSSD/sssd/issues/5406 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5513/head:pr5513 git checkout pr5513

3 23

[sssd PR#5522][opened] spec: do not use systemd to restart services with RefuseManualStart=true
by pbrezina 05 Mar '21

05 Mar '21

URL: https://github.com/SSSD/sssd/pull/5522 Author: pbrezina Title: #5522: spec: do not use systemd to restart services with RefuseManualStart=true Action: opened PR body: """ These service unit files have RefuseManualStart=true, therefore they can be controlled only as a dependency via the main sssd.service or socket activation. Resolves: https://github.com/SSSD/sssd/issues/5521 :fixes: SSSD spec file `%postun` no longer tries to restart services that can not be restarted directly to stop produce systemd warnings """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5522/head:pr5522 git checkout pr5522

2 11

[sssd PR#5525][opened] Log performance improvements.
by alexey-tikhonov 05 Mar '21

05 Mar '21

URL: https://github.com/SSSD/sssd/pull/5525 Author: alexey-tikhonov Title: #5525: Log performance improvements. Action: opened PR body: """ A set of patches intended to improve log performance. As a result, time spent in a trivial test: ``` for (c = 0; c < 10000000; ++c) { DEBUG(SSSDBG_OP_FAILURE, "Message %d\n", c); } ``` with "--debug-timestamps=1 --debug-microseconds=0" is reduced on my machine from ~34 to ~14 seconds (i.e. ~55% faster). """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5525/head:pr5525 git checkout pr5525

3 16

[sssd PR#5526][opened] Covscan fixes
by alexey-tikhonov 05 Mar '21

05 Mar '21

URL: https://github.com/SSSD/sssd/pull/5526 Author: alexey-tikhonov Title: #5526: Covscan fixes Action: opened PR body: """ This is overtake of PR #5498 (based on https://github.com/SSSD/sssd/pull/5498#issuecomment-789576996 comment) Two patches were taken "as is". Patch "symlink() expects non-NULL second argument" was slightly amended (different error code used). One patch was skipped as I either don't understand it or it's not entirely correct. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5526/head:pr5526 git checkout pr5526

2 11

How are security issues related to sssd reported
by Gordon Messmer 02 Mar '21

02 Mar '21

What is the best way to contact sssd developers to discuss security issues privately, in the event that a flaw is discovered?

2 1

sssd nss: issues with applications not using endpwent()
by Heiko Schlittermann 01 Mar '21

01 Mar '21

Hello, I'm using Dovecot with its "passwd" userdb, which effectivly uses NSS. NSS services are provided by the files and by the sss "plugins". The `doveadm user *` command enumerates the list of users. Repeating the command doesn't enumerate the users provided by sssd again. Analyzing this issue reveals: Dovecot uses a long living process talking to NSS. For user enumeration it uses setpwent() while (…) { getpwent(); } and then misses the call to endpwent(). This bug is already confirmed by the Dovecot developers. I'm not sure about the semantics of setpwent()/endpwend(), especially about calling sequences like setpwent() while (…) { getpwent(); } setpwent() while (…) { getpwent(); } According to setpwent(3) it should rewind to the beginning. Calling endpwent() seems to be for curtesy only (to have resources freed) I suggest calling a preventive endpwent() before using setpwent() again in nss_cmd.c. Attached you'll find my patch. I'd be happy about integration into upstream. Best regards from Dresden/Germany Viele Grüße aus Dresden Heiko Schlittermann -- SCHLITTERMANN.de ---------------------------- internet & unix support - Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - gnupg encrypted messages are welcome --------------- key ID: F69376CE -

2 3

[sssd PR#5519][opened] First smart refresh query contains modifyTimestamp even if the modify…
by aborah-sudo 01 Mar '21

01 Mar '21

URL: https://github.com/SSSD/sssd/pull/5519 Author: aborah-sudo Title: #5519: First smart refresh query contains modifyTimestamp even if the modify… Action: opened PR body: """ …Timestamp is 0 Starting from sssd-1.16.5-10.el7_9, the first query performed with smart refresh contais modifyTimestamp attribute even if the modifyTimestamp is 0. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5519/head:pr5519 git checkout pr5519

3 13

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel March 2021