Patches that need porting back to master
by Stephen Gallagher
When I pushed the changes for SSSD 1.1.91 to git, I also pushed all
changes to master that applied cleanly (or with a trivial interactive
merge) and didn't cause a compilation error. The following patches
remain and need to be ported manually:
Sumit:
Add support for delayed kinit if offline
Handle Krb5 password expiration warning
New version of IPA auth and password migration
Make Kerberos authentication a tevent_req
Steve:
Properly set up SIGCHLD handlers
Add dynamic DNS updates to FreeIPA
Jakub:
Try all servers during Kerberos auth
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
13 years, 10 months
[PATCH] Add dynamic DNS updates to FreeIPA
by Stephen Gallagher
Addresses https://fedorahosted.org/sssd/ticket/368
This adds two new options:
ipa_dyndns_update: Boolean value to select whether this client
should automatically update its IP address in FreeIPA DNS.
ipa_dyndns_iface: Choose an interface manually to use for
updating dynamic DNS. Default is to use the interface associated
with the LDAP connection to FreeIPA.
This patch supports A and AAAA records. It relies on the presence
of the nsupdate tool from the bind-utils package to perform the
actual update step. The location of this utility is set at build
time, but its availability is determined at runtime (so clients
that do not require dynamic update capability do not need to meet
this dependency).
PTR records are not updated, since there is no guarantee that the IP
address being updated has an address in a zone handled by FreeIPA. If
this is a serious lack, it can be added in a later patch.
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
13 years, 10 months
[PATCH] Use service discovery in backends (sssd 1.2)
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This is a rebased version of the patch that applies on top of the recent
changes that went into 1.2.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkva+nYACgkQHsardTLnvCU0mwCeI3089fLmEpEiMyJ33MFSY/uA
+d4AoKW2vzUrQmu/ZVZOddLrCWSXKjJH
=/zHm
-----END PGP SIGNATURE-----
13 years, 10 months
[PATCH] Add callback when the ID provider switches from offline to online
by Stephen Gallagher
Allow backends to set a callback in the be_ctx that should be
invoked when the ID provider goes online.
This can be used to perform regular maintenance tasks that are
valid only when going online.
Specifically, we can use this to perform a deferred kinit on behalf of
the user when we go online. We can also use this to trigger a dynamic
DNS update for the IPA provider.
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
13 years, 10 months
[PATCH] Add more warnings about nearly expired passwords
by Sumit Bose
Hi,
this patch is (hopefully) the final patch in a series of patches to fix
#420 '[RFE] Password Expiration Notification'. The other patch in this
series are:
- 'Improvements for LDAP Password Policy support' which is already
commited and handles the case of LDAP server password policies
- 'Handle Krb5 password expiration warning' which handles the warning
for the Kerberos provider
bye,
Sumit
13 years, 10 months
[PATCH] Add support for delayed kinit if offline (sssd-1-2 only)
by Sumit Bose
Hi,
this patch should fix #305 'The kerberos provider should automatically
kinit users when it goes online'.
This patch depends on:
- 'Split pam_data utilities into a separate file'
- 'Add callback when the ID provider switches from offline to online'
This version only applies to sssd-1-2, I will rebase/rewrite it for
master later.
bye,
Sumit
13 years, 10 months