June 2021 - sssd-devel - Fedora mailing-lists

[sssd PR#5226][comment] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 14 May '25

14 May '25

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions alexey-tikhonov commented: """ Thank you for the updated version. Please see a couple of comments inline. """ See the full comment at https://github.com/SSSD/sssd/pull/5226#issuecomment-693396748

2 1

[sssd PR#5674][opened] [WIP] This is just a test
by ikerexxe 16 Jan '22

16 Jan '22

URL: https://github.com/SSSD/sssd/pull/5674 Author: ikerexxe Title: #5674: [WIP] This is just a test Action: opened PR body: """ This is just a test for Deepak's latest PR, which fails in CI. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5674/head:pr5674 git checkout pr5674

2 4

[sssd PR#175][opened] Add module for starting services
by lslebodn 22 Nov '21

22 Nov '21

URL: https://github.com/SSSD/sssd/pull/175 Author: lslebodn Title: #175: Add module for starting services Action: opened PR body: """ This is a WIP version of reducing code duplication in our cwrap integration tests. I am still not sure whether we should also reuse function `create_sssd_fixture`. And if yes; then probably in different nodule then `services` And comments are welcome. BTW I wrote patches few weeks ago; therefore new tests are not converted. I am just sending patches to get some feedback. Site effect of this patches is that tests are cca 20% faster (IIRC) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/175/head:pr175 git checkout pr175

5 5

[sssd PR#5434][opened] Adding multihost tests for ad_allow_remote_domain_local_groups, bz1883488 bz1756240
by sidecontrol 13 Oct '21

13 Oct '21

URL: https://github.com/SSSD/sssd/pull/5434 Author: sidecontrol Title: #5434: Adding multihost tests for ad_allow_remote_domain_local_groups, bz1883488 bz1756240 Action: opened PR body: """ This is the first multihost test that requires more than one AD server, it requires a root, child and tree domain and users created from the playbooks in CI. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5434/head:pr5434 git checkout pr5434

4 15

[sssd PR#5473][opened] Tests: alltests: Check default debug level of sssd and corresponding logs
by madhuriupadhye 05 Oct '21

05 Oct '21

URL: https://github.com/SSSD/sssd/pull/5473 Author: madhuriupadhye Title: #5473: Tests: alltests: Check default debug level of sssd and corresponding logs Action: opened PR body: """ Check default debug level of sssd and corresponding logs It consists of four test cases: 1. Check the default debug level by authenticating the user 2. Check default level as 0 and 1 3. Check default level as 2 4. Check SBUS code triggers failure message during modules startup Verifies: Issues: #5422 #5425 Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1893159 https://bugzilla.redhat.com/show_bug.cgi?id=1915319 Signed-off-by: Madhuri Upadhye <mupadhye(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5473/head:pr5473 git checkout pr5473

4 17

[sssd PR#5684][opened] src/conf_macros.m4: set default value /run for pidpath
by kkang-wr 05 Oct '21

05 Oct '21

URL: https://github.com/SSSD/sssd/pull/5684 Author: kkang-wr Title: #5684: src/conf_macros.m4: set default value /run for pidpath Action: opened PR body: """ /var/run is deprecated, so replace /var/run with /run as the default value of variable pidpath. Signed-off-by: Kai Kang <kai.kang(a)windriver.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5684/head:pr5684 git checkout pr5684

4 8

[sssd PR#5636][opened] Improve assertion when verifying paths for Python modules
by sergiodj 05 Oct '21

