URL: https://github.com/SSSD/sssd/pull/5787
Author: sumit-bose
Title: #5787: krb5: fix ccache ownership for offline Smartcard authentication
Action: opened
PR body:
"""
During Smartcard authentication/PKINIT the krb5_child process is running
as privileged user for some time to make sure pcscd allows access to the
Smartcard. If SSSD is offline those privileges are currently not dropped
before creating an empty ccache and as a result file based ccaches might
have a wrong ownership. With the patch the privileges are dropped is
SSSD is offline and the ccache is created with the expected ownership.
Resolves: https://github.com/SSSD/sssd/issues/5785
:fixes: ccache files are created with the right ownership during offline
Smartcard authentication
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5787/head:pr5787
git checkout pr5787
URL: https://github.com/SSSD/sssd/pull/5766
Title: #5766: Sources cleanup - part 3.
alexey-tikhonov commented:
"""
Hi @pbrezina,
could you please review additional patches?
(At least code-wise. If you would like to postpone merge until I figure out what's wrong on Debian - that's ok, I will get back to this when back to laptop.)
"""
See the full comment at https://github.com/SSSD/sssd/pull/5766#issuecomment-920787424
URL: https://github.com/SSSD/sssd/pull/5764
Author: aborah-sudo
Title: #5764: Tests: Suppress log message
Action: opened
PR body:
"""
Suppress log message "[sssd] [service_signal_done]
(0x0010): Unable to signal service [2]:
No such file or directory" during logrote
bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1909755
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5764/head:pr5764
git checkout pr5764
URL: https://github.com/SSSD/sssd/pull/5743
Author: pbrezina
Title: #5743: ad: fallback to ldap if cldap is not available in libldap
Action: opened
PR body:
"""
Some distributions do not have cldap support available in libldap. Now
we fallback to ad ping over ldap conditionally during build time.
Resolves: https://github.com/SSSD/sssd/issues/5720
```
:fixes: AD ping is now sent over `ldap` if `cldap` support is not available
during build. This helps to build SSSD on distributions without `cldap`
support in `libldap`.
```
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5743/head:pr5743
git checkout pr5743
URL: https://github.com/SSSD/sssd/pull/5773
Author: sgoveas
Title: #5773: TEST: usermod -d needs absolute path
Action: opened
PR body:
"""
usermod -d failed when it was given an empty string to update. This was
noticed in #5754. Updating test to check for modified home dir
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5773/head:pr5773
git checkout pr5773
URL: https://github.com/SSSD/sssd/pull/5766
Title: #5766: [WiP] Sources cleanup - part 3.
alexey-tikhonov commented:
"""
> `test_pam_responder.py::test_krb5_auth` seems to be broken on Debian target.
I installed Debian11 in local VM, compiled master branch (i.e. without my patches) and tried a couple of runs:
- being run alone `test_krb5_auth` and `test_krb5_auth_domains` - succeed
- being run within complete suite - both fail (and also `test_innetgr_with_threads` fails)
"""
See the full comment at https://github.com/SSSD/sssd/pull/5766#issuecomment-916957933
URL: https://github.com/SSSD/sssd/pull/5766
Title: #5766: [WiP] Sources cleanup - part 3.
alexey-tikhonov commented:
"""
> `test_pam_responder.py::test_krb5_auth` seems to be broken on Debian target.
I installed Debian11 in local VM, compiled **master** branch (i.e. without my patches) and tried a couple of runs:
- being run alone `test_krb5_auth` and `test_krb5_auth_domains` - succeed
- being run within complete suite - both fail (and also `test_innetgr_with_threads` fails)
"""
See the full comment at https://github.com/SSSD/sssd/pull/5766#issuecomment-916957933