September 2009 - sssd-devel - Fedora mailing-lists

[PATCHES] ELAPI related patches
by Dmitri Pal 05 Oct '09

05 Oct '09

Hello, The patch comments give more details. The first two patches are two rounds of work related to "resolving" events. The event (when created) might have attributes that come from a template. Some of these attributes need to be resolved (replaced) at the execution time. Time and date are among them for example. The last patch fixes some warnings in the ELAPI example. I am running on RHEL5 and this is why I think I see these warnings. In one of the previous mails it was suggested to use less parentheses but it seems that compiler wants more :-) I wanted to draw attention to this fact since I do not plan to try to reduce the number of parentheses I usually use in conditional statements. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/

4 9

[PATCH] Fix python sync operations and mem hierarchy
by Jakub Hrozek 05 Oct '09

05 Oct '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Similar to Simo's patch that fixed the tools, this one converts the python bindings to the start_transaction/end_transaction functions. Also fixes memory hierarchy so that tools_ctx is allocated in every operation and used as memory context for the operation instead of self->mem_ctx which simplifies cleanup. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkrDXTIACgkQHsardTLnvCVMXwCg51o5EcYyszvuIWrrCSg39nks whQAn1sRdN4OcbJbO1t768o39JrQjp2a =QE4M -----END PGP SIGNATURE-----

2 2

[PATCH] add utility call check_and_open_readonly
by Sumit Bose 05 Oct '09

05 Oct '09

Hi, with the patch the config file is only read if it is - a regular file - owner and group are 0 (root) - file permissions are 600 This patch depends on the config_from_fd patch currently under review. bye, Sumit

3 9

[PATCHES] Collection related patches
by Dmitri Pal 05 Oct '09

05 Oct '09

See patch comments for details. All three are not massive. 1) Comparison and sorting collections 2) Taking part of the code from long module and putting it into a new module for readability 3) Adding new functionality to the module created in previous patch -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/

4 12

[PATCH] Add config_from_fd() to ini_config
by Stephen Gallagher 05 Oct '09

05 Oct '09

The SSSD needs a config_from_fd() variant of the config_from_file() call so that we can preopen a config file and perform some verification on it before parsing it. The config_from_fd() call is used to avoid race conditions between testing the file and reading it in. Note: the *_from_fd() functions still require the config file name for internal information. This does not imply that it is used to open the file. -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/

4 10

[PATCH] update sysdb tests to new config file version
by Sumit Bose 01 Oct '09

01 Oct '09

Hi, this patch should make sysdb tests happy again. bye, Sumit

2 4

[PATCH] Update polish translation for 0.6.0
by Stephen Gallagher 01 Oct '09

01 Oct '09

Sent on behalf of Piotr Drąg -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/

4 5

[PATCH] fix tools nested event loops
by Simo Sorce 01 Oct '09

01 Oct '09

Newer tevent library now enforce the "no nested loops" unwritten rule. Tools had a funny way to do async that nested loops. This patch fixes tools to not nest loops and use common code to start/end transactions. It also fixes the memory hierarchy of the tools_ctx. Simo.

3 2

[PATCH] Add SASL/GSSAPI support to ldap id provider
by Simo Sorce 01 Oct '09

01 Oct '09

This is an initial implementation of SASL support for the id provider. It works and IMO it is complete enough to be committed. Comments or acks welcome :-) Simo.

3 2

[PATCH] Change requirement on libldb to libldb >= 0.9.3
by Stephen Gallagher 30 Sep '09

30 Sep '09

Requiring libldb 0.9.3 explicitly broke using sssd on the Fedora 12 beta. Pushed to master under the one-line rule. -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/

2 1

[PATCH] Updating release script to use the VERSION file
by Stephen Gallagher 29 Sep '09

29 Sep '09

The release script was still parsing configure.ac (and wrongly) instead of using the VERSION file. Pushed under the one-liner rule. -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/

1 0

[PATCH] Fix infinite loop with empty group enumeration
by Stephen Gallagher 29 Sep '09

29 Sep '09

Loop control variable was not being incremented. I also converted a goto loop into a do...while loop to make it easier to follow the logic. This should fix https://fedorahosted.org/sssd/ticket/211 I tested with a single LOCAL domain, specified as in the ticket, and also with a second, LDAP domain to verify that groups were still enumerated for further domains. -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/

3 5

[PATCH] tighten up file permissions just to be safe
by Simo Sorce 28 Sep '09

28 Sep '09

just make double sure we do not leak info. Simo.

