[PATCH] Couple bugfixing patches
by Jan Zelený
Hi,
I'm sending couple patches fixing bugs I found in the code today:
jzeleny-020-fixed-debug-to-files.patch
This error caused that monitor didn't pass --debug-to-files option to
nss and pam services when creating them.
jzeleny-021-fixed-wrong-variable.patch
Current solution doesn't make any sense to me, I believe the original
intention was as my patch suggests even though the line can be dropped
entirely.
Jan
12 years, 11 months
SSSD - Configuration w/ 2008 R2
by Ben Kevan
I'm wondering what the heck I'm doing wrong. I'm working on getting SSSD +
KRB5 working against 2008 R2 AD. It's working fine in RHEL5 w/ the standard
LDAP.conf configuration. I'm working on sssd, but am not getting a binddn
connection to AD. Here's my config:
grep -vE '^#|^$' /etc/sssd/sssd.conf
[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = default
[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3
[pam]
reconnection_retries = 3
[domain/default]
description = LDAP domain with AD server
enumerate = false
id_provider = ldap
chpass_provider = krb5
ldap_uri = ldap://usherdc103.domain.com ldap://usherdc104.domain.com
ldap_search_base = DC=Domain,DC=com
ldap_tls_cacertdir = /etc/openldap/cacerts
ldap_default_bind_dn = ldapbinddn(a)DOMAIN.COM
ldap_default_authtok_type = password
ldap_default_authtok = YAYYOUGOTME
ldap_pwd_policy = none
ldap_user_object_class = user
ldap_group_object_class = group
cache_credentials = True
krb5_realm = DOMAIN.COM
krb5_kdcip = usherdc103.domain.com,usherdc104.domain.com
krb5_chanegpw_principle = kadmin/changepw
wtf am I doing wrong, and is ldap for authentication better then krb5? or
should I stick with ldap for authorization and krb5 for authentication?
Thank you.
12 years, 11 months
[PATCH] Add support for openldap24 package on RHEL 5.7
by Sumit Bose
Hi,
this is a revised version of Stephen patch to support the openldap24
package on RHEL 5.7. I have moved the code to find the right include and
library path into ldap.m4 and added a check in the spec file if the
platform is RHEL 5.7 to allow the spec file to be used on older RHEL5
versions, too. This test is quite simple, but I think we can take care
of RHEL 5.10 and later version if they are available.
bye,
Sumit
12 years, 11 months
[PATCHES] Allow changing log-level without restarting SSSD
by Stephen Gallagher
These patches are dependent on the patch provided in my earlier email
"Override config file debug_level with command-line"
Patch 0002: Create common sss_monitor_init()
This was implemented almost identically for both the responders
and the providers. It is easier to maintain as a single routine.
This patch also adds the ability to provide a private context to
attach to the sbus_connection for later use.
Patch 0003: Allow changing the log level without restart
We will now re-read the confdb debug_level value when processing
the monitor_common_logrotate() function, which occurs when the
monitor receives a SIGHUP.
For now, this can be tested by using ldbedit
on /var/lib/sss/db/confdb.ldb to change the debug_level values and then
send 'kill -HUP $(pidof sssd)'. In the future, I will write a
command-line tool to effect this change more easily.
12 years, 11 months
Call graph of sdap_async_accounts
by Jan Zelený
Since sdap_async_accounts.c is becoming a great monstrosity, I've created a
call graph of functions defined in there. The graph shows where in the file is
each function defined there called and it already takes Jakub's last big set of
patches into account. I'm also sending the source .dot file in case anyone
wants to extend it in the future.
I hope it will be useful to more people than just me.
Thanks
Jan
12 years, 11 months