about access control reporting with id_provider=ad
by Jakub Hrozek
Hi Michal and sssd-devel,
one of the RFEs that keeps coming up for SSSD is to provide a sort of an
'attestation report' for SSSD. Mostly the request is about printing who
can access this client machine.
I know that we fetch all the HBAC rules for a client with the IPA
provider, but Michal, you mentioned that it's problematic do to
something similar for the AD provider. Could you elaborate why? Would it
be possible to extend the AD access provider to fetch all GPOs that
match this client?
6 years, 7 months
[sssd PR#360][opened] TESTS: Relax the assert in test_idle_timeout
by jhrozek
URL: https://github.com/SSSD/sssd/pull/360
Author: jhrozek
Title: #360: TESTS: Relax the assert in test_idle_timeout
Action: opened
PR body:
"""
Resolves:
https://pagure.io/SSSD/sssd/issue/3473
We're being quite strict in test_idle_timeout when checking for the number
of open fds which leads to spurious failures like:
=================================== FAILURES ===================================
______________________________ test_idle_timeout _______________________________
Traceback (most recent call last):
File
"/var/lib/jenkins/workspace/ci/label/fedora23/src/tests/intg/test_secrets.py",
line 427, in test_idle_timeout
assert nfds_pre + 1 == nfds_conn AssertionError: assert (27 + 1) == 27
==================== 1 failed, 221 passed in 473.37 seconds ====================
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/360/head:pr360
git checkout pr360
6 years, 7 months
[sssd PR#225][opened] SECRETS: Apply separate quotas for cn=secrets and cn=kcm
by jhrozek
URL: https://github.com/SSSD/sssd/pull/225
Author: jhrozek
Title: #225: SECRETS: Apply separate quotas for cn=secrets and cn=kcm
Action: opened
PR body:
"""
While testing the KCM responder some more, I realized that we always checked
the (hardcoded, no less) base DN of cn=secrets when checking for
quotas. These patches make the quota check separate for each of the
cn=secrets/cn=kcm hives, add a test and mention in documentation that the
quota from sssd-secrets applies for how many ccaches can be stored.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/225/head:pr225
git checkout pr225
6 years, 7 months