help with git pull sssd?
by David O'Brien
I'd like to review and update a couple of man pages but want to update
my repo first.
[daobrien@daobrien sssd (master)]$ git pull
ssh://obriend@git.fedorahosted.org/sssd.git
Enter passphrase for key '/home/daobrien/.ssh/id_rsa':
fatal: protocol error: bad line length character
I've no idea what this might mean or what to do about it. Can anyone help?
thanks
--
David O'Brien
Senior Technical Writer, Engineering Content Services
Red Hat Asia Pacific Pty Ltd
193 North Quay, Brisbane
+61 7 3514 8189
http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git
He who asks is a fool for five minutes, but he who does not ask remains
a fool forever."
~ Chinese proverb
14 years, 3 months
Announcing SSSD 1.0.1 Security Release
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Last week, the SSSD team discovered a security flaw in SSSD 1.0.0. It
has been designated CVE-2010-0014
When sssd is configured to use Kerberos for authentication
(auth_provider = krb5 in a domain section) any password is accepted as
valid when all of the following conditions are met:
- the system is offline, i.e. the KDC configured with the option
krb5_kdcip cannot be reached
- the user who tries to authenticate has a valid TGT for the Kerberos
realm served by SSSD in his credential cache file
SSSD 1.0.1 has now been released and is available at
https://fedorahosted.org/sssd/ for download immediately.
This is a serious vulnerability, and anyone using Kerberos auth
through the SSSD should update to this version as soon as possible.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAktLMekACgkQeiVVYja6o6MZ7wCbBCW3bkUU5ySbSV4ZRR2kJW9k
Qa4AnjHPhaFsDyFlr5HjNl0rjT/ZRgqk
=tdHp
-----END PGP SIGNATURE-----
14 years, 3 months
Some unpleasant observations
by Dmitri Pal
Hi,
As some of you know I use RHEL5 on my main machine where I run SSSD.
Today I had the following problem:
a) I started "yum update" in the command line window and switched to
other tasks.
b) I was on VPN at the beginning working remotely.
c) My screen locked while I was on call but probably before the update
has finished.
d) The update probably did something to the Network Manager.
e) When I tried to unlock the screen it was failing to log me back. I
tired 10 times to make sure that it is really the sssd not me.
f) I switched to text mode (ctrl+alt+F1) and tried there. Same result.
g) I logged there as root. Restarted sssd and was able to get as dpal.
h) I switched to desktop and now was able to log in.
i) When I got in I noticed that my VPN connection is lost.
Just in case I captured the list of the packaged that got updated:
Updated:
ICAClient.i386 0:11.0-1
OpenIPMI.i386 0:2.0.16-5.el5_4.1
OpenIPMI-libs.i386 0:2.0.16-5.el5_4.1 acpid.i386
0:1.0.4-9.el5_4.1
acroread.i386 0:8.1.7-1.el5
bind-libs.i386 30:9.3.6-4.P1.el5_4.1
bind-utils.i386 30:9.3.6-4.P1.el5_4.1
coreutils.i386 0:5.97-23.el5_4.1
cpp.i386 0:4.1.2-46.el5_4.1 cups.i386
1:1.3.7-11.el5_4.3
cups-libs.i386 1:1.3.7-11.el5_4.3
dbus-python.i386 0:0.70-9.el5_4
device-mapper-multipath.i386 0:0.4.7-30.el5_4.4 expat.i386
0:1.95.8-8.3.el5_4.2
expat-devel.i386 0:1.95.8-8.3.el5_4.2
firefox.i386 0:3.0.16-1.el5_4
flash-plugin.i386 0:10.0.42.34-1.el5
fsync-ng.noarch 0:1.5.18-10.rhis
gcc.i386 0:4.1.2-46.el5_4.1
gcc-c++.i386 0:4.1.2-46.el5_4.1
gcc-gfortran.i386 0:4.1.2-46.el5_4.1 glibc.i686
0:2.5-42.el5_4.2
glibc-common.i386 0:2.5-42.el5_4.2
glibc-devel.i386 0:2.5-42.el5_4.2
glibc-headers.i386 0:2.5-42.el5_4.2 httpd.i386
0:2.2.3-31.el5_4.2
iptables.i386 0:1.3.5-5.3.el5_4.1
iptables-ipv6.i386 0:1.3.5-5.3.el5_4.1
java-1.5.0-ibm.i386 1:1.5.0.11-1jpp.1.el5
java-1.5.0-ibm-devel.i386 1:1.5.0.11-1jpp.1.el5
