[PATCH] Disallow all legacy operations outside domains

[Jakub Hrozek]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

One of my previous patches disallowed adding users and groups outside
known domains but I forgot disallowing modifying, deleting, etc.

Fixes: ticket #114
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkqOZ7QACgkQHsardTLnvCWAyACePh6G5RKsvhlIVSKwRfeASHw3
> rGAAn0XX6gphj2xLgPOvRb1NS9JboqWZ
> =J7zs
> -----END PGP SIGNATURE-----

[Jakub Hrozek]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/21/2009 11:24 AM, Jakub Hrozek wrote:
>  One of my previous patches disallowed adding users and groups
> outside
>  known domains but I forgot disallowing modifying, deleting, etc.
>  
>  Fixes: ticket #114 
Sorry, the attached patch did not apply cleanly on the current HEAD. I
also squashed in a fix for #113. That one was a regression caused by not
ignoring ENOENT when deleting anymore in order to provide an error
message - but even when we delete from legacy domain, we still want to
descent into sysdb to delete cache.

	Jakub
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkqOgrUACgkQHsardTLnvCVQ+ACgqs136TAwhSzj9PCQIUSRV0JR
> F4AAniaQsY76iAra2ebe6fnuzNN8+J33
> =4id2
> -----END PGP SIGNATURE-----

[Jakub Hrozek]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/21/2009 01:19 PM, Jakub Hrozek wrote:
>  On 08/21/2009 11:24 AM, Jakub Hrozek wrote:
> > One of my previous patches disallowed adding users and groups outside
> > known domains but I forgot disallowing modifying, deleting, etc.
>  
> > Fixes: ticket #114
>  
>  Sorry, the attached patch did not apply cleanly on the current HEAD. I
>  also squashed in a fix for #113. That one was a regression caused by not
>  ignoring ENOENT when deleting anymore in order to provide an error
>  message - but even when we delete from legacy domain, we still want to
>  descent into sysdb to delete cache.
>  
>  	Jakub 
Yet one more iteration that should also fix the return code to be 0.

	Jakub
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkqOjJwACgkQHsardTLnvCUAGACgl+PZDAacBnIR3MpQojG1iHxz
> ODcAn0hz0SxkUHrS2cqyp8PPDHcrbqUX
> =0o4C
> -----END PGP SIGNATURE-----

[Sumit Bose]

On Fri, Aug 21, 2009 at 02:01:32PM +0200, Jakub Hrozek wrote:
>  -----BEGIN PGP SIGNED MESSAGE-----
>  Hash: SHA1
>  
>  On 08/21/2009 01:19 PM, Jakub Hrozek wrote:
>  > On 08/21/2009 11:24 AM, Jakub Hrozek wrote:
>  >> One of my previous patches disallowed adding users and groups outside
>  >> known domains but I forgot disallowing modifying, deleting, etc.
>  > 
>  >> Fixes: ticket #114
>  > 
>  > Sorry, the attached patch did not apply cleanly on the current HEAD. I
>  > also squashed in a fix for #113. That one was a regression caused by not
>  > ignoring ENOENT when deleting anymore in order to provide an error
>  > message - but even when we delete from legacy domain, we still want to
>  > descent into sysdb to delete cache.
>  > 
>  > 	Jakub
>  
>  Yet one more iteration that should also fix the return code to be 0.
>  
>  	Jakub 
ACK

bye,
Sumit

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/21/2009 08:09 AM, Sumit Bose wrote:
>  On Fri, Aug 21, 2009 at 02:01:32PM +0200, Jakub Hrozek wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > On 08/21/2009 01:19 PM, Jakub Hrozek wrote:
> >> On 08/21/2009 11:24 AM, Jakub Hrozek wrote:
> >>> One of my previous patches disallowed adding users and groups outside
> >>> known domains but I forgot disallowing modifying, deleting, etc.
> >>
> >>> Fixes: ticket #114
> >>
> >> Sorry, the attached patch did not apply cleanly on the current HEAD. I
> >> also squashed in a fix for #113. That one was a regression caused by not
> >> ignoring ENOENT when deleting anymore in order to provide an error
> >> message - but even when we delete from legacy domain, we still want to
> >> descent into sysdb to delete cache.
> >>
> >> 	Jakub
> >
> > Yet one more iteration that should also fix the return code to be 0.
> >
> > 	Jakub
>  
>  ACK
>  
>  bye,
>  Sumit
>  _______________________________________________
>  sssd-devel mailing list
>  sssd-devel(a)lists.fedorahosted.org
>  https://fedorahosted.org/mailman/listinfo/sssd-devel 
Pushed to master.

- -- 
Stephen Gallagher
RHCE 804006346421761

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkqO0jAACgkQeiVVYja6o6PnJwCghK4WJtcsbaFTCUlg0pt2wgJZ
> 4b8Anj4UiGhioB1GVWi5X/rpwwlzYqdm
> =vFn+
> -----END PGP SIGNATURE-----