sssd-devel June 2021

sssd-devel@lists.fedorahosted.org

4 participants
44 discussions

[sssd PR#5671][opened] Tests: Add test_innetgr_threads
by jakub-vavra-cz 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5671 Author: jakub-vavra-cz Title: #5671: Tests: Add test_innetgr_threads Action: opened PR body: """ Verifies Issue: #5540 Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1703436 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5671/head:pr5671 git checkout pr5671

3 19

[sssd PR#5675][opened] KCM: Unset _SSS_LOOPS
by justin-stephenson 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5675 Author: justin-stephenson Title: #5675: KCM: Unset _SSS_LOOPS Action: opened PR body: """ When a short renew interval is set, KCM renewal code requires multiple calls to getpwuid() .This fails when _SSS_LOOPS is set inside the KCM Responder. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5675/head:pr5675 git checkout pr5675

4 22

[sssd PR#5679][opened] Fix minor typos in docs
by yurchor 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5679 Author: yurchor Title: #5679: Fix minor typos in docs Action: opened PR body: """ Thanks in advance for reviewing. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5679/head:pr5679 git checkout pr5679

3 7

[sssd PR#5683][opened] Fix log levels
by alexey-tikhonov 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5683 Author: alexey-tikhonov Title: #5683: Fix log levels Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5683/head:pr5683 git checkout pr5683

3 30

sssd-ldap build failing on ubuntu 20.04
by burnmydread 09 Jun '21

09 Jun '21

Hello, I am working on building sssd-ldap on ubuntu and I am hitting a failure that I don't see documented anywhere. Here is my setup: Distro: ubuntu-20.04 sssd: sssd-2.2.3 automake: autoconf (GNU Autoconf) 2.69 (I got the dependencies via apt build-dep sssd-ldap.) This is the configure command I am using: ./configure --with-samba=no --without-python2-bindings --with-selinux=no Which fails with: checking for CHECK... yes checking check.h usability... no checking check.h presence... yes configure: WARNING: check.h: present but cannot be compiled configure: WARNING: check.h: check for missing prerequisite headers? configure: WARNING: check.h: see the Autoconf documentation configure: WARNING: check.h: section "Present But Cannot Be Compiled" configure: WARNING: check.h: proceeding with the compiler's result configure: WARNING: ## ------------------------------------------------ ## configure: WARNING: ## Report this to sssd-devel(a)lists.fedorahosted.org ## configure: WARNING: ## ------------------------------------------------ ## checking for check.h... no configure: error: Could not find CHECK headers I could not find and issue in github nor could I find an ubuntu package with that header. Any hints as to what is going on would be most helpful. Thanks, Zachary Joyner

2 1

Announcing SSSD 2.5.1
by Pavel Březina 08 Jun '21

08 Jun '21

# SSSD 2.5.01 The SSSD team is proud to announce the release of version 2.5.1 of the System Security Services Daemon. The tarball can be downloaded from: https://github.com/SSSD/sssd/releases/tag/2.5.1 See the full release notes at: https://sssd.io/release-notes/sssd-2.5.1.html RPM packages will be made available for Fedora shortly. ## Feedback Please provide comments, bugs and other feedback via the sssd-devel or sssd-users mailing lists: https://lists.fedorahosted.org/mailman/listinfo/sssd-devel https://lists.fedorahosted.org/mailman/listinfo/sssd-users ## Highlights ### New features * `auto_private_groups` option can be set centrally through ID range setting in IPA (see `ipa idrange` commands family). This feature requires SSSD update on both client and server. This feature also requires `freeipa 4.9.4` and newer. ### Important fixes * Fix `getsidbyname` issues with IPA users with a user-private-group ### Configuration changes * Default value of `ldap_sudo_random_offset` changed to `0` (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration.

1 0

[sssd PR#5620][opened] Link frontend to backend requests
by justin-stephenson 08 Jun '21

08 Jun '21

URL: https://github.com/SSSD/sssd/pull/5620 Author: justin-stephenson Title: #5620: Link frontend to backend requests Action: opened PR body: """ Add client ID tracking through responders into the Data provider, logging the client ID where applicable to enable mapping of requests from beginning to end. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5620/head:pr5620 git checkout pr5620

4 20

[sssd PR#5647][opened] krb5_child: Honor Kerberos keytab location
by elkoniu 08 Jun '21

08 Jun '21

URL: https://github.com/SSSD/sssd/pull/5647 Author: elkoniu Title: #5647: krb5_child: Honor Kerberos keytab location Action: opened PR body: """ Kerberos keytab location can be specified per domain in sssd.conf. If it is not specified - default path is used: /etc/krb5.keytab The problem is that default path itself can be redefined for kerberos by adding entry in krb5.conf: [libdefaults] default_keytab_name = /<PATH>/krb5.keytab krb5_child will still use /etc/krb5.keytab as default value which will cause an error. This patch adds config checking to krb5_child. If keytab parameter will be set to /etc/krb5.keytab, krb5_child will validate it against krb5.conf and eventually overwritte with value presented there. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5647/head:pr5647 git checkout pr5647

4 30

[sssd PR#5661][opened] pam: change default for pam_response_filter
by sumit-bose 07 Jun '21

07 Jun '21

URL: https://github.com/SSSD/sssd/pull/5661 Author: sumit-bose Title: #5661: pam: change default for pam_response_filter Action: opened PR body: """ So far pam_response_filter didn't had any default. It turned out that it would be useful to filter the environment variable KRB5CCANME by default for sudo. The reason is the e.g. in contrast to su the calling user is authenticated and hence only the Kerberos credentials of the calling user are available. But this causes a couple of inconsistencies. E.g. depending on the credential cache type the target user might not have access to the credential cache and even if the credential cache can be accessed it will contain credentials which different privileges than the target user. As a result it seems better to not make KRB5CCANME in the environment of the target user and let him pick the matching default credential cache. Resolves: https://github.com/SSSD/sssd/issues/5660 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5661/head:pr5661 git checkout pr5661

4 16

[sssd PR#5659][opened] README: Update documentation links
by elkoniu 04 Jun '21

04 Jun '21

URL: https://github.com/SSSD/sssd/pull/5659 Author: elkoniu Title: #5659: README: Update documentation links Action: opened PR body: """ Documentation links in README are broken due to sssd.io website content recent update. This PR fix this and remaps links to point correct content in new upstream documentation. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5659/head:pr5659 git checkout pr5659

2 7

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel June 2021