URL: https://github.com/SSSD/sssd/pull/5670
Author: pbrezina
Title: #5670: sudo: disable ldap_sudo_random_offset by default
Action: opened
PR body:
"""
Resolves: https://github.com/SSSD/sssd/issues/5609
:config: Default value of `ldap_sudo_random_offset` changed to 0 (disabled). This
makes sure that sudo rules are available as soon as possible after SSSD start
in default configuration.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5670/head:pr5670
git checkout pr5670
URL: https://github.com/SSSD/sssd/pull/5664
Author: sumit-bose
Title: #5664: pac: allow larger PACs
Action: opened
PR body:
"""
Currently the PAC responder only accepts request which are about 1k in
size. Since a PAC can be larger there are cases where the PAC is not
accepted by the PAC responder. Recently SSS_GSSAPI_PACKET_MAX_RECV_SIZE was
added to be able to handle Kerberos tickets which can be also larger than
1k. Since typically if present the PAC is the largest part of a Kerberos
ticket it make sense to use the same limit for the PAC responder.
Resolves: https://github.com/SSSD/sssd/issues/5650
Reviewed-by: Alexey Tikhonov <atikhono(a)redhat.com>
(cherry picked from commit b75ef442dd23f30d879e2876bbc19d13da1a62b8)
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5664/head:pr5664
git checkout pr5664