2 2

Announcing the release of SSSD 0.6.0
by Stephen Gallagher 25 Sep '09

25 Sep '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The SSSD Development team is proud to announce the immediate release of SSSD 0.6.0. It can be found at https://fedorahosted.org/sssd/ == Highlights == * New, more consistent config file format * Improvements to SSL/TLS setup in the LDAP provider * Support for configuring the location of the credential cache in Kerberos * Better handling of bad configuration files * Support for asynchronous cache refreshes * New, faster enumeration logic * SSS tools made more reliable * New Python API for managing native SSSD users * Improvements for building on older platforms * Many other bugfixes and stability improvements == Detailed Changes Since 0.5.0 == Dmitri Pal (8): * ELAPI sinks and providers * ELAPI Adding file provider and CSV format * ELAPI Laying foundation for the async processing * COLLECTION Copy collection flat with concatenated names * COLLECTION Improvements to copy functions * COLLECTION Functions to deal with hash * ELAPI Better separation from collection internals. * INI Error handling and interface cleanup Jakub Hrozek (17): * Remove shadow-utils support from tools * Small changes to the example config and manpage * Add copyright notices * ELAPI: Fix dispatcher structure initialization * Add binaries and backup files to .gitignore * Refactor tools code * Decouple synchronous sysdb interface from tools * Provide python bindings for sysdb * Use syslog for logging error conditions in SSSD * ELAPI: fix varargs call, update unit tests * ELAPI: Ticket 161: Initialize structures with calloc instead of enumerating members * Allow entering parent groups as FQDN * Remove provider=files * Manpages update * script to upgrade config to v2 * Send debug messages to logfile * Convert the example config to v2 format, upgrade config on update only Jeff Schroeder (1): * Add documentation for installing build dependencies Piotr Dr?g (1): * Add pl translation Ralf Haferkamp (2): * Fix initgroups search filter when using rfc2307bis * Avoid crash when timestamp is NULL Simo Sorce (30): * Use the correct structure. * Initial support for multiple schema types * Always save using member/memberOf * Fix group replies when using member/memberof * Upgrade database to 0.2 * Remove redunant function and always pass attrs. * Make enumeration an independent task * Speed-up enumerations. * Correctly handle !DbusWatch behavior. * Turn enumeration into a boolean value * Honor enumerate option in ldap_id * Fix proxy enumeration * Fix two possible uninitialized values * Split database in multiple files * Tools are allowed to touch only the 'local' domain * Fix Ldap id backend offline code * Fix memory mishandling. * Fix ldap enumeration async task * Fix getgrnam and getgrgid calls * Complete the removal of "legacy" option. * Update documentation and examples * Make the offline status backend-global * Turn ldap driver options into multitype * Fix copy&paste error. * Better handle groups w/o members * Fix copy&paste of wrong structure * Don't try to use initgroups_dyn if not available * Handle suspend cases * Split out an sssd-clients package * Let backend respond while fetching large results Stephen Gallagher (26): * Move RPM specfiles into contrib/ * Consolidate cache lookups in the NSS * Add support for the !EntryCacheNoWaitRefreshTimeout * Check for valid min and max IDs in confdb_get_domains * Update manpage to reflect new syntax for enumerate * Add strtoint32 and strtouint32 convenience functions * Properly detect negative/invalid values for the minId and maxId * Remove unused event context argument from confdb_init * Read the configuration parsing before daemonization * Fix first-time confdb generation * Add 'make tests' target * Add strtoint32 and strtouint32 tests * Print error message when connection to the config db fails * Exit if the sssd is launched as a user other than root * Include m4 directories in tarball * Allow rerunning autoreconf from the tarball * Add PRERELEASE_VERSION variable for use in sssd.spec.in * Add missing updates to LINGUAS for pl translation * Add missing reference to sssd-ldap(5) in sssd.conf(5) manpage * Include groupSearchBase in sssd-ldap(5) manpage * Several fixes and enhancements for config file processing * Make configure script compatible with older python versions * Revert "Use syslog for logging error conditions in SSSD" * Temporarily disable automatic config file reread * Upgrade confdb to version 2 * Update version to 0.6.0 Sumit Bose (31): * removed unused header file * do not show server messages to user * fix internal order of ldap user mapping options * add configure check for errno_t * send SSSD_REALM and SSSD_KDCIP environment to the client * check if gid attribute is empty * stop processing a domain if no provider is given * check if libpcre version is above or below 7 * remove the concept of a backend name * configure cleanups * fix libdbus configure check * initialize sockaddr_in structure * add change password target to krb5 backend * use fork+exec for kerberos helper * Let the PAM client send its PID * remove unused client locale from PAM protocol * make cli_pid mandatory and increase version number of pam protocol * add krb5ccache_dir and krb5ccname_template option * fix the wrong usage of an offset * added child timeout handler * Check if SSL/TLS handler is already in place * use getaddrinfo to resolve IP address of KDC * add a man page for pam_sss * toggle debug output of sssd_krb5_locator_plugin with an environment variable * add new config options ldap_tls_cacert and ldap_tls_cacertdir * fix possible short reads in kerberos provider * remove krb5_try_simple_upn option and make it a default fallback * add defines for large file support to standard CFLAGS * more fixes for older libpcre versions * Cleanups for library linking * added support for older MIT kerberos versions - -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkq9JBMACgkQeiVVYja6o6MFjQCfaB5F7lH9Dr69RoqqTleOnURI 1CkAniWeh0NhaEhinX/D5amZdO5pJPXq =nSiq -----END PGP SIGNATURE-----