java-1.5.0-sun.i586 0:1.5.0.22-1jpp.1.el5
java-1.5.0-sun-plugin.i586 0:1.5.0.22-1jpp.1.el5
kdelibs.i386 6:3.5.4-25.el5_4.1
kernel-headers.i386 0:2.6.18-164.9.1.el5
kexec-tools.i386 0:1.102pre-77.el5.3 kpartx.i386
0:0.4.7-30.el5_4.4
ksh.i386 0:20080202-14.el5_4.2 libgcc.i386
0:4.1.2-46.el5_4.1
libgcj.i386 0:4.1.2-46.el5_4.1
libgfortran.i386 0:4.1.2-46.el5_4.1
libpurple.i386 0:2.6.3-2.el5
libstdc++.i386 0:4.1.2-46.el5_4.1
libstdc++-devel.i386 0:4.1.2-46.el5_4.1
libtool.i386 0:1.5.22-7.el5_4
libtool-ltdl.i386 0:1.5.22-7.el5_4
libuser.i386 0:0.54.7-2.1.el5_4.1
libuser-devel.i386 0:0.54.7-2.1.el5_4.1
libvorbis.i386 1:1.1.2-3.el5_4.4
libvorbis-devel.i386 1:1.1.2-3.el5_4.4 lvm2.i386
0:2.02.46-8.el5_4.2
metacity.i386 0:2.16.0-12.el5_4.1 nscd.i386
0:2.5-42.el5_4.2
nss_ldap.i386 0:253-22.el5_4 ntp.i386
0:4.2.2p1-9.el5_4.1
openssh.i386 0:4.3p2-36.el5_4.3
openssh-askpass.i386 0:4.3p2-36.el5_4.3
openssh-clients.i386 0:4.3p2-36.el5_4.3
openssh-server.i386 0:4.3p2-36.el5_4.3
pidgin.i386 0:2.6.3-2.el5
poppler.i386 0:0.5.4-4.4.el5_4.11
samba-client.i386 0:3.0.33-3.15.el5_4.1
samba-common.i386 0:3.0.33-3.15.el5_4.1
screen.i386 0:4.0.3-1.el5_4.1
selinux-policy.noarch 0:2.4.6-255.el5_4.1
selinux-policy-devel.noarch 0:2.4.6-255.el5_4.1
selinux-policy-targeted.noarch 0:2.4.6-255.el5_4.1
sssd.i386 0:1.0.99-0.2010010510git3356eda.el5
sssd-client.i386 0:1.0.99-0.2010010510git3356eda.el5
system-config-lvm.noarch 0:1.1.5-1.0.el5_4.1 tcsh.i386
0:6.14-14.el5_4.2
vixie-cron.i386 4:4.1-77.el5_4.1 wget.i386
0:1.11.4-2.el5_4.1
xerces-j2.i386 0:2.7.1-7jpp.2.el5_4.2
xorg-x11-server-Xnest.i386 0:1.1.1-48.67.el5_4.1
xorg-x11-server-Xorg.i386 0:1.1.1-48.67.el5_4.1
xorg-x11-server-Xvfb.i386 0:1.1.1-48.67.el5_4.1
xterm.i386 0:215-8.el5_4.1
xulrunner.i386 0:1.9.0.16-2.el5_4
I do see sssd.
So if the sssd was updated and this update caused the lockdown this is bad.
People who run updates will most likely do other things while the
updates are running and will hope that they will be given a chance to
save their work before the recommended reboot.
I do not know what is the right way to address the issue but it is
definitely not nice and will cause a lot of frustration.
--
Thank you,
Dmitri Pal
Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
14 years, 3 months
Need to list/doc sssd.api.conf?
by David O'Brien
I thought I asked something similar a little while ago, but I can't find
it anywhere...
Is there any place in the SSSD User Guide (specifically, in the Appendix
where other, similar listings will appear) for listings or descriptions
of these:
/etc/sssd/sssd.api.*
If so, I'll need some guidance on what to include (I don't speak API) or
some pointers to any existing wiki pages, etc.
If not, at the very least I can put a reference to this directory in a
sub-section of the Appendix.
thanks
--
David O'Brien
Senior Technical Writer, Engineering Content Services
Red Hat Asia Pacific Pty Ltd
193 North Quay, Brisbane
+61 7 3514 8189
http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git
He who asks is a fool for five minutes, but he who does not ask remains
a fool forever."
~ Chinese proverb
14 years, 3 months
[PATCH] fix for #323
by Simo Sorce
Now the upgrade process can cope with converting ols ssd.ldb files into
multiple databases even if the new config file does not include a
"local" provider anymore.
Tested with a v1 db file and seem to work fine with and w/o a LOCAL
provider defined in the configuration.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 3 months
Two more logo drafts
by Johannes von Bargen
Hi,
I created two more logo drafts...
Please check them out and let me know what you think!
--
Johannes von Bargen
14 years, 3 months