05 Oct '21

URL: https://github.com/SSSD/sssd/pull/5636 Author: sergiodj Title: #5636: Improve assertion when verifying paths for Python modules Action: opened PR body: """ In Ubuntu we're facing a problem where the 3 Python tests under src/tests/*-test.py are failing due to cosmetical differences between what the '.__file__' method returns and what 'MODPATH' ends up being. I have not been able to pinpoint exactly what is causing this issue; it only happens when SSSD is built inside a chroot environment (with sbuild, for example). The logs look like this: ```python F ====================================================================== FAIL: testImport (__main__.PyHbacImport) Import the module and assert it comes from tree ---------------------------------------------------------------------- Traceback (most recent call last): File "/<<PKGBUILDDIR>>/src/tests/pyhbac-test.py", line 91, in testImport self.assertEqual(pyhbac.__file__, MODPATH + "/pyhbac.so") AssertionError: '/<<PKGBUILDDIR>>/build/./tp_pyhbac_xw2omut2/pyhbac.so' != './tp_pyhbac_xw2omut2/pyhbac.so' - /<<PKGBUILDDIR>>/build/./tp_pyhbac_xw2omut2/pyhbac.so + ./tp_pyhbac_xw2omut2/pyhbac.so ``` Given that the intention of the test is to verify that the two paths are equal, I suggest that we do this slight improvement and call 'os.path.realpath' before comparing both paths. This way we guarantee that they're both properly canonicalized. I have verified that the tests still pass with this change. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5636/head:pr5636 git checkout pr5636

4 17

[sssd PR#5651][opened] TEST: Use absolute path for the MODPATH assertions in python tests
by mtorromeo 05 Oct '21

05 Oct '21

URL: https://github.com/SSSD/sssd/pull/5651 Author: mtorromeo Title: #5651: TEST: Use absolute path for the MODPATH assertions in python tests Action: opened PR body: """ Since 2.5.0 I had these 3 tests fail with the following assertion error: ``` ====================================================================== FAIL: testImport (__main__.PyHbacImport) Import the module and assert it comes from tree ---------------------------------------------------------------------- Traceback (most recent call last): File "/build/sssd/src/sssd-2.5.0/src/tests/pyhbac-test.py", line 91, in testImport self.assertEqual(pyhbac.__file__, MODPATH + "/pyhbac.so") AssertionError: '/build/sssd/src/sssd-2.5.0/./tp_pyhbac_za3ox6lp/pyhbac.so' != './tp_pyhbac_za3ox6lp/pyhbac.so' - /build/sssd/src/sssd-2.5.0/./tp_pyhbac_za3ox6lp/pyhbac.so + ./tp_pyhbac_za3ox6lp/pyhbac.so ``` I don't know what changed but the issue here is related to a long-standing bug [1] in `tempfile.mkdtemp` where the returned path is not absolute if the dir parameter is relative, despite the documentation saying that the returned path is always absolute. [1] https://bugs.python.org/issue7325 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5651/head:pr5651 git checkout pr5651

3 17

[sssd PR#5689][opened] Tests: Add tests ported from bash for AD Parameters Domain
by jakub-vavra-cz 20 Sep '21

20 Sep '21

URL: https://github.com/SSSD/sssd/pull/5689 Author: jakub-vavra-cz Title: #5689: Tests: Add tests ported from bash for AD Parameters Domain Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5689/head:pr5689 git checkout pr5689

3 38

[sssd PR#5685][opened] KCM: Add krb5-libs dependency in spec
by justin-stephenson 08 Sep '21

08 Sep '21

URL: https://github.com/SSSD/sssd/pull/5685 Author: justin-stephenson Title: #5685: KCM: Add krb5-libs dependency in spec Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5685/head:pr5685 git checkout pr5685

3 30

[sssd PR#5677][opened] Tests: Add test_nss_get_by_name_with_private_group.
by jakub-vavra-cz 07 Sep '21

07 Sep '21

URL: https://github.com/SSSD/sssd/pull/5677 Author: jakub-vavra-cz Title: #5677: Tests: Add test_nss_get_by_name_with_private_group. Action: opened PR body: """ Verifies Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1837090 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5677/head:pr5677 git checkout pr5677

2 5

[sssd PR#5682][opened] bugfix for newline char in sss_obfuscate
by rajsshah86 25 Aug '21

25 Aug '21

URL: https://github.com/SSSD/sssd/pull/5682 Author: rajsshah86 Title: #5682: bugfix for newline char in sss_obfuscate Action: opened PR body: """ Fixed bug which causes addition of newline character in password during encryption """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5682/head:pr5682 git checkout pr5682

2 5

[sssd PR#844][opened] sssd-ad and gpo_child: GPO apply fixes during reading fails
by mastersin 03 Aug '21

03 Aug '21

URL: https://github.com/SSSD/sssd/pull/844 Author: mastersin Title: #844: sssd-ad and gpo_child: GPO apply fixes during reading fails Action: opened PR body: """ Ignore AD GPO errors: - if SecEdit/GptTmpl.inf is missing or - if reading sysvol_gpt_version fails and cached_gpt_version already exists """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/844/head:pr844 git checkout pr844

