sssd-devel September 2021

sssd-devel@lists.fedorahosted.org

1 participants
89 discussions

[sssd PR#5674][opened] [WIP] This is just a test
by ikerexxe 16 Jan '22

16 Jan '22

URL: https://github.com/SSSD/sssd/pull/5674 Author: ikerexxe Title: #5674: [WIP] This is just a test Action: opened PR body: """ This is just a test for Deepak's latest PR, which fails in CI. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5674/head:pr5674 git checkout pr5674

2 4

[sssd PR#5786][opened] Tests: [SSSD-3579]: Skip test test_0018_bz1734040.
by jakub-vavra-cz 04 Jan '22

04 Jan '22

URL: https://github.com/SSSD/sssd/pull/5786 Author: jakub-vavra-cz Title: #5786: Tests: [SSSD-3579]: Skip test test_0018_bz1734040. Action: opened PR body: """ The test does not work even with fixes for RHEL-9, skipping for now so it is not blocking RHEL-9 gating, until proper fix is found. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5786/head:pr5786 git checkout pr5786

2 13

[sssd PR#5762][opened] krb5: add support for oauth2 challenge (wip)
by pbrezina 02 Dec '21

02 Dec '21

URL: https://github.com/SSSD/sssd/pull/5762 Author: pbrezina Title: #5762: krb5: add support for oauth2 challenge (wip) Action: opened PR body: """ This depends on changes in multiple components that are not yet merged, therefore testing is little bit difficult. There will be some final touch in `otp_parse_oauth2_challenge` when we decide on the challenge format but the patches are ready to be reviewed. ## How to test 1. Install IPA server 2. On IPA server: install patched ipa, patched krb5, pyrad and mock-radius: ```console $ dnf copr enable pbrezina/otp $ dnf copr enable abbra/oauth2-support $ dnf upgrade krb5-devel freeipa-server $ kinit admin $ echo Secret123 | ipa radiusproxy-add localhost --server=127.0.0.1 --secret $ ipa user-add tuser --user-auth-type=radius --radius=localhost --first Test --last User $ git clone ttps://github.com/pbrezina/mock-radius.git $ cd mock-radius $ sudo pip3 install pyrad $ sudo ./server.py ``` 3. On client: ``` $ su tuser Authenticate with PIN 381924 at https://visit.me/oauth2 and press ENTER. $ klist Ticket cache: KEYRING:persistent:830600005:krb_ccache_1mToqfe Default principal: tuser(a)IPA.VM Valid starting Expires Service principal 08/26/2021 14:15:11 08/27/2021 14:15:10 krbtgt/IPA.VM(a)IPA.VM renew until 09/02/2021 14:15:10 ``` """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5762/head:pr5762 git checkout pr5762

3 45

[sssd PR#175][opened] Add module for starting services
by lslebodn 22 Nov '21

22 Nov '21

URL: https://github.com/SSSD/sssd/pull/175 Author: lslebodn Title: #175: Add module for starting services Action: opened PR body: """ This is a WIP version of reducing code duplication in our cwrap integration tests. I am still not sure whether we should also reuse function `create_sssd_fixture`. And if yes; then probably in different nodule then `services` And comments are welcome. BTW I wrote patches few weeks ago; therefore new tests are not converted. I am just sending patches to get some feedback. Site effect of this patches is that tests are cca 20% faster (IIRC) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/175/head:pr175 git checkout pr175

5 5

[sssd PR#5784][opened] proxy: allow removing group members
by ikerexxe 01 Nov '21

01 Nov '21

URL: https://github.com/SSSD/sssd/pull/5784 Author: ikerexxe Title: #5784: proxy: allow removing group members Action: opened PR body: """ The proxy provider doesn't allow to remove group members once they have been added. This patch allows to do it by looping the member list from the cache and comparing it with the actual membership list. If a member is missing then it's removed from the cache. Resolves: https://github.com/SSSD/sssd/issues/5783 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5784/head:pr5784 git checkout pr5784

4 34

[sssd PR#5782][opened] CONFDB: Change ownership of config.ldb
by thalman 21 Oct '21

21 Oct '21

URL: https://github.com/SSSD/sssd/pull/5782 Author: thalman Title: #5782: CONFDB: Change ownership of config.ldb Action: opened PR body: """ Config database is owned by root. This prevents our socket activated services to start because they are started under the sssd user. Changing the ownership to sssd fixes the issue. Resolves: https://github.com/SSSD/sssd/issues/5781 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5782/head:pr5782 git checkout pr5782

4 24

[sssd PR#5712][opened] Health and Support Analyzer - Add request log parsing utility
by justin-stephenson 14 Oct '21

14 Oct '21

URL: https://github.com/SSSD/sssd/pull/5712 Author: justin-stephenson Title: #5712: Health and Support Analyzer - Add request log parsing utility Action: opened PR body: """ * Print client command request list, NSS (default), or PAM ~~~ $ sssctl analyze request --list $ sssctl analyze request --list --pam ~~~ * Track individual NSS request ~~~ $ sssctl analyze request --cid=20 ~~~ * Track individual NSS request including cache request logs ~~~ $ sssctl analyze request --cid=20 --cachereq ~~~ * Track individual PAM request ~~~ $ sssctl analyze request --cid=20 --pam ~~~ * Supports --logger=journald, pending tevent chain ID support for logger=journald ~~~ $ sssctl analyze --source=journald request --list ~~~ * Analyze logs extracted, or sent from another user (CEE use case). Logs must be from compatible SSSD version with REQ_TRACE log messages and tevent chain ID support ~~~ $ sssctl analyze --logdir=/path/to/sosreport/var/log/sssd request --list ~~~ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5712/head:pr5712 git checkout pr5712

5 86

[sssd PR#5434][opened] Adding multihost tests for ad_allow_remote_domain_local_groups, bz1883488 bz1756240
by sidecontrol 13 Oct '21

13 Oct '21

URL: https://github.com/SSSD/sssd/pull/5434 Author: sidecontrol Title: #5434: Adding multihost tests for ad_allow_remote_domain_local_groups, bz1883488 bz1756240 Action: opened PR body: """ This is the first multihost test that requires more than one AD server, it requires a root, child and tree domain and users created from the playbooks in CI. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5434/head:pr5434 git checkout pr5434

4 15

[sssd PR#5755][opened] Tests: support subid ranges managed by FreeIPA
by aborah-sudo 13 Oct '21

13 Oct '21

URL: https://github.com/SSSD/sssd/pull/5755 Author: aborah-sudo Title: #5755: Tests: support subid ranges managed by FreeIPA Action: opened PR body: """ issue: https://github.com/SSSD/sssd/issues/5197 bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1803943 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5755/head:pr5755 git checkout pr5755

4 87

[sssd PR#5780][opened] Translations update from Weblate
by weblate 11 Oct '21

11 Oct '21

URL: https://github.com/SSSD/sssd/pull/5780 Author: weblate Title: #5780: Translations update from Weblate Action: opened PR body: """ Translations update from [Weblate](https://translate.fedoraproject.org/projects/sssd/sssd-master/) for SSSD/sssd. Current translation status: ![Weblate translation status](https://translate.fedoraproject.org/widgets/sssd/-/sssd-master/hori… """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5780/head:pr5780 git checkout pr5780

2 12

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel September 2021