I hope this is the right list...
by Vic Watson
Hi All.
I couldn't find a "sssd_users" or "sssd_help" list; I hope this is the right place to ask questions...
I'm trying to "daisy-chain" some sssd installations. I've got a core server that authenticates against the corporate LDAP server. That works nicely.
I've got another bunch of servers that need the same authentication - unfortunately, they aren't going to be routable for very long; they'll only be able to see the core server, so I can't just copy the sssd.conf over from the working box.
Is there a cunning way to get the peripheral boxen to authenticate against the sssd daemon on the core server?
Thanks!
Vic.
13 years, 1 month
[PATCH] Fix LDAP search filter for nested initgroups
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The closing parenthesis was missing
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk1/a0wACgkQHsardTLnvCWegQCg6SqtJc7O8j3EC9wpnVxOyDLE
/IYAoIij+mkQECjvLnk0YyTi2xuZSZkQ
=ItVq
-----END PGP SIGNATURE-----
13 years, 1 month
[PATCH] Skip groups with multiple names
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
It is impossible to predict which name to use for a group if the
attribute used for name contains multiple values. We will log and
skip over these groups
Fixes https://fedorahosted.org/sssd/ticket/823
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk1+VZkACgkQeiVVYja6o6PVVQCfRLTTWephEUGOYZA5xyrJdcCu
5tIAmQHZb6yj0YSIluTMqtmIMVxpe3MX
=Pjxm
-----END PGP SIGNATURE-----
13 years, 1 month
[PATCH] Require existence of GID number in group searches
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This is most commonly seen with ActiveDirectory?. The 'group'
objectClass does not have a mandatory GID attribute, and SSSD was
throwing errors when trying to process groups without them (which is
necessary for use on a POSIX system).
This patch updates the group filters so that we include "gidNumber=*" to
filter out groups that are missing this information.
Fixes https://fedorahosted.org/sssd/ticket/824
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk15//kACgkQeiVVYja6o6OdoACfTUIU7ChLXucGywtCAM1LCQMd
xpAAoKiigXs0U56+R9VryqBGfTsT7Pbq
=h0WR
-----END PGP SIGNATURE-----
13 years, 1 month
[PATCH] Fix one unlikely case of failure in sdap_id_op module
by Jan Zelený
There can be an unlikely scenario when the first part of
sdap_id_op_connect_done works fine and there is no need to mark backend
offline. But right after the check, the memory allocation can fail in
which case the backend needs to be marked offline along with disabled
reconnecting.
--
Thank you
Jan Zeleny
Red Hat Software Engineer
Brno, Czech Republic
13 years, 1 month
Announcing SSSD 1.5.3
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hot on the heels of SSSD 1.5.2, released yesterday, we bring you SSSD
1.5.3. There are no functional changes in this release, but there are
several build-system fixes and improvements that will make life easier
for packagers.
== Highlights ==
* Support for libldb >= 1.0.0
* Proper detection of manpage translations
* Better support for building RPMs for RHEL5 (and other systems with
old autotools)
== Detailed Changelog ==
Stephen Gallagher (5):
* Update version to 1.5.3
* Fix module registration with newer LDB libraries.
* Minor specfile changes
* Detect the proper location for memberof.so
* Fix specfile for RHEL5
Sumit Bose (4):
* Fix handling of translated man pages in spec file
* Make 'make check' look nice again
* Introduce sysdb_ldb_connect()
* Check LDB_MODULES_PATH for sysdb
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk16VyQACgkQeiVVYja6o6PbGwCgihvT64oxiBFOP94gVN92nOJ6
tmkAoKz8Y+JheUJ4D5rbmZuSPtet2eDK
=acr1
-----END PGP SIGNATURE-----
13 years, 1 month
[PATCHES] Fixes for the build-system for 1.5.x
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I realized today that 1.5.2 did not get backports of a couple important
build-system changes.
1) Support for libldb >= 1.0.0
2) Proper detection of manpage translations
3) Better support for building RPMs for RHEL5 (and other systems with
old autotools)
These are all trivial merges of patches from master, so I'm just looking
for a quick ack, after which I will release 1.5.3.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk16UGoACgkQeiVVYja6o6OQswCgirmlJJywHWk2FDUEkpHX469t
16EAniEjK1ZaXAzDAq22Lr/s9sHCf9QU
=t2wL
-----END PGP SIGNATURE-----
13 years, 1 month