7 16

[sssd PR#5693][opened] Basics of 'subid ranges' support for IPA provider
by alexey-tikhonov 29 Jul '21

29 Jul '21

URL: https://github.com/SSSD/sssd/pull/5693 Author: alexey-tikhonov Title: #5693: Basics of 'subid ranges' support for IPA provider Action: opened PR body: """ This is for preliminary review. Limitations: - only IPA provider - single subid interval pair (subuid+subgid) per user - idviews aren't supported - only forward lookup (user -> subid) Known TODOs: - delete cached subid ranges in case "not found" on a server - distinguish "user not found" vs "user doesn't have ranges defined" To test: - build shadow-utils from latest upstream (or get Fedora Rawhide build from https://copr.fedorainfracloud.org/coprs/ipedrosa/subid_ranges/) - build FreeIPA with https://github.com/freeipa/freeipa/pull/5713 (or ping me for details of internal test setup) - build SSSD with this PR (enabling `--with-subid`) - edit /etc/nsswitch.conf: `subid: sss` - use for example this [utility](https://github.com/shadow-maint/shadow/blob/master/src/list_subid_… from shadow-utils upstream to fetch subid ranges from IPA server (or `new?idmap`) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5693/head:pr5693 git checkout pr5693

2 27

[sssd PR#5591][opened] Tests: Regression part of bash to pytest of shadow utils
by aborah-sudo 28 Jul '21

28 Jul '21

URL: https://github.com/SSSD/sssd/pull/5591 Author: aborah-sudo Title: #5591: Tests: Regression part of bash to pytest of shadow utils Action: opened PR body: """ This script will contain many regression of shadow utils Bzs. This is part 1 of that. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5591/head:pr5591 git checkout pr5591

3 11

[sssd PR#5630][opened] Tests: Add support to verify authentication indicators in pam_sss_gss
by aborah-sudo 26 Jul '21

26 Jul '21

URL: https://github.com/SSSD/sssd/pull/5630 Author: aborah-sudo Title: #5630: Tests: Add support to verify authentication indicators in pam_sss_gss Action: opened PR body: """ Error code of '[pam_cmd_gssapi_sec_ctx] (0x0400): Check if acquired service ticket has req. indicators:'. '2' is 'not applied' (ENOENT) Verifies: https://github.com/SSSD/sssd/issues/5482 Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1926622 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5630/head:pr5630 git checkout pr5630

3 13

[sssd PR#5654][opened] test: replace deprecated libcheck macros
by sumit-bose 20 Jul '21

20 Jul '21

URL: https://github.com/SSSD/sssd/pull/5654 Author: sumit-bose Title: #5654: test: replace deprecated libcheck macros Action: opened PR body: """ The fail* macros are deprecated by libcheck some time ago. Recently a fix for a different issue in those macros cause a 'too many arguments for format' compiler warning which won't be fixed on the libckeck side since the macros are deprecated. This patch replaces the deprecated macros with the new ones: - fail -> ck_abort_msg - fail_unless -> ck_assert_msg - fail_if -> sss_ck_fail_if_msg The fail_if macro does not have a corresponding new version and I added a local replacement sss_ck_fail_if_msg which is based on ck_assert_msg. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5654/head:pr5654 git checkout pr5654

4 11

[sssd PR#5666][opened] debug: add support for tevent chain id
by pbrezina 13 Jul '21

13 Jul '21

URL: https://github.com/SSSD/sssd/pull/5666 Author: pbrezina Title: #5666: debug: add support for tevent chain id Action: opened PR body: """ This PR adds a unique identifier to the log messages of each data provider requests so we are able to track the request form its beginning to the end. Note: this requires functionality from https://gitlab.com/samba-team/samba/-/merge_requests/1988 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5666/head:pr5666 git checkout pr5666

