sssd-devel February 2010

sssd-devel@lists.fedorahosted.org

13 participants
85 discussions

[PATCH] Enable debug_timestamps by default
by Stephen Gallagher 05 Feb '10

05 Feb '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We will use timestamps unless they are explicitly disabled in the sssd.conf. I am not removing the --debug_timestamps option to the services so as to maintain backwards compatibility. This patch resolves https://fedorahosted.org/sssd/ticket/389 - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAktoO8QACgkQeiVVYja6o6PZYgCeN6yKUjsC49H3g4RCenpZhKeb SF4AnRaISQomzqGHbVXfv3wBggDf5pUp =Mkpi -----END PGP SIGNATURE-----

3 7

[PATCH] Add missing include
by Jakub Hrozek 05 Feb '10

05 Feb '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A one liner - I noticed that pam_sss.c uses snprintf but does not include stdio.h (vsnprintf is used elsewhere which is declared in correctly included stdarg.h) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEUEARECAAYFAktrGEYACgkQHsardTLnvCVC+wCeJ/UajRIbHg9uTkHZ8B9Iz3IG zkwAmMtYvjJW8tBM4W435ORBME0Ow0o= =EwMg -----END PGP SIGNATURE-----

3 2

[PATCH] Make resolve and failover test work with CK_FORK=no
by Sumit Bose 04 Feb '10

04 Feb '10

Hi, the resolver and failover unit test are using a leak checker which calls 'talloc_free(talloc_autofree_context());'. This is not recommended and makes the test fail it CK_FORK is set to 'no'. The attached patch introduces a global talloc context which should be used by the test instead of NULL for root of the memory hierarchy. bye, Sumit

3 3

[PATCH] Make krb5 and open checks work if forking is disabled
by Sumit Bose 03 Feb '10

03 Feb '10

Hi, this patch fixes two unit tests which failed of CK_FORK is set to no. bye, Sumit

2 3

[PATCHES] Split off helper libraries into their own packages
by Stephen Gallagher 03 Feb '10

03 Feb '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Patches 0001-0003: License and package libpath_utils Patches 0004-0007: License and package libcollection. (Patch 0005 fixes an incorrect #include in collection.h) Patch 0008-0011: License and package libini_config. (Patch 0009 fixes an array index mistake that was throwing a compiler warning and would have been a potential memory-corruption bug.) Patch 0012-0014: License and package libref_array These are all very simple patches, there are just a bunch of them :) It should be an easy review. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAktnHnYACgkQeiVVYja6o6NMbQCfVEgQD9IGBaWsy8kdaO3sESGR p+sAoJK6Cp4iThTI0JfhcUpCo8QnLELT =TSTp -----END PGP SIGNATURE-----

3 10

[PATCH] Warn the user if authentication happens offline
by Sumit Bose 02 Feb '10

02 Feb '10

Hi, this patch should fix #239. All translatable strings are in the pam client and now it should be quite easy to add new messages which should be presented to the user. It is quite easy to see this message for a console user, but currently a GUI user needs a very fast eye to catch the message in the gdm or screensaver window. Maybe we should ask the desktop people to send a PAM_TEXT_INFO message e.g. with libnotify to the user's desktop. bye, Sumit

3 5

sssd.spec for SLES
by Sergei V. Kovylov 02 Feb '10

02 Feb '10

Here you may find a patch for sssd.spec file which provide correct build sssd for SLES (testes on SLES10SP1). In brief: There are 3 essences: redhat fedora sles which are detected by /etc/<vendor release file> existence (ex. /etc/SuSE-release) in spec and all necessary actions are doing along the OS detection. Additionally for SLES there is "--without-selinux" flag while configuring, as SLES doesn't support SELinux.

3 16

[PATCH] Check cache_credentials in sysdb_cache_auth_send()
by Sumit Bose 02 Feb '10

02 Feb '10

Hi, although it might be good practice to check cache_credentials before calling sysdb_cache_auth_send() I think it make sense to add it here, too. E.g. if someone forgets to check before calling sysdb_cache_auth_send() and for some reason the configuration is changed from cache_credentials=true to false. Then we might access some old chached passwords although it is expected that offline authentication does not work anymore. bye, Sumit

2 4

[PATCH] First step to handle LDAP referrals
by Sumit Bose 02 Feb '10

02 Feb '10

Hi, these two patches are a first step to handle LDAP referrals. The first patch changes the way we add a file descriptor event to the event loop. Currently it was extracted from the LDAP handle. But here only the fd to the 'primary' LDAP server is stored. If a referral is found and LDAP_OPT_REFERRALS is set to LDAP_OPT_ON the openLDAP library will open new connections to the new LDAP servers automatically. To keep track of the activity on these connection we need to add the new fds to the event loop, too. To get the fds this patch introduces a connection callback where the fd is extracted from the provided data and added to the event loop. There is another callback which removes the fd from the event loop when ldap_unbind is called. The second patch adds the config option ldap_referrals to switch the referral chasing on and off. Authentication with referrals currently work under the following conditions: - the DN of the user is the same on both LDAP servers - the LDAP server is RHDS/FDS/389, openLDAP does not return the 'Referral' error code when binding to a referral object bye, Sumit

2 4

[PATCH] Add offline failed login counter
by Sumit Bose 02 Feb '10

02 Feb '10

Hi, this patch adds a counter for failed login attempts when offline. This should fix https://fedorahosted.org/sssd/ticket/78. bye, Sumit

2 8

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel February 2010