Patch 0001 (sgallagh): Convert the existing options to the new names.
Patch 0002 (jhrozek): Update the manpages to reflect the new names.
Patch 0003 (jhrozek+sgallagh): Create a python script to convert
existing config files to the new format and run it automatically during
%post in the sssd.spec
Jakub has reviewed patch 0001 and I have reviewed Patch 0002 and 0003
(though I made some additional fixes to his version of 0003). I'm
looking for one additional reviewer in order to push these.
this patch adds the config option ldap_tls_cacert and
ldap_tls_cacertdir to specify the location of CA certificates. If they
are not used in sssd.conf the system defaults as defined in
/etc/openldap/ldap.conf will be used. I also extended the sssd-ldap
This patch should fix #201 and #202.
The backends do not honor the reloadConfig SBUS message right now,
so if an admin changes the sssd.conf file, it will update only the
monitor, potentially leaving the SSSD as a whole in a bad state.
This patch will simply comment out monitor_config_file() for the
time being until https://fedorahosted.org/sssd/ticket/91 is fixed.
Looking to carve out IT costs?
this patch make the creation of the Kerberos locator plugin optional and
adds support for older versions of MIT Kerberos (and older version of
libdbus, too). It also has the promised man page.
When a laptop is suspended the clock may be jumping hours, with this
patch now we explicitly count failure to pong back, so that at most we
may loose one ping due to time jumping and not kill the children right
-----BEGIN PGP SIGNED MESSAGE-----
Remove this provider type, as well as any references in the docs and
examples to the "LEGACYLOCAL" migration domain.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----