4 39

[sssd PR#5680][opened] Translations update from Weblate
by weblate 12 Jul '21

12 Jul '21

URL: https://github.com/SSSD/sssd/pull/5680 Author: weblate Title: #5680: Translations update from Weblate Action: opened PR body: """ Translations update from [Weblate](https://translate.fedoraproject.org/projects/sssd/sssd-master/) for SSSD/sssd. Current translation status: ![Weblate translation status](https://translate.fedoraproject.org/widgets/sssd/-/sssd-master/hori… """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5680/head:pr5680 git checkout pr5680

2 6

[sssd PR#5695][opened] CACHE_REQ: fixed covscan issues
by alexey-tikhonov 12 Jul '21

12 Jul '21

URL: https://github.com/SSSD/sssd/pull/5695 Author: alexey-tikhonov Title: #5695: CACHE_REQ: fixed covscan issues Action: opened PR body: """ Fixed following warning: ``` Error: GCC_ANALYZER_WARNING (CWE-476): sssd-2.5.1/src/responder/common/cache_req/cache_req_data.c: scope_hint: In function 'cache_req_data_create' sssd-2.5.1/src/responder/common/cache_req/cache_req_data.c:160:28: warning[-Wanalyzer-null-dereference]: dereference of NULL '0' # 158| break; # 159| case CACHE_REQ_SVC_BY_NAME: # 160|-> if (input->svc.name->input == NULL) { # 161| DEBUG(SSSDBG_CRIT_FAILURE, "Bug: name cannot be NULL!\n"); # 162| ret = ERR_INTERNAL; ``` """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5695/head:pr5695 git checkout pr5695

3 19

[sssd PR#5552][opened] files: split update into batches
by sumit-bose 09 Jul '21

09 Jul '21

URL: https://github.com/SSSD/sssd/pull/5552 Author: sumit-bose Title: #5552: files: split update into batches Action: opened PR body: """ If the files managed by the files provider contain many users or groups processing them might take a considerable amount of time. To keep the backend responsive this patch splits the update into multiple steps running one after the other but returning to the main loop in between. This avoids issues during startup because the watchdog timer state is reset properly. Additionally SBUS messages are process and as a result the domain can be marked inconsistent in the frontends properly. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5552/head:pr5552 git checkout pr5552

4 128

[sssd PR#5663][opened] cache_req: replace FQNs by shortnames
by ikerexxe 08 Jul '21

08 Jul '21

URL: https://github.com/SSSD/sssd/pull/5663 Author: ikerexxe Title: #5663: cache_req: replace FQNs by shortnames Action: opened PR body: """ Replace FQNs by shortnames in cache_req_XYZ_by_name_send() when the FQN already contains the domain name. This is done to avoid appending again the domain name to the FQN. Includes a unit test to check that the FQN to shortname replacement works correctly. It also includes an integration test to check that UpdateMemberList() and GetAll() return the correct users that are members of a group. This is done by first adding a member to a group and checking that it is returned correctly. Then, the member is deleted and the interface returns no members. Resolves: https://github.com/SSSD/sssd/issues/4255 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5663/head:pr5663 git checkout pr5663

3 39

[sssd PR#5600][opened] SSSD Log: log_bad_address_msg_modification
by DeepakDas7 08 Jul '21

08 Jul '21

URL: https://github.com/SSSD/sssd/pull/5600 Author: DeepakDas7 Title: #5600: SSSD Log: log_bad_address_msg_modification Action: opened PR body: """ Improve Log Containing Bad Address string Resolves: https://github.com/SSSD/sssd/issues/5577 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5600/head:pr5600 git checkout pr5600

5 37

[sssd PR#5681][opened] Test: sudo rule with runAS set to short-username value
by shridhargadekar 08 Jul '21

08 Jul '21

URL: https://github.com/SSSD/sssd/pull/5681 Author: shridhargadekar Title: #5681: Test: sudo rule with runAS set to short-username value Action: opened PR body: """ In the AD-server, a sudo rule containing sudoRunAs attribute to a short-username should not generate error in the sssd log. https://bugzilla.redhat.com/show_bug.cgi?id=1910131 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5681/head:pr5681 git checkout pr5681

3 11

[sssd PR#5694][opened] KCM: removed unneeded assignment
by alexey-tikhonov 24 Jun '21

