the support of IPA sudo schema is almost complete. The only thing that
remains is to finish smart refresh implementation and one patch to
reduce code duplication between LDAP and IPA implementation. Then I need
to run some tests but I don't expect much troubles here since I tested
it a lot during development. I'll finish all of this after my Christmas
The patches are probably too big to be sent as an attachment, so until I
complete the last two patches, you can check it on my git repo, branch
sudo . I don't really expect anyone to review them during Christmas
break, but I thought it's a good thing to present if in case someone
will get really bored from all the candies and family visits :-)
see attached simple patch for ticket:
The first patch is for master and 1.13
the second for 1.12.
It seems like the decision to ignore cache
validity when background refresh is enabled
was not a good one and it was not possible
to fetch new netgroup entry even if the
old was invalidated with sss_cache.
The attached patches implement a service watchdog based on timers and a
custom SIGRT signal (of which there are 30/32 available to use) and
removes the ping based solution.
In case a child gets stuck in a tevent loop the timer will eventually
kill it (in 30 sec. by default) and the monitor will catch the child has
terminated (via SGICHLD) and restart it. This makes the ping based
infrastructure obsolet so the monitor now stops setting it up.
In order to avoid changes to the dbus interface the ping method is still
in places for responders/providers, but simply never invoked.
Simo Sorce * Red Hat, Inc * New York
I'm CCing Stephen as he is original author of the code.
Without this patch I am not able to work with AD when
ldap_referrals=true, with this patch it works. I'm not sure though if it
is a correct fix or if we can find a better one.
As the removed comment says the referrals should be processed by
openldap so why aren't they?