IPA client randomly lose memory of users
by Qing Chang
my dovecot IMAP server would randomly lose memory of users, as an example:
Samba/NFS server knows this user:
[root@smb2 shassan]# getent passwd bqiang
bqiang:*:47105:471:Beiping Qiang:/home2/bqiang:/bin/tcsh
But dovecot server does not:
[root@dovecot2 ~]# getent passwd bqiang
Only when I apply this:
[root@dovecot2 ~]# \rm /var/lib/sss/db/cache_sri.utoronto.ca.ldb
[root@dovecot2 ~]# service sssd restart
It gets it:
[root@dovecot2 ~]# getent passwd bqiang
bqiang:*:47105:471:Beiping Qiang:/home2/bqiang:/bin/tcsh
So far I have to deal with this for three users. It's quite possible
that there are more than 3 that are affected, they were just patient
enough to wait until dovecot "recovers its memory".
=====
sssd.x86_64 1.8.0-32.el6 @rhel-x86_64-server-6
sssd-client.x86_64 1.8.0-32.el6 @rhel-x86_64-server-6
=====
Your help is much appreciated.
Thanks,
Qing
--
------------------
Qing Chang
Senior Systems Administrator
M6-624 Research Computing
Sunnybrook Health Sciences Centre
2075 Bayview Ave.
Toronto, Ontario, M4N 3M5
(416) 480-6100 x3263
qchang(a)sri.utoronto.ca
------------------
11 years, 3 months
[PATCH] MEMBEROF: Implement delete operation for ghost users
by Jakub Hrozek
https://fedorahosted.org/sssd/ticket/1668
The memberof plugin did only expand the ghost users attribute to
parents when adding a nested group, but didn't implement the reverse
operation.
This bug resulted in users being reported as group members even
after the direct parent went away as the expanded ghost attributes were
never removed from the parent entry.
There seems to be a lot of similarlity between memberuid and ghost
attributes in the memberof plugin. Maybe the code would benefit from
soem more generic functions? But given the time contrainst, I would
prefer the refactoring to happend post-1.9.3.
11 years, 3 months
[PATCH 0/5] Rev 3: Fix various tevent_req style and naming issues
by Simo Sorce
This revision should address all concerns raised by Pavel for code that I
actually changed from the original. For patch 1 a calrification I can't
make was asked. I 'fixed' the code as I realized I copied a debug statement
wrapped in an if statement that wasn't in the original code I move around,
so I simply dropped it (the statement is still present but later on in another
part of the code, where it remains from the original code).
For patch for I completely changed approach and simplified the code even more by
removing the switch statement completely, Thanks Pavel, that code looks even
better to me now :)
Simo Sorce (5):
Fix tevent_req style for krb5_auth
Fix ipa_subdomain_id names and tevent_req style
Fix tevent_req style for get_netgroup in ipa_id
Streamline ipa_account_info handler
Use an entry type mask macro to filter entry types
src/providers/data_provider.h | 1 +
src/providers/ipa/ipa_id.c | 294 +++++++--------
src/providers/ipa/ipa_id.h | 10 +-
src/providers/ipa/ipa_subdomains_id.c | 75 ++---
src/providers/krb5/krb5_access.c | 6 +-
src/providers/krb5/krb5_auth.c | 683 ++++++++++++++++-----------------
src/providers/krb5/krb5_auth.h | 6 +-
src/providers/krb5/krb5_wait_queue.c | 12 +-
src/providers/ldap/ldap_id.c | 2 +-
src/providers/proxy/proxy_id.c | 2 +-
10 files changed, 505 insertions(+), 586 deletions(-)
11 years, 3 months
nss hosts and caching
by James Hogarth
Hi,
Going through the docs I'm not entirely clear whether SSSD should be
caching host lookups (if hosts has sss added in nsswitch.conf)
Should it cache like this (with negative cache timeouts etc via the
directives in [nss]) or should nscd be used alongside if host caching is
required?
Regards,
James
11 years, 3 months