24 Jun '21

URL: https://github.com/SSSD/sssd/pull/5694 Author: alexey-tikhonov Title: #5694: KCM: removed unneeded assignment Action: opened PR body: """ Fixes following warning: ``` Error: CLANG_WARNING: sssd-2.5.1/src/responder/kcm/kcm_renew.c:481:9: warning[deadcode.DeadStores]: Value stored to 'ret' is never read # 479| ctx = talloc_zero(auth_data, struct kcm_renew_auth_ctx); # 480| if (ctx == NULL) { # 481|-> ret = ENOMEM; # 482| DEBUG(SSSDBG_FATAL_FAILURE, "Failed to allocate renew auth ctx\n"); # 483| return; ``` """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5694/head:pr5694 git checkout pr5694

2 10

[sssd PR#5668][opened] SSSD Log: invalid_argument msg modification
by DeepakDas7 21 Jun '21

21 Jun '21

URL: https://github.com/SSSD/sssd/pull/5668 Author: DeepakDas7 Title: #5668: SSSD Log: invalid_argument msg modification Action: opened PR body: """ Improve invalid argument msg with additional information Resolves: https://github.com/SSSD/sssd/issues/5578 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5668/head:pr5668 git checkout pr5668

5 19

[sssd PR#5692][opened] DEBUG: don't reset debug_timestamps/microseconds
by alexey-tikhonov 21 Jun '21

21 Jun '21

URL: https://github.com/SSSD/sssd/pull/5692 Author: alexey-tikhonov Title: #5692: DEBUG: don't reset debug_timestamps/microseconds Action: opened PR body: """ to DEFAULT in `_sss_debug_init()`. Otherwise `server_setup()` skips reading config settings. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5692/head:pr5692 git checkout pr5692

3 15

[sssd PR#5688][opened] kcm: terminate client on bad message
by pbrezina 18 Jun '21

18 Jun '21

URL: https://github.com/SSSD/sssd/pull/5688 Author: pbrezina Title: #5688: kcm: terminate client on bad message Action: opened PR body: """ The debug message clearly says that the original intention was to abort the client, not send an error message. We may end up in a state where we get into an infinit loop, fo example when the client send an message that indicates 0 lenght, but there is actually more data written. In this case, we never read the rest of the message but the file descriptor is still readable so the fd handler gets fired again and again. More information can be seen in relevant FreeIPA ticket: https://pagure.io/freeipa/issue/8877 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5688/head:pr5688 git checkout pr5688

3 11

[sssd PR#5658][opened] README: Dead social media link remove
by elkoniu 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5658 Author: elkoniu Title: #5658: README: Dead social media link remove Action: opened PR body: """ Back in 2011 SSSD started using twitter account to broadcast releases. Last time it happened 13.06.2019 so this account can be considered as dead. This PR removes link to it from main README. Resolves: https://github.com/SSSD/sssd/issues/5649 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5658/head:pr5658 git checkout pr5658

2 8

[sssd PR#5419][opened] Adding tests to cover ad discovery improvements using cldap
by sidecontrol 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5419 Author: sidecontrol Title: #5419: Adding tests to cover ad discovery improvements using cldap Action: opened PR body: """ * This test requires a primary and secondary domain controller so AD can be moved between sites * Currently contains four test cases ** Two DCs in one site no restrictions. ** Two DCs in one site, traffic blocked to the other DC ** DCs in seperate sites no restrictions ** DCs in seperate sites, traffic blocked to the other DC Signed-off-by: Dan Lavu <dlavu(a)redhat.com> SSSD-2497 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5419/head:pr5419 git checkout pr5419

4 10

[sssd PR#5442][opened] Adding multihost test for supporting asymmetric nsupdate auth
by sidecontrol 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5442 Author: sidecontrol Title: #5442: Adding multihost test for supporting asymmetric nsupdate auth Action: opened PR body: """ * https://bugzilla.redhat.com/show_bug.cgi?id=1884301 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5442/head:pr5442 git checkout pr5442

4 10

[sssd PR#5671][opened] Tests: Add test_innetgr_threads
by jakub-vavra-cz 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5671 Author: jakub-vavra-cz Title: #5671: Tests: Add test_innetgr_threads Action: opened PR body: """ Verifies Issue: #5540 Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1703436 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5671/head:pr5671 git checkout pr5671

