[PATCHES] simple access provider: support subdomain users and groups
by Pavel Březina
Patch 0001:
I haven't used this one after all, but I still think it is nice to have.
It reduces amount of code duplication.
Patch 0005:
> + /* Try to get group SID and assign it a domain */
> + group_sid = ldb_msg_find_attr_as_string(group, SYSDB_SID_STR, NULL);
> + if (group_sid == NULL) {
I'm not sure if this branch isn't a dead code, but I kept it there
because it mimics current behaviour.
> + /* We will look it up in main domain. */
> + domain = state->ctx->domain;
> + } else {
> + domain = find_subdomain_by_sid(state->ctx->domain, group_sid);
> + if (domain == NULL) {
> + DEBUG(SSSDBG_CRIT_FAILURE, ("There is no domain information for "
> + "SID %s\n", group_sid));
> + return ENOENT;
> + }
> + }
10 years, 7 months
[PATCHES] Fix warnings
by Lukas Slebodnik
ehlo,
I tested some patches with old distro and I spotted warnings.
-- uninitialized variable (gcc 4.4.7)
-- macro AM_PROG_AR not found in library (automake 1.11.1)
I checked them and all warnings should be harmless, but anyway we don't like
warnings.
Two patches are attached.
LS
10 years, 7 months
[PATCH] Use systemd-login session information to check if user is logged in
by Simo Sorce
This patch was meant to remove the trolling of /proc for uids but I
haven't got there yet.
I meant to use utmp as a fallback but I realized utmp does not deal with
uid numbers rather usernames, and I need to think if it makes sense to
go that way as it may be hairy when we use subdomains as now I need to
know what kind of user name was used (fully qualified or not etcc.).
So for now I left the old code as a fallback in case systemd is not
available or fails unexpectedly.
Ticket: #2084
Simo.
--
Simo Sorce * Red Hat, Inc * New York
10 years, 7 months
setautomntenta autofs file not found
by steve
Hi
Problems with autofs on a 1.11.1 git:
The only error I can see is this:
2013-09-13T01:47:34.264459+02:00 catral automount[2569]: setautomntent:
lookup(sss): setautomntent: No such file or directory
and nothing gets mounted.
sssd starts fine. Here is the conf:
[sssd]
#debug_level = 6
services = nss, pam, autofs
config_file_version = 2
domains = default
[nss]
[pam]
[autofs]
[domain/default]
#debug_level=6
dyndns_update=true
#dyndns_refresh_interval=16
ad_hostname = catral.hh3.site
ad_server = hh16.hh3.site
ad_domain = hh3.site
ldap_schema = ad
id_provider = ad
access_provider = simple
enumerate = false
cache_credentials = true
#entry_cache_timeout = 60
auth_provider = krb5
chpass_provider = krb5
krb5_realm = HH3.SITE
krb5_server = hh16.hh3.site
krb5_kpasswd = hh16.hh3.site
ldap_id_mapping=false
ldap_referrals = false
ldap_uri = ldap://hh16.hh3.site
ldap_search_base = dc=hh3,dc=site
#ldap_tls_cacertdir = /usr/local/samba/private/tls
#ldap_id_use_start_tls = true
#entry_negative_timeout = 1
ldap_user_object_class = user
ldap_user_name = samAccountName
ldap_user_uid_number = uidNumber
ldap_user_gid_number = gidNumber
ldap_user_home_directory = unixHomeDirectory
ldap_user_shell = loginShell
ldap_group_object_class = group
ldap_group_search_base = dc=hh3,dc=site
ldap_group_name = cn
ldap_group_member = member
#ldap_default_bind_dn = cn=steve2,cn=Users,dc=dolores,dc=site
#ldap_default_authtok_type = password
#ldap_default_authtok = s2
ldap_sasl_mech = gssapi
ldap_sasl_authid = CATRAL$(a)HH3.SITE
#krb5_keytab = /etc/krb5.keytab
ldap_krb5_init_creds = true
autofs_provider=ldap
ldap_autofs_search_base = DC=hh3,DC=site
ldap_autofs_map_object_class = nisMap
ldap_autofs_entry_object_class = nisObject
ldap_autofs_map_name = nisMapName
ldap_autofs_entry_key = cn
ldap_autofs_entry_value = nisMapEntry
10 years, 7 months