1 0

[PATCH] extend sssd-krb5 man page
by Sumit Bose 25 Sep '09

25 Sep '09

Hi, this patch to the sssd-krb5 man page should clarify how the krb5 provider will find the right UPN. This hopefully fixes #204. Please fell free to correct any grammar or spelling mistakes. bye, Sumit

4 6

[PATCH] Convert the example config to v2 format, upgrade config on update only
by Jakub Hrozek 25 Sep '09

25 Sep '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Convert the example config to v2 format, upgrade config on update only Also, instead of having an LDAP proxy domain as an example, show a native LDAP config. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkq82LYACgkQHsardTLnvCXphACgt+YznBMDLlBMi6qvO5OMzJ/M JHQAn2hyhh1fkii+XgdfZ+cyQL1B48rz =Yzim -----END PGP SIGNATURE-----

2 4

[PATCH] add defines for large file support to standard CFLAGS
by Sumit Bose 25 Sep '09

25 Sep '09

Hi, this patch fixes a compiler warning about the redefinition of SIZEOF_OFF_T on 32bit systems. It's not very elegant, but I don't know of a portable way to check if python was compiles with large file support. If anyone knows, please enlighten me. It might be possible the this patch leads to problems on systems where python was compiled without large file support, but I think most will have it. bye, Sumit

2 2

[PATCH] leave space to run fd events on long operations
by Simo Sorce 25 Sep '09

25 Sep '09

This is actually a workaround as we don't have a way to create a low prio tevent queue that fires at a priority lower than file events. I'll work with upstream to fix this later on, meanwhile this patch will do. FYI: I haven't used timed_timeval_add() because it is buggy wrt microseconds in current release tevetn. (I have already committed a patch to fix the problem upstream). Simo.

2 2

[PATCH] Send debug messages to logfile
by Jakub Hrozek 25 Sep '09

25 Sep '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Introduces a new option --debug-to-files which makes SSSD output its debug information to a file instead of stderr, which is still the default. Also introduces a new confdb option debug_to_files which does the same, but can be specified per-service in the config file. The logfiles are stored in /var/log/sssd by default. I also removed two lines in Makefile.am that still referenced shadow-utils, don't think it warrants a separate patch. Jakub -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkq6V/QACgkQHsardTLnvCXIjwCgh704J0zgpbyMKAKDEtGQHVIu P5wAoLoRTvn7RnwQM12jSaSIU42JqnZD =YltH -----END PGP SIGNATURE-----

4 11

[PATCH] declare hostip only in debug mode
by Sumit Bose 25 Sep '09

25 Sep '09

Hi, this patch suppresses a compiler warning when KRB5_PLUGIN_DEBUG is not set, which is the common case. bye, Sumit

3 5

[PATCHES] Convert the SSSD to config_file_version 2
by Stephen Gallagher 25 Sep '09

25 Sep '09

Patch 0001 (sgallagh): Convert the existing options to the new names. Patch 0002 (jhrozek): Update the manpages to reflect the new names. Patch 0003 (jhrozek+sgallagh): Create a python script to convert existing config files to the new format and run it automatically during %post in the sssd.spec Jakub has reviewed patch 0001 and I have reviewed Patch 0002 and 0003 (though I made some additional fixes to his version of 0003). I'm looking for one additional reviewer in order to push these.

4 7

[PATCH] add new config options ldap_tls_cacert and ldap_tls_cacertdir
by Sumit Bose 25 Sep '09

25 Sep '09

Hi, this patch adds the config option ldap_tls_cacert and ldap_tls_cacertdir to specify the location of CA certificates. If they are not used in sssd.conf the system defaults as defined in /etc/openldap/ldap.conf will be used. I also extended the sssd-ldap man page. This patch should fix #201 and #202. bye, Sumit

2 4

[PATCH] fix possible short reads in kerberos provider
by Sumit Bose 25 Sep '09

25 Sep '09

Hi, this patch should fix #179. bye, Sumit

3 2

[PATCH] split rpms into server and client (#197)
by Simo Sorce 25 Sep '09

25 Sep '09

This patch splits the RPMs into a server and client parts. The server depends on the client package. This allow to make only sssd-client multilib and not the whole daemon. Fixes #197 Simo.

3 2

[PATCH] Temporarily disable automatic config file reread
by Stephen Gallagher 25 Sep '09

25 Sep '09

The backends do not honor the reloadConfig SBUS message right now, so if an admin changes the sssd.conf file, it will update only the monitor, potentially leaving the SSSD as a whole in a bad state. This patch will simply comment out monitor_config_file() for the time being until https://fedorahosted.org/sssd/ticket/91 is fixed. -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel September 2009