[PATCH] Allow more libldap debugging
by Jakub Hrozek
This patch should not be pushed to master, but I would like to get it
reviewed anyway.
It should be used to provide a custom build for users experiencing cases
where ldap_search_ext would block (c.f.
https://bugzilla.redhat.com/show_bug.cgi?id=728343)
For example:
export SSSD_DEBUG_LDAP_SEARCH="0xffff"
would set LDAP_DEBUG_ANY
The attached patch applies cleanly on the RHEL6.1 branch. I also have a
version that applies on master/1.5 if needed.
11 years
[INI] Assorted patches for ding-libs
by Dmitri Pal
Hello,
Here is a bunch of patches for review:
Patch 1:
The unit test was not correct. The paths to files used in the unit test
were wrong. It used function exec instead of system which is bad too.
It was hard to see what is going on so some more verbose output added.
The config files are now copied our of the ini.d directory. The
permission test is adjusted.
Patch 2:
Can be squashed into previous one but I decided against it as it is a
change in configure.am not in code.
Patch 1 does all the copying of the files used in the unit test so there
is no need to copy file at the configure stage.
Patch 3:
Couple convenience functions for the value object that turned out to be
missing
Patches 4-10 (big!!!):
Definition, implementation, unit tests and docs for the new INI
interface that uses value object instead of the bare strings.
There is a lot of code there but it is mostly inspired by existing
interface. It exists in parallel for the backward compatibility.
Old inteface is still built, just not advertised via the docs. It needs
couple more layers of polish before it can be called complete.
The new interface is mostly a copy of the old interface so no big
logical differences other than ability to have keys with multiple values
in the same file.
For example there is now a way to deal with case like this:
file=x1
file=x2
file=x3
and get all the values for key "file" one at a time.
Plans for the near future:
1) Finish the section merge - it is not complete but when it is this
interface will be completely functional. The goal to that during August.
2) Provide a patch for SSSD to switch to the new interface - for August too.
This is the moment when we can call it v1.
Longer term plans:
1) Add functions to create config file to the interface. Currently it is
a the processing/parsing part, but you can't easily construct the
configuration file, only read it.
2) Add validation as it was originally planned.
I will try to find the victim to do the long term changes as I do not
scale for this any more.
--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
11 years, 1 month
[PATCH] Make TTL configurable for dynamic dns
by James Hogarth
Hi all,
Following the discussion previously for #1476 attached is a patch to
current master that does the following:
1) If there is no value in sssd.conf it assumes a default of 1200 to
fall in line with the current IPA code
2) Adds a new option to sssd.conf - ipa_dyndns_ttl - which is an
integer in seconds for the TTL of the record
I've tested this on F17 with nothing set and with a few different
integers set and verified on IPA (via ipa dnsrecord-show --all) that
the TTL has been set correctly.
Comments would be most welcome :)
Kind regards,
James
11 years, 1 month
[PATCHES] SSH: Expire hosts in known_hosts
by Jan Cholasta
Hi,
this patch set changes the way the known_hosts file is updated so that
only entries for hosts that were requested recently (in the last 5
minutes) are written to the file. There is no need to keep older entries
in the file, as host keys are needed only before the connection to the
host is established (which usually takes just a few seconds).
The individual patches are:
[PATCH 1/3] DB: Add function for deleting values from sysdb_attrs
[PATCH 2/3] SSH: Refactor sysdb code
[PATCH 3/3] SSH: Expire hosts in known_hosts
Honza
--
Jan Cholasta
11 years, 2 months