[PATCH] Use uint32_t to copy the service port
by Jakub Hrozek
The sss_client was copying 32bit port value, but the NSS responder was
reading 16bit port value. This was breaking on Big-Endian machines where
we read "the other 16bits".
By the way, is there a reason to use 32bits in the client in the first
place? IIRC a port number is a 16 bit value..
11 years, 11 months
Use variable to control verbosity for things in common directory
by Ariel Barria
https://fedorahosted.org/sssd/ticket/394
I was reviewing this ticket and talks about a default value to verbosity.
althought i'm not sure if is about the sssd debug level or other case.
If the case of debug level:
Reading theory in
http://sgallagh.fedorapeople.org/sssd/1.8.91/man/sssd.conf.5.html
in section debug_level (integer) mentions that:
"0x0010 is the default value as well as the lowest allowed value"
"0x0010: Fatal failures. Anything that would prevent SSSD from starting up or causes it to cease running."
If you want to use a higher debug level is changed in sssd.conf-> debug_level = (desired level is placed).
By not specifying on command line flag, is used the indicated in sssd.conf ->debug_level.
If specified in command line debug_level first uses the command line, this was corrected in the ticket https://fedorahosted.org/sssd/ticket/764
In the case concerned from that, the flag already exists.
util.h
[code]
/** \def DEBUG_IS_SET(level)
\brief checks whether level (must be in new format) is set in debug_level
\param level the debug level, please use one of the SSSDBG*_ macros
*/
#define DEBUG_IS_SET(level) (debug_level & (level))
#define CONVERT_AND_SET_DEBUG_LEVEL(new_value) debug_level = ( \
((new_value) != SSSDBG_INVALID) \
? debug_convert_old_level(new_value) \
: SSSDBG_UNRESOLVED /* Debug level should be loaded from config file. */ \
);
[/code]
11 years, 11 months
sssd & AD frequently disconnecting
by Ondrej Valousek
Hi List,
I am using sssd (F17) with AD and what I observed is that sssd frequently marks my AD server working and then "not working". Symptoms:
(Mon May 21 13:58:43 2012) [sssd[be[default]]] [sdap_id_op_connect_step] (0x4000): beginning to connect
(Mon May 21 13:58:43 2012) [sssd[be[default]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP'
(Mon May 21 13:58:43 2012) [sssd[be[default]]] [get_server_status] (0x1000): Status of server 'dcpra1.XXX' is 'working'
(Mon May 21 13:58:43 2012) [sssd[be[default]]] [get_port_status] (0x1000): Port status of port 389 for server 'dcpra1.XXX' is 'not working'
(Mon May 21 13:58:43 2012) [sssd[be[default]]] [fo_resolve_service_send] (0x0020): No available servers for service 'LDAP'
Sometimes sssd does manage to connect, sometimes not.
I know there is a problem with the AD controller cutting the connection after some timeout that we can not (yet) handle correctly, but this
also happens shortly after sssd restart.
Is there any explanation to this?
Thanks,
Ondrej
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s).
Please direct any additional queries to: communications(a)s3group.com.
Thank You.
Silicon and Software Systems Limited. Registered in Ireland no. 378073.
Registered Office: South County Business Park, Leopardstown, Dublin 18
11 years, 11 months
New mailing list: sssd-users
by Stephen Gallagher
For quite some time, we have used the sssd-devel mailing list for
development and user configuration issue discussions. As the project has
grown, it becomes more and more clear that we need to separate these
topics into their own lists.
So as of today, we now have a new mailing list for user questions. You
can subscribe at https://fedorahosted.org/mailman/listinfo/sssd-users
This list will be considerably less noisy for our users as they will not
be bombarded with patch review emails and other development-centric
issues.
11 years, 11 months
[PATCH] Fixed issue in SELinux user maps
by Jan Zelený
There was an issue when IPA provider didn't set PAM_SUCCESS when
successfully finished loading SELinux user maps. This lead to the map
not being read in the responder.
Thanks
Jan
11 years, 11 months
Kerberos password, Office and Home network.
by Daniel Löw
Hello!
I'am using sssd 1.8 on an Ubuntu 12.04 laptop. So that I can login even
when I am offline.
Everyting works great, but if I take the laptop home with me, and
connect it to my home network, i cant login.
Then it says that i have the wrong password. then if I want to be able
to login i need to connect the laptop to my office network, then I can
login. Login offline works great, unless i connect the laptop to a
network that isn't my office network.
I'am getting my password from Kerberos, and my account information from
LDAP.
- Daniel
11 years, 11 months