[PATCH] Read KDC info from file instead from environment
by Sumit Bose
Hi,
this patch changes the way the locator plugin finds out about the KDC.
Now the information is written to a file which is read by the plugin.
Two thing will be address in different patches.
- the enviroment variables are still sent to the client. I haven't
removed them in this patch, because it would introduce a dependency to
other not-committed patches. I thought it might be easier this way.
- integration of the fail-over framework.
bye,
Sumit
14 years, 4 months
SSSD Development String Freeze
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
As of this moment, the SSSD is in string freeze until the release of the
1.0 Release Candidate. This means that we will not be accepting any
patches that change, add or remove translatable strings until after we
make a release. We expect to package this release either on Wednesday,
Nov. 25 or the following Monday, Nov. 30.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAksKyw4ACgkQeiVVYja6o6M00wCeOLtFrkVSBHuMbiory7fZbKif
xK4An1ZlsJJlbIS0uq4c2z8Bb6ZfwFMR
=P+tS
-----END PGP SIGNATURE-----
14 years, 4 months
[PATCH] Make use of failover code in backends.
by Simo Sorce
This patch implements the use of the fail_over code under the control of
the data provider backend code. All providers share the same failover
structure and if they use the same service name, they also share the
same servers lists.
A set of callbacks is made available so that if a new resolution is
performed that changes the server currently in use then all providers
can update their status.
I have done limited testing with the ipa backend which exercises both
the ldap and krb code, although the standalone krb code still doesn't
implement using the failover code.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 5 months
[PATCH] Optimize gorup enumerations
by Simo Sorce
I've been thinking about optimizing group enumerations for a while as
they were way too slow for my taste.
I did that by relying on the way we store users in the database and by
parsing the member attribute of the groups counting on the fact we build
the user dn as name=<username>,cn=users,....
This patch does indeed help a lot as the speedup with a large database
is huge, on my machine the reduction is of at least 1 order of magnitude
(from 2.5 seconds to 0.15 seconds)
With this patch we do one search only ( therefore O(n) ) instead of a
series of searches ( O(n^2) ).
I also removed a lot of code, which is usually also a good thing.
The downside is that I don't have a user entry to test for uid range, so
I can't exclude users based on that.
However I think we should move both name filtering and range filtering
in the backend code and enforce them once at store time instead of
testing and enforcing them again and again and again each time we query
the database.
If the range or list of filtered name changes we should catch that by
simply filtering the database when the settings change and at startup.
Comments are welcome.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 5 months
[PATCH] Only display errors in unit tests
by Stephen Gallagher
This patch cuts down the output for the unit tests, so they only display
errors instead of both error and success statements.
This will make it easier to discover what went wrong.
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
14 years, 5 months
[PATCH] move id range checks into providers
by Simo Sorce
This way we check them once at storage time instead of checking again
and again at search time.
Applies only on top of the sysdb_enumgrent optimization patch.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 5 months
[PATCH] Enhance check for remote hosts
by Sumit Bose
Hi,
with this patch the ipa_access target should be functional complete (if
I haven't forgotten something). It tries to resolve to group memberships
of the remote host and checks the hbac rule against them.
bye,
Sumit
14 years, 5 months