3 19

[sssd PR#5675][opened] KCM: Unset _SSS_LOOPS
by justin-stephenson 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5675 Author: justin-stephenson Title: #5675: KCM: Unset _SSS_LOOPS Action: opened PR body: """ When a short renew interval is set, KCM renewal code requires multiple calls to getpwuid() .This fails when _SSS_LOOPS is set inside the KCM Responder. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5675/head:pr5675 git checkout pr5675

4 22

[sssd PR#5679][opened] Fix minor typos in docs
by yurchor 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5679 Author: yurchor Title: #5679: Fix minor typos in docs Action: opened PR body: """ Thanks in advance for reviewing. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5679/head:pr5679 git checkout pr5679

3 7

[sssd PR#5683][opened] Fix log levels
by alexey-tikhonov 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5683 Author: alexey-tikhonov Title: #5683: Fix log levels Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5683/head:pr5683 git checkout pr5683

3 30

sssd-ldap build failing on ubuntu 20.04
by burnmydread 09 Jun '21

09 Jun '21

Hello, I am working on building sssd-ldap on ubuntu and I am hitting a failure that I don't see documented anywhere. Here is my setup: Distro: ubuntu-20.04 sssd: sssd-2.2.3 automake: autoconf (GNU Autoconf) 2.69 (I got the dependencies via apt build-dep sssd-ldap.) This is the configure command I am using: ./configure --with-samba=no --without-python2-bindings --with-selinux=no Which fails with: checking for CHECK... yes checking check.h usability... no checking check.h presence... yes configure: WARNING: check.h: present but cannot be compiled configure: WARNING: check.h: check for missing prerequisite headers? configure: WARNING: check.h: see the Autoconf documentation configure: WARNING: check.h: section "Present But Cannot Be Compiled" configure: WARNING: check.h: proceeding with the compiler's result configure: WARNING: ## ------------------------------------------------ ## configure: WARNING: ## Report this to sssd-devel(a)lists.fedorahosted.org ## configure: WARNING: ## ------------------------------------------------ ## checking for check.h... no configure: error: Could not find CHECK headers I could not find and issue in github nor could I find an ubuntu package with that header. Any hints as to what is going on would be most helpful. Thanks, Zachary Joyner

2 1

Announcing SSSD 2.5.1
by Pavel Březina 08 Jun '21

08 Jun '21

# SSSD 2.5.01 The SSSD team is proud to announce the release of version 2.5.1 of the System Security Services Daemon. The tarball can be downloaded from: https://github.com/SSSD/sssd/releases/tag/2.5.1 See the full release notes at: https://sssd.io/release-notes/sssd-2.5.1.html RPM packages will be made available for Fedora shortly. ## Feedback Please provide comments, bugs and other feedback via the sssd-devel or sssd-users mailing lists: https://lists.fedorahosted.org/mailman/listinfo/sssd-devel https://lists.fedorahosted.org/mailman/listinfo/sssd-users ## Highlights ### New features * `auto_private_groups` option can be set centrally through ID range setting in IPA (see `ipa idrange` commands family). This feature requires SSSD update on both client and server. This feature also requires `freeipa 4.9.4` and newer. ### Important fixes * Fix `getsidbyname` issues with IPA users with a user-private-group ### Configuration changes * Default value of `ldap_sudo_random_offset` changed to `0` (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration.

1 0

[sssd PR#5620][opened] Link frontend to backend requests
by justin-stephenson 08 Jun '21

08 Jun '21

URL: https://github.com/SSSD/sssd/pull/5620 Author: justin-stephenson Title: #5620: Link frontend to backend requests Action: opened PR body: """ Add client ID tracking through responders into the Data provider, logging the client ID where applicable to enable mapping of requests from beginning to end. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5620/head:pr5620 git checkout pr5620

4 20

[sssd PR#5647][opened] krb5_child: Honor Kerberos keytab location
by elkoniu 08 Jun '21

