[sssd PR#7] Fix initgroups with nested groups (comment)
by fidencio
jhrozek commented on a pull request
"""
On Wed, Aug 31, 2016 at 07:15:10AM -0700, lslebodn wrote:
> On (31/08/16 01:47), sumit-bose wrote:
> >On Wed, Aug 31, 2016 at 01:30:12AM -0700, Jakub Hrozek wrote:
> >> On Wed, Aug 31, 2016 at 12:36:37AM -0700, sumit-bose wrote:
> >> > On Tue, Aug 30, 2016 at 12:36:20PM -0700, Jakub Hrozek wrote:
> >> > > On Tue, Aug 30, 2016 at 11:47:09AM -0700, lslebodn wrote:
> >> > >
> >> > > About the discussion I saw on #sssd in backscroll, the rfc2307bis schema
> >> > > only uses the member attribute because IIRC the RFC doesn't talk about
> >> > > memberof at all. But in IPA, we know the specifics on the schema, so we
> >> > > are able to dereference the memberof attribute to get a complete list of
> >> > > all groups with one call.
> >> >
> >> > Unfortunately it is more complicated with IPA because memberOf only
> >> > contains the direct memberships, there is a second attribute
> >> > memberofindirect which hold the indirect memberships.
> >>
> >> This is only how IPA UI displays indirect memberships, if you check the
> >> memberships with ldapsearch, you'll see it's really only memberof.
> >
> >bummer, you are right, I thought the --raw option of ipa user-show really
> >means 'raw' but it looks some of the values are still processed.
> >
> >Sorry for the noise.
> >
> I haven't found any regression caused by this patch.
> So at least; issues in ipa-trust test are not caused by this bug.
>
CI: http://sssd-ci.duckdns.org/logs/job/52/88/summary.html
"""
See the full comment at https://github.com/SSSD/sssd/pull/7#issuecomment-244052286
7 years, 7 months
[PATCH] DEBUG: Apend line feed to messages from libsemanage
by Lukas Slebodnik
ehlo,
@see
(Wed Aug 31 14:12:18 2016) [[sssd[selinux_child[7088]]]] [libsemanage] (0x0020): could not query record value(Wed Aug 31 14:12:18 2016) [[sssd[selinux_child[7088]]]] [get_seuser] (0x0020): Cannot query for dennis
(Wed Aug 31 14:12:18 2016) [[sssd[selinux_child[7088]]]] [seuser_needs_update] (0x2000): get_seuser: ret: 5 seuser: unknown mls: unknown
(Wed Aug 31 14:12:30 2016) [[sssd[selinux_child[7088]]]] [libsemanage] (0x0020): setfiles returned error code 1.(Wed Aug 31 14:12:33 2016) [[sssd[selinux_child[7088]]]] [libsemanage] (0x0020): setfiles returned error code 1.(Wed Aug 31 14:12:33 2016) [[sssd[selinux_child[7088]]]] [set_seuser] (0x0020): Cannot commit SELinux transaction
(Wed Aug 31 14:12:33 2016) [[sssd[selinux_child[7088]]]] [main] (0x0020): Cannot set SELinux login context.
LS
7 years, 7 months
[PATCH] GPO: Cat vals with same key from different GPOs
by Michal Židek
Hi,
here is patch for ticket #3161.
See more in the ticket description.
I was thinking why we originally replaced
the lists and I think it comes from confusion
on how we handle the same keys in single
GPO ini file, however that is handled by
libini not by SSSD.
Michal
7 years, 7 months