[PATCH] added child timeout handler
by Sumit Bose
Hi,
this patch adds a timeout handling for the kerberos children. If a child
needs omre then krb5auth_timeout seconds to send a response it is killed
and the baclend is marked offline.
bye,
Sumit
14 years, 7 months
[PATCH] fix the wrong usage of an offset
by Sumit Bose
Hi,
I hadn't checked a last minute change properly with the result that the
detection if mkstemp should be used or not is broken. This patch should
fix this.
bye,
Sumit
14 years, 7 months
Suggested version of sssd for proper openldap caching?
by Jeff Schroeder
What is the suggested version of sssd to use as a glorified nscd
replacement for an openldap setup? I happened to notice that Ubuntu is
using 0.5, but has cherry picked a few fixes. Will there be 0.5.x
point releases or should I wait for 0.6? Are there any config gotchas?
This will be on a Fedora client.
--
Jeff Schroeder
Don't drink and derive, alcohol and analysis don't mix.
http://www.digitalprognosis.com
14 years, 7 months
[PATCH 1/3] Let the PAM client send its PID -- 2nd version
by Sumit Bose
Hi,
this is the new version of the cli_pid patch with the missing size
added. There are two related patches.
0002 removes the unused client locale. It was added at a time where we
talked about generating all messages the client should display on the
server side.
Based on the previous discussion 0003 makes cli_pid a mandatory item in
the pam protocol and increments the protocol version to 3. IMO it is not
necessary to push it, but I wouldn't mind if you prefer it this way.
bye,
Sumit
14 years, 7 months
[PATCH] Make offline status backend global
by Simo Sorce
With this patch all the backend providers can share the same offline
status. This means composite backends like what AD or IPA will be that
use a mix of ldap and krb can share the offline status for both
protocols.
A further extension might allow to have per protocol "online/offline"
status, that will be done eventually when we integrate also the DNS
discovery options.
Tested with ldap_id+ldap_auth and ldap_id+krb5_auth
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 7 months
[PATCH] Make basic options typed
by Simo Sorce
This patch finally allows us to define the type for basic options.
It uses a union to store different types, and an enum to list the
allowed types.
It also provides for helper functions that always check the type to
safely retrieve data, or scream loudly if we messed up.
This allowed me to remove all but 1 special option that was a duplicate
made only to avoid converting from string to int every time we needed to
get an option.
The only remaining special case is the schema type, because that is a
special string to special number transaltion. But these kind of options
(another is tls_reqcert) are rare enough that we can avoid trying to
make special handlers for them too.
Currently there are 4 types supported: string, blob, number, boolean.
String has 2 subtypes, const and non const, but they are not enforced
(you can assign a const string and then re-read it as non-const). But
this is not really a problem, as values are always copied in the init
functions, furthermore, although you can get values as non-const they
should always be regarded a immutable strings as the value returned is
the actual string saved in the option, so changing it, means changing
the configuration.
I think we can later take this code and make it generic in the provider
backend code, so that all backends can use it. It should be easy enough
to do.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 7 months
[PATCH] Let the PAM client send its PID
by Sumit Bose
Hi,
with this patch the client sends its PID to sssd. This is at least
needed by the krb5 provider if the client PID should be part of the
credential cache file.
bye,
Sumit
14 years, 7 months