08 Jun '21

URL: https://github.com/SSSD/sssd/pull/5647 Author: elkoniu Title: #5647: krb5_child: Honor Kerberos keytab location Action: opened PR body: """ Kerberos keytab location can be specified per domain in sssd.conf. If it is not specified - default path is used: /etc/krb5.keytab The problem is that default path itself can be redefined for kerberos by adding entry in krb5.conf: [libdefaults] default_keytab_name = /<PATH>/krb5.keytab krb5_child will still use /etc/krb5.keytab as default value which will cause an error. This patch adds config checking to krb5_child. If keytab parameter will be set to /etc/krb5.keytab, krb5_child will validate it against krb5.conf and eventually overwritte with value presented there. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5647/head:pr5647 git checkout pr5647

4 30

[sssd PR#5661][opened] pam: change default for pam_response_filter
by sumit-bose 07 Jun '21

07 Jun '21

URL: https://github.com/SSSD/sssd/pull/5661 Author: sumit-bose Title: #5661: pam: change default for pam_response_filter Action: opened PR body: """ So far pam_response_filter didn't had any default. It turned out that it would be useful to filter the environment variable KRB5CCANME by default for sudo. The reason is the e.g. in contrast to su the calling user is authenticated and hence only the Kerberos credentials of the calling user are available. But this causes a couple of inconsistencies. E.g. depending on the credential cache type the target user might not have access to the credential cache and even if the credential cache can be accessed it will contain credentials which different privileges than the target user. As a result it seems better to not make KRB5CCANME in the environment of the target user and let him pick the matching default credential cache. Resolves: https://github.com/SSSD/sssd/issues/5660 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5661/head:pr5661 git checkout pr5661

4 16

[sssd PR#5659][opened] README: Update documentation links
by elkoniu 04 Jun '21

04 Jun '21

URL: https://github.com/SSSD/sssd/pull/5659 Author: elkoniu Title: #5659: README: Update documentation links Action: opened PR body: """ Documentation links in README are broken due to sssd.io website content recent update. This PR fix this and remaps links to point correct content in new upstream documentation. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5659/head:pr5659 git checkout pr5659

2 7

[sssd PR#5670][opened] sudo: disable ldap_sudo_random_offset by default
by pbrezina 04 Jun '21

04 Jun '21

URL: https://github.com/SSSD/sssd/pull/5670 Author: pbrezina Title: #5670: sudo: disable ldap_sudo_random_offset by default Action: opened PR body: """ Resolves: https://github.com/SSSD/sssd/issues/5609 :config: Default value of `ldap_sudo_random_offset` changed to 0 (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5670/head:pr5670 git checkout pr5670

2 8

[sssd PR#5633][opened] Gentoo/openrc: Add sssd-kcm service script
by joakim-tjernlund 04 Jun '21

04 Jun '21

URL: https://github.com/SSSD/sssd/pull/5633 Author: joakim-tjernlund Title: #5633: Gentoo/openrc: Add sssd-kcm service script Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5633/head:pr5633 git checkout pr5633

4 16

[sssd PR#5664][opened] pac: allow larger PACs
by sumit-bose 04 Jun '21

04 Jun '21

URL: https://github.com/SSSD/sssd/pull/5664 Author: sumit-bose Title: #5664: pac: allow larger PACs Action: opened PR body: """ Currently the PAC responder only accepts request which are about 1k in size. Since a PAC can be larger there are cases where the PAC is not accepted by the PAC responder. Recently SSS_GSSAPI_PACKET_MAX_RECV_SIZE was added to be able to handle Kerberos tickets which can be also larger than 1k. Since typically if present the PAC is the largest part of a Kerberos ticket it make sense to use the same limit for the PAC responder. Resolves: https://github.com/SSSD/sssd/issues/5650 Reviewed-by: Alexey Tikhonov <atikhono(a)redhat.com> (cherry picked from commit b75ef442dd23f30d879e2876bbc19d13da1a62b8) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5664/head:pr5664 git checkout pr5664

3 10

[sssd PR#5632][opened] Translations update from Weblate
by weblate 04 Jun '21

04 Jun '21

URL: https://github.com/SSSD/sssd/pull/5632 Author: weblate Title: #5632: Translations update from Weblate Action: opened PR body: """ Translations update from [Weblate](https://translate.fedoraproject.org/projects/sssd/sssd-master/) for SSSD/sssd. Current translation status: ![Weblate translation status](https://translate.fedoraproject.org/widgets/sssd/-/sssd-master/hori… """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5632/head:pr5632 git checkout pr5632

2 3

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel June 2021