[PATCHES] Clean up unused dependencies
by Stephen Gallagher
Patch 0001: Clean up dependencies in the build system
The sss_tools did not need to be linked against the full list of
SSSD_LIBS, and nothing needs to be linked directly against libtdb.
Also add a new set of configure options for KRB5_LIBS and KRB5_CFLAGS to
allow overriding them at the command-line (since they output far more
library dependencies than we actually use)
Patch 0002: Take advantage of the KRB5_LIBS and NSS_LIBS overrides to
reduce the number of dependencies on the build libraries and binaries.
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
14 years, 5 months
[PATCH] Fix #259
by Simo Sorce
We were not always storing lastUpdate and expiration time.
Add code to always do that.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 5 months
[PATCH] unify more code
by Simo Sorce
This patch depends on my previous initgroups patch.
Removes code duplication.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 5 months
[PATCH] reorganize ldap provider files
by Simo Sorce
The LDAP id provider files where becoming way too big to be manageable.
The following patches splits various task related functions in separate
files.
Depends on my previous patches for initgroups and other cleanups.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 5 months
[PATCH] fix initgroups call
by Simo Sorce
This set of patches ends up fixing the initgroups call.
It still uses the slowest possible method, a future improvement is to
use the deref (IPA/DS/OpenLDAP) or the ASQ (AD) controls to reduce the
number of LDAP searches.
Patches 0001 though 0004 are dependencies for 0005
0001: add way to get a string w/o manually parsing the attributes
0002: make function public and move it to sdap.c
0003: this is also needed by the access modules, stores the original
memberof DNs
0004: remove redundant code and at the same time make it easier to use
the generic search function for users and groups retrieval. With this
change it will be possible to reduce further code duplication my
changing the code that searches for users and groups to use the generic
search function (I plan to do this once the patch is accepted)
0005: initgroups call fixups make it work and have specialized code
depending on the schema used (still doesn't fully support nested groups
in AD, but that is not a priority right now)
I have tested it with an IPA 1.2 server and seem to work properly.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 5 months
SRV records for kerberos
by Brian J. Murrell
Is there any support, or planned support for getting the kerberos
configuration (i.e. realm, kdc, etc.) from DNS SRV records?
b.
14 years, 5 months
how are my home dirs getting created?
by David O'Brien
On the wiki for SSSD, it says that sss_useradd doesn't create /home dirs
but that you can use pam_mkhomedir to set it up. I haven't knowingly set
that up, but all the new users I'm creating have home dirs. Where/how
can I check what's configured?
I'm using the /etc/pam.d/system-auth config from the wiki page, on F11,
with Source RPM: sssd-0.8.0-0.2009110515git9d56215.fc11.src.rpm
[root@alice ~]# getent passwd newUser01
newUser01:x:508:508:newUser01:/home/newUser01:/bin/bash
You have new mail in /var/spool/mail/root
[root@alice ~]# ll /home/
total 32
drwx------. 4 laogong laogong 4096 2009-11-04 22:52 laogong
drwx------. 4 nativelocaluser nativelocaluser 4096 2009-11-04 23:31
nativelocaluser
drwx------. 4 newUser01 newUser01 4096 2009-11-05 05:38
newUser01
drwx------. 4 newUser02 newUser02 4096 2009-11-04 23:18
newUser02
drwx------. 29 redhat redhat 4096 2009-10-21 07:45 redhat
drwx------. 4 redhat redhat 4096 2009-10-24 16:54
testuser1
drwx------. 4 testuser2 testuser2 4096 2009-10-24 16:56
testuser2
drwx------. 4 testuser3 testuser3 4096 2009-10-24 17:00
testuser3
[root@alice ~]#
thanks
--
David O'Brien
Red Hat Asia Pacific
+61 7 3514 8189
http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git
"The most valuable of all talents is that of never using two words when
one will do."
Thomas Jefferson
14 years, 5 months
Can't log in as new user
by David O'Brien
I'm nearly there...
created a new user ok: sss_useradd user123
changed the passwd ok: passwd user123
can get details ok: getent passwd user123@LOCAL
all perform and return details as expected.
ssh -vv user123@localhost
There's a few errors in there, but that would be because we're not using
Kerberos or whatever. The bit that seems to be broken is at at the end:
debug2: we did not send a packet, disable method
debug1: Next authentication method: publickey
debug1: Trying private key: /root/.ssh/identity
debug1: Trying private key: /root/.ssh/id_rsa
debug1: Trying private key: /root/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug1: Next authentication method: password
user123@localhost's password:
debug2: we sent a password packet, wait for reply
Connection closed by ::1
--
David O'Brien
Red Hat Asia Pacific
+61 7 3514 8189
http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git
"The most valuable of all talents is that of never using two words when
one will do."
Thomas Jefferson
14 years, 5 months