[PATCH] Save all data to sysdb in one transaction
by Sumit Bose
Hi,
this patch for master saves all IPA HBAC data in one transaction and
proceeds if the sysdb transaction fails. It addresses a review comment
from the "Use new schema for HBAC service checks" patch.
The first patch changes the handling of the host data to be compatible
with the other data. The second removes the individual transactions and
introduces a common sysdb transaction.
Do we want/need a similar patch for master, too?
bye,
Sumit
13 years
[PATCH] Check for controls before using them
by Simo Sorce
Some time ago I added code to fetch the rootdse on connection, but
didn't publicize it too much.
Attached find 2 patches.
1) Rework the way we store data fetched from the rootdse so the it is
more useful and is actually attached to the ldap handle.
2) Check controls are supported before using them.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
13 years
[PATCH] Support password obfuscation in sssd.conf
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[PATCH 1/7] Move crypto functions into its own subdir
A refactoring patch that creates a common util/crypto subdir with
per-implementation subdirectories for each underlying crypto library
supported by SSSD.
[PATCH 2/7] Add safe copy/move macros for uint16_t
These will be used later on in the code
[PATCH 3/7] Password obfuscation utility functions
This is where the actual obfuscation happens.
Adds two utility functions - one to obfuscate a password and inverse to
extract the cleartext password back. So far, only NSS-based
implementation is provided.
[PATCH 4/7] Fix pysss linking
I noticed that the python bindings were not properly linked so a simple
import pysss failed
[PATCH 5/7] Python bindings for obfuscation
Provides python bindings for utility functions from patch 3/7. These
will be used later on in the obfuscation tool itself.
[PATCH 6/7] sss_obfuscate tool
A tool to add obfuscated passwords into the SSSD config file
[PATCH 7/7] Deobfuscate password in back ends
When obfuscated password is used in config file, the LDAP backend
converts it back to clear text and uses it to authenticate to the
server.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkx7+oUACgkQHsardTLnvCV+2QCg0TXyStJUpcOA3BaDFeZBwCst
CVYAoKpvZPmEviGTNQeIcUYuTOw4mdFr
=TFuL
-----END PGP SIGNATURE-----
13 years
[PATCH] Minor fixes in various places
by Jan Zelený
I'm attaching some patches fixing various minor issues found by clang:
0001-Initialized-return-value-in-dp_copy_options.patch
Ticket: #577
0002-Fixed-potential-comparison-of-undefined-variable.patch
Ticket: #578
0003-Fixed-printing-of-undefined-value-in-sdap_async_acco.patch
Ticket: #579
0004-Fixed-uninialized-value-in-proxy_id-provider.patch
Ticket: #580
0005-Deleted-some-needless-assignments.patch
Ticket: #582
--
Jan
13 years
[PATCH] Fix chpass operations with LDAP provider
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The initial verification of the old password was returning an
error because we were not explicitly setting dp_err to
DP_ERR_SUCCESS and it was initialized earlier in the function to
DP_ERR_FATAL.
Pushing this to master and sssd-1-2 under the one-liner rule.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkxZs3IACgkQeiVVYja6o6NkbwCgqU/UMujaWD5jtXVelvgKeB5w
5IcAnjnB7wMJFwe7mZyeKrgRRjAYhtkl
=KZf0
-----END PGP SIGNATURE-----
13 years
[PATCH] Package systemd unit file
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
So far, the systemd unit file is only packaged but not used in any of
the packaged spec files.
Fixes: #584
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkx9PSkACgkQHsardTLnvCUXpACeJQFNIC7sa4SNchbVoOM67dic
XgsAoLVIIARh75bfWkV4SzO6ZYRu5B+u
=QD4y
-----END PGP SIGNATURE-----
13 years
[PATCH] Make ldap bind asynchronous
by Martin Nagy
Hi,
this is (hopefully) my last stab at asynchronous ldap bind. I have
tested it on fedora and it seems to work pretty ok, but I haven't tried
it yet with an older openldap where the asynchronous connections aren't
supported.
Martin
13 years