sssd-devel August 2010

sssd-devel@lists.fedorahosted.org

17 participants
48 discussions

[PATCH] Save all data to sysdb in one transaction
by Sumit Bose 23 Sep '10

23 Sep '10

Hi, this patch for master saves all IPA HBAC data in one transaction and proceeds if the sysdb transaction fails. It addresses a review comment from the "Use new schema for HBAC service checks" patch. The first patch changes the handling of the host data to be compatible with the other data. The second removes the individual transactions and introduces a common sysdb transaction. Do we want/need a similar patch for master, too? bye, Sumit

3 9

[PATCH] Check for controls before using them
by Simo Sorce 15 Sep '10

15 Sep '10

Some time ago I added code to fetch the rootdse on connection, but didn't publicize it too much. Attached find 2 patches. 1) Rework the way we store data fetched from the rootdse so the it is more useful and is actually attached to the ldap handle. 2) Check controls are supported before using them. Simo. -- Simo Sorce * Red Hat, Inc * New York

4 10

[PATCH] Support password obfuscation in sssd.conf
by Jakub Hrozek 08 Sep '10

08 Sep '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [PATCH 1/7] Move crypto functions into its own subdir A refactoring patch that creates a common util/crypto subdir with per-implementation subdirectories for each underlying crypto library supported by SSSD. [PATCH 2/7] Add safe copy/move macros for uint16_t These will be used later on in the code [PATCH 3/7] Password obfuscation utility functions This is where the actual obfuscation happens. Adds two utility functions - one to obfuscate a password and inverse to extract the cleartext password back. So far, only NSS-based implementation is provided. [PATCH 4/7] Fix pysss linking I noticed that the python bindings were not properly linked so a simple import pysss failed [PATCH 5/7] Python bindings for obfuscation Provides python bindings for utility functions from patch 3/7. These will be used later on in the obfuscation tool itself. [PATCH 6/7] sss_obfuscate tool A tool to add obfuscated passwords into the SSSD config file [PATCH 7/7] Deobfuscate password in back ends When obfuscated password is used in config file, the LDAP backend converts it back to clear text and uses it to authenticate to the server. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkx7+oUACgkQHsardTLnvCV+2QCg0TXyStJUpcOA3BaDFeZBwCst CVYAoKpvZPmEviGTNQeIcUYuTOw4mdFr =TFuL -----END PGP SIGNATURE-----

3 13

[PATCH] Minor fixes in various places
by Jan Zelený 07 Sep '10

07 Sep '10

I'm attaching some patches fixing various minor issues found by clang: 0001-Initialized-return-value-in-dp_copy_options.patch Ticket: #577 0002-Fixed-potential-comparison-of-undefined-variable.patch Ticket: #578 0003-Fixed-printing-of-undefined-value-in-sdap_async_acco.patch Ticket: #579 0004-Fixed-uninialized-value-in-proxy_id-provider.patch Ticket: #580 0005-Deleted-some-needless-assignments.patch Ticket: #582 -- Jan

3 15

[PATCH] Reviewed sssd-ldap man page
by Jan Zelený 07 Sep '10

07 Sep '10

So I've finished sssd-ldap man page review. The attached patch reflects all changes previously discussed here. -- Jan

3 8

[PATCH] Fix chpass operations with LDAP provider
by Stephen Gallagher 02 Sep '10

02 Sep '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The initial verification of the old password was returning an error because we were not explicitly setting dp_err to DP_ERR_SUCCESS and it was initialized earlier in the function to DP_ERR_FATAL. Pushing this to master and sssd-1-2 under the one-liner rule. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkxZs3IACgkQeiVVYja6o6NkbwCgqU/UMujaWD5jtXVelvgKeB5w 5IcAnjnB7wMJFwe7mZyeKrgRRjAYhtkl =KZf0 -----END PGP SIGNATURE-----

3 7

[PATCH] Package systemd unit file
by Jakub Hrozek 02 Sep '10

02 Sep '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 So far, the systemd unit file is only packaged but not used in any of the packaged spec files. Fixes: #584 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkx9PSkACgkQHsardTLnvCUXpACeJQFNIC7sa4SNchbVoOM67dic XgsAoLVIIARh75bfWkV4SzO6ZYRu5B+u =QD4y -----END PGP SIGNATURE-----

2 4

[PATCH] Fix wrong return value in HBAC time rules evaluation
by Jakub Hrozek 02 Sep '10

02 Sep '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Fixes: #584 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkx7+rUACgkQHsardTLnvCVy9wCgmaYSrZKlX1AUWO/dPZPMObmD Po4AoKtxC94IP5kY8ti4G7awjd9OkTZo =Bc1W -----END PGP SIGNATURE-----

2 2

[PATCH] Make ldap bind asynchronous
by Martin Nagy 02 Sep '10

02 Sep '10

Hi, this is (hopefully) my last stab at asynchronous ldap bind. I have tested it on fedora and it seems to work pretty ok, but I haven't tried it yet with an older openldap where the asynchronous connections aren't supported. Martin

4 11

[Transifex] File submitted via email to SSSD | Stable Branch (1.2.x)
by admin＠transifex.net 02 Sep '10

02 Sep '10

Hello sssd, this is Transifex at http://www.transifex.net. The following attached files were submitted to SSSD | Stable Branch (1.2.x) by logan <logan(a)fedoraproject.org> Please, visit Transifex at http://www.transifex.net/projects/p/sssd/c/stable12/ in order to see the component page. Thank you, Transifex

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel August 2010