SPEC: Use systemd macros
by Lukas Slebodnik
ehlo,
Similar patch is already in fedora
and was provided by systemd experts :-)
LS
8 years, 1 month
[PATCH] Abstract and improve connection credential handling
by Simo Sorce
I will needed selinux support later on in the secrets work, so I looked
into how we were getting peercreds and found it could be improved by
making it a little more abstract.
This patch also uncovered issues with header inclusion (patch sent
earlier).
(I did not open a bug for this one)
Simo.
--
Simo Sorce * Red Hat, Inc * New York
8 years, 1 month
[PATCH] SDAP_ASYNC: Avoid useless debug message
by Petr Cech
Hi all,
there is patch for https://fedorahosted.org/sssd/ticket/2791 attached.
Result of patch:
The message:
Dec 14 14:16:11 vm-058-166 sssd[be[uma.dev]]: dereference processing
failed : Input/output error
is replaced by
Dec 14 15:29:26 vm-058-166 sssd[be[uma.dev]]: LDAP server claims to
support deref, but deref search failed. Disabling deref for further
requests. You can permanently disable deref by setting
ldap_deref_threshold to 0 in domain configuration.
But I am little afraid of this patch. Why? I tested this work on RHEL 6
how it is described in the ticket.
If I tried to set
ldap_deref_threshold = 0
it was still falling into bad case and printed I/O error. So, if we
considered patch is right, there is question if advice in new message is
valid for IPA 3.x.
Regards
Petr
8 years, 1 month
[PATCH] Fix headers order
by Simo Sorce
Found this while working on another patch.
It is not evident by this patch alone but ... "trust me" :-)
(I'll send the other patch next, try to apply just that one and see what
I mean if you want)
Simo.
--
Simo Sorce * Red Hat, Inc * New York
8 years, 2 months
[PATCHES] AD: add task to renew the machine account password if needed
by Sumit Bose
Hi,
this patch adds a task to the AD provider which calls adcli on a regular
basis to update the machine account password if needed. adcli supports
this functionality since version 0.8.0. Adding support other utilities like
msktutil shouldn't be hard.
Since adcli (and other external tools) does not understand the SSSD
default options like --debug_level a change in exec_child_ex() was
needed which is covered in the first patch.
bye,
Sumit
8 years, 2 months
[PATCH] sdap_connect_send: fail if uri or sockaddr is NULL
by Pavel Březina
https://fedorahosted.org/sssd/ticket/2904
Unfortunately, I wasn't able to reproduce the issue and neither the
reporter can reproduce it anymore and we can't known exactly why we get
to situation when uri and sockaddr is NULL without the logs.
service->uri and service->sockaddr are assigned through failover
callback, see ad_resolve_callback for example, which is probably used in
the reporter's environment. My suspicion is that for some reason we
can't assign those attributes (which may happen for several reasons) but
since failover callback doesn't report any error failover actually
succeeds and we end up dereferencing NULL.
I don't think we can move any further without logs but this is at least
a hotfix that will prevent segfault.
8 years, 2 months