[PATCH] store additional LDAP attributes
by Sumit Bose
Hi,
with this patch the LDAP backend can store two additional attributes to
the sysdb if available. The original DN is used by the authentication
part of the LDAP backend to bind to the LDAP server. The user principle
name (UPN) can be used by the kerberos backend to get the TGT. Both are
necessary if the DN or UPN cannot be generated from the unix user name,
which is often the case if you are using AD.
bye,
Sumit
14 years, 8 months
[PATCH] fix handling of filtersUsers in groups
by Sumit Bose
Hi,
this patch fixes https://fedorahosted.org/sssd/ticket/108 .
I couldn't make up my mind if the output should contain the filtered
user or not (wheel:x:10:root,sgallagh or wheel:x:10:sgallagh), because I
think the handling of root is different from other user. With
provider=files root should be member of groups like wheel even if the
root user is filtered. In other configurations where certain user, e.g.
Administrator if your server is AD, shall be filtered, I think it is
expected that this user does not appear in a group.
So I added a new boolean parameter filterUsersInGroups and fixed the
original problem in fill_grent. I also removed some very old tab
indents.
bye,
Sumit
14 years, 8 months
[PATCH] Fix sysdb tests
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Couple of changes to sysdb tests to reflect latest changes:
* we're always in MPG domains, so don't set GID, let sysdb choose it
automatically
* we're always in MPG domains, so GIDs and UIDs cannot overlap
* test the difference between sysdb_add_user and sysdb_store_user -
store allows setting attributes for existing users (function
test_sysdb_store_user_existing())
Fixes #129
Jakub
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkqOoPMACgkQHsardTLnvCVMhgCgsM5KU3z21no1NOXBcRPVRLR3
AOgAn1Hq7BLUQWEtHbXrIZiR9WTP3zu3
=J3Iy
-----END PGP SIGNATURE-----
14 years, 8 months
[PATCH] COMMON Fixes to return values, errno, leaks
by Dmitri Pal
Started looking at the ticket #107 related to
traverse functions. Realized that the return values
are not consistent. That overlapped with the work
that I wanted to do for ticket #103 - errno cleanup.
So I (across collection, INI and ELAPI):
* Made the return codes consistent (where found)
* Removed errno where it is not needed
While was testing used valgrind and found a nasty
problem when the value was added to collection with
overwriting duplicates the count was decreased improperly.
Fixing collection.c to not decrease count made
valgrind happy. While I was debugging this
I also spotted several build warnings in trace
statements when the " exp ? v1 : v2 " was used.
Fixed those.
In ini_config.c there was a trace statement that used
variable after it was freed. Removed trace statement.
--
Thank you,
Dmitri Pal
Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
14 years, 8 months