[PATCH] AD: use GC for SID requests as well
by Sumit Bose
Hi,
another issue found by Steeve during testing. To reproduce this you need
a universal group with members from different domains. Then either look
up the group by SID e.g. with
python -c "import pysss_nss_idmap; print pysss_nss_idmap.getnamebysid('S-1-5-21-3456664713-2053453454-4165325232-1234')"
and then with getent group groupname.
Or use IPA views, override the group name in the 'default trust view'
on the IPA server and look up the group by the overridden name. In both
case the group should not already be in the cache. Only members from the
domain of the group should be show without the patch.
bye,
Sumit
9 years, 1 month
[PATCH] fill_id() fix LE/BE issue with wrong data type
by Sumit Bose
Hi,
we try to squeeze a 64bit type into a 32bit one which kind of works on
little-endian because we checked that the value is not larger then
UINT32_MAX before but fails on big-endian. This patch tries to fix it.
bye,
Sumit
9 years, 1 month
[PATCH 2/2] test_nested_groups: Additional unit tests
by Lukas Slebodnik
ehlo,
attached patch is unit test for ticket #2351.
* apply patches with unit tests.
* revert fix for #2351 (0d47aef7577f8cf651255cf59df87b3847dbe1ad )
- fix conflict in debug message.
* run ./nestedgroups-tests
-result: crash
LS
9 years, 1 month
[PATCH] pysss: Fix double free
by Lukas Slebodnik
ehlo,
the patch for ticket "functions with reference leaks within sssd"
#1195 was not tested proerly and double free was introduced.
Simple patch is attached.
LS
9 years, 1 month
[PATCH] PROXY: Fix use after free
by Lukas Slebodnik
ehlo,
The dbus_req and associated talloc context are no longer valid after
execution of the function sbus_request_return_and_finish even if error code
was returned.
Simple patch is attached.
LS
9 years, 1 month
Design Discussion: Domains, users and groups over D-Bus
by Pavel Březina
https://fedorahosted.org/sssd/wiki/DesignDocs/DBusResponder
Hi,
I have take the following tikcet that is about implementing D-Bus calls
for domains, users and groups. I have some questions.
https://fedorahosted.org/sssd/ticket/2150
*List and Find methods interface*
At this moment we implement all List* and Find* methods on
/org/freedesktop/sssd/infopipe and org.freedesktop.sssd.infopipe interface.
The patches I sent today enables having support for different interfaces
on /path and /path/*, therefore we can implement the methods as:
/infopipe/Users infopipe.Users.ListUsers()
/infopipe/Users/$UID user specific methods and properties
instead of:
/infopipe infopipe.ListUsers()
/infopipe/Users/$UID user specific methods and properties
I think it make sense. Is this something we want?
*Domains*
The interface from the design page is already implemented. Is there any
method or property that is missing?
*Users*
Do we want also to have methods ListDomainUsers() and ListUsers()
without the name filter?
Do we want some other filter options as well?
Should extraAttributes be present in Properties.GetAll() output?
What is UpdateGroupList() supposed to do?
Property groups - do we really want to return list of object paths
instead of pure group names? I think that more common use case will want
only the names. Or we can even implement both.
*Groups*
Basically the same questions and per Users.
9 years, 1 month