[PATCH] IPA: Removing of confusing debug message
by Petr Cech
Hello list,
there is simple patch for [1].
I prepared two version:
a) the first is for changing the message,
b) the second is for removing.
I looked at the code -- I think it could be useful to know what type of
direction we have. But I agree that it could be really confusing if we
see 'trust direction not set'.
So I vote for removing.
Please do you have any other opinion?
[1] https://fedorahosted.org/sssd/ticket/3090
Regards
--
Petr^4 Čech
7 years, 8 months
[PATCH] SYSDB: Sanitize dn in sysdb_get_user_members_recursively
by Lukas Slebodnik
ehlo,
attached two patches fix a crash in nss responder,
which was caused by recent Sumit's patches.
The 1st patch cannot be applied to master because
I plan do do some changes in ldap integration tests in different thread.
But the patch with test is attached. So there will not be a such regressions
in future
LS
7 years, 8 months
[PATCH] sssctl: Consistent commands naming
by Michal Židek
Hi,
this patches makes the sssctl commands more similar to
ipa tool commands. I also think this pattern makes it
easier to remember the commands.
Note that in the future, there will be more user-*
group-* and netgroup-* commands (like seed for user,
list of all etc.)
Comments are welcome.
Michal
7 years, 8 months
[PATCH] Change debug level of config error msgs
by Michal Židek
Hi,
I believe that this patch makes pinpointing
of config errors a little easier. Especially
when using sssctl tool that currently refuses
to start a command when there are syntax errors in
sssd.conf, but by default it does not print
problematic line number. Compare:
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Wed Jul 27 14:05:39:185114 2016) [sssd] [sss_ini_get_config] (0x0010):
Failed to parse configuration. Error 5.
(Wed Jul 27 14:05:39:185192 2016) [sssd] [sss_ini_get_config] (0x0010):
Errors detected while parsing: /etc/sssd/sssd.conf
(Wed Jul 27 14:05:39:185229 2016) [sssd] [confdb_init_db] (0x0010):
Failed to load configuration
(Wed Jul 27 14:05:39:185255 2016) [sssd] [confdb_setup] (0x0010): ConfDB
initialization has failed [5]: Input/output error
(Wed Jul 27 14:05:39:185288 2016) [sssd] [sss_tool_confdb_init]
(0x0010): Unable to setup ConfDB [5]: Input/output error
and:
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
(Wed Jul 27 14:22:51:096949 2016) [sssd] [sss_ini_get_config] (0x0010):
Failed to parse configuration. Error 5.
(Wed Jul 27 14:22:51:097173 2016) [sssd] [sss_ini_get_config] (0x0010):
Errors detected while parsing: /etc/sssd/sssd.conf
(Wed Jul 27 14:22:51:097490 2016) [sssd] [sss_ini_config_print_errors]
(0x0010): Error (2) on line 10: No closing bracket.
(Wed Jul 27 14:22:51:097946 2016) [sssd] [confdb_init_db] (0x0010):
Failed to load configuration
(Wed Jul 27 14:22:51:098452 2016) [sssd] [confdb_setup] (0x0010): ConfDB
initialization has failed [5]: Input/output error
(Wed Jul 27 14:22:51:098651 2016) [sssd] [sss_tool_confdb_init]
(0x0010): Unable to setup ConfDB [5]: Input/output error
Patch is attached.
Michal
7 years, 8 months
[PATCH] config: Some fixes to schema
by Michal Židek
Hi,
attached is patch for ticket
https://fedorahosted.org/sssd/ticket/3068
The ticket also talks about allowing options
for negative cache timeouts in all responders,
but I did not do that.
We do indeed initialize negative cache in all
responders, but we always read the timeouts
from NSS section. Also in the man pages, we only
document these options for NSS. So it is not
problem with the schema. I do agree that this is
not ideal, but should we fix it? I do not
think it is worth the time, but if someone thinks
otherwise, please open a ticket.
Michal
7 years, 8 months
[PATCHES] AD: netlogon_get_domain_info() allow missing arguments
by Sumit Bose
Hi,
it is possible that the CLAP/netlogon reply does not contain any site
data. In this case we should not fail but just use what we can get.
Especially when looking up the Global Catalog the forest name is needed.
If the site name is missing we still can use the forest name to lookup
the Global Catalog in DNS.
The first patch is not strictly related to the issue but since it fixes
a potential memory leak (we currently do not have it because only
short-lived memory contexts are used so far) I think it is worth adding
it here.
bye,
Sumit
7 years, 8 months