On Thu, Sep 21, 2017 at 11:23:42PM +0200, Fabiano FidĂȘncio wrote:
People,
We have 27 PRs opened by the moment I'm writing this email and I'd
like to have a clear idea which ones are the *must* have for our next
release.
...
- Add support for ActiveDirectory's logonHorous restrictions
(
https://github.com/SSSD/sssd/pull/269)
This PR comes from an external contributor and as far as I
understood there's still some work to be done. So, should be postponed
to the next release
I think it can be postponed. Nevertheless, unfortunately we are giving
mixed messages to the contributor about where to code should be placed.
Jakub and Simo preferred to move it to the AD provider because the
attribute is basically used only by AD. I on the other hand suggested to
keep it in the general LDAP code together with other AD related legacy
options.
So to get further here I think we should agree on what we want first.
...
- IPA: Add threshold for sudo command and command group searches
(
https://github.com/SSSD/sssd/pull/374)
Does it have some bugzilla linked? I guess it would be nice to be
reviewed and pushed for this release.
I added two general comments and talked with Pavel about who will do the
review.
bye,
Sumit
>
> So, can we have an agreement that we're going to focus on reviewing:
> - Fix group renaming issue when "id_provider = ldap" is set
> (
https://github.com/SSSD/sssd/pull/128)
> - provider: Move hostid from ipa to sdap (
https://github.com/SSSD/sssd/pull/237)
> - Add support for ActiveDirectory's logonHorous restrictions
> (
https://github.com/SSSD/sssd/pull/269)
> - Merge sss_cache and sss_debuglevel into sssctl
> (
https://github.com/SSSD/sssd/pull/274)
> - Implement access verification by rhost using ldap_access_order rhost
> option (
https://github.com/SSSD/sssd/pull/275)
> - IPA: Add threshold for sudo command and command group searches
> (
https://github.com/SSSD/sssd/pull/374)
> - sssd_client: add mutex protected call to the PAC responder
> (
https://github.com/SSSD/sssd/pull/389)
> - GPO: Don't use freed LDAPURLDesc if domain for AD DC cannot be found
>
> And also, do we agree that the bugs mentioned above are the material
> for this release and pretty much anything else that is already opened?
>
> Best Regards,
> --
> Fabiano FidĂȘncio
> _______________________________________________
> sssd-devel mailing list -- sssd-devel(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-devel-leave(a)lists.fedorahosted.org