attached are some small patches and most importantly unit tests I wrote
recently when patching the child_common.c module.
Please note that these patches shouldn't be applied until we split off
the master branch from 1.12, but if I don't send them out before the
Christmas break I'll forget completely :-)
this patch set contains some improvements for the view related code on
IPA client. Most of them are performance related, patches 4,5 and 6 make
sure that during group requests all members are properly resovled if a
non-default view is applied to be able to handle user name overrides.
these two patches add a missing part to
https://fedorahosted.org/sssd/ticket/2481 (ID Views implementation does
not support IPA user&group overrides). Since it is not allowed to have
ghost members if a non-default view is applied because otherwise user
name overrides would not be covered ghosts members have to be resolved
for IPA groups in this case. The changes are only in the IPA provider so
they should not cause a regression in other providers. Since the generic
LDAP code use some IPA specific optimizations (derives user name from
the user's DN to avoid LDAP lookups) there wouldn't be a performance
benefit if this change would be in the generic LDAP code.
for past few days, I've been working on python3-compat patch for sssd. The patch  is attached to the issue that requests this feature .
- The patch tries to maintain backward compatibility for Python 2.6 and 2.7 - I admit I only tested 2.7 so far, but it seemed to work ok.
- I didn't yet solve the build part - for now, I just handedit configure.ac to set "PYTHON=python3" and src/external/python.m4 to set "AC_PATH_PROG(PYTHON, python3)" and compile with that.
- I managed to run Python tests in src/tests except python-test.py itself (it says "OSError: [Errno 5] Could not initialize connection to the confdb" and I didn't yet investigate why that happens).
- To run tests, one must modify the hashbangs to /usr/bin/python3 (I now see that I left one of these in the actual patch, so please disregard that).
I'd like to ask you, sssd devels, to give me some comments on the patch (or ask questions) and if you have some time to spare, doing more extensive testing would also be very welcome.
Bohuslav "Slavek" Kabrda.
While checking if our custom signal handlers properly handle errno, I
stumbled on a few cleanups, they are attached.
turns out our few signal hanlders are errno safe, and tevent signal
handling function is also fine.
Simo Sorce * Red Hat, Inc * New York
this patch set is based on Jakub's original code. The goal was to reduce
code duplication among responders - the part that iterates over domains
and performs a cache lookup and data provider communication if object is
The first three patches are preparation for unit tests to allow testing
with multi domain environment. The forth patch is the new interface. The
fifth patch enables views with this interface - I made it a separate
commit so the changes can be more easily spotted.
And finally the last patch make IFP to use this new interface. Only IFP
uses it at the moment so we can find potential bugs without hitting NSS
and other responders.