sssd-devel November 2019

sssd-devel@lists.fedorahosted.org

2 participants
79 discussions

[sssd PR#930][opened] SBUS: remove dbus fd from tevent loop when watch is removed
by alexey-tikhonov 07 Nov '19

07 Nov '19

URL: https://github.com/SSSD/sssd/pull/930 Author: alexey-tikhonov Title: #930: SBUS: remove dbus fd from tevent loop when watch is removed Action: opened PR body: """ According to the tevent API: "To cancel the monitoring of a file descriptor, call talloc_free() on the object returned by this (tevent_add_fd()) function." Resolves: https://pagure.io/SSSD/sssd/issue/2660 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/930/head:pr930 git checkout pr930

2 9

ipa: kerberos locator plugin and AD sites - sssd 1.13.x
by Ziomek, M. (Maciej) 05 Nov '19

05 Nov '19

Hello everyone, I would kindly ask whether there are any plans / possibilities to port features introduced in sssd 1.16.3 back to sssd 1.13.x (LTM) ? These features are: 1. Since 1.16.3 the kdcinfo files are generated automatically also for trusted domains in setups that use id_provider=ad and IPA masters in a trust relationship with an AD domain. 2. SSSD Kerberos locator plugin can now process multiple address if SSSD generates more than one. 3. On IPA clients the AD DCs or the AD site which should be used to authenticate users can now be listed in a subdomain section. These three mentioned features help us a lot but at the same time we are suffering from their lack in 1.13.x ( LTM ). We are still using systems where version 1.13.x is the only one officially available. Have a nice day, Regards Maciej Ziomek ING Business Shared Services B.V. z siedzibą w Amsterdamie, Holandia, VAT PL 526-319-58-54, działająca w Polsce w formie oddziału, pod firmą ING Business Shared Services B.V. spółka z ograniczoną odpowiedzialnością Oddział w Polsce z siedzibą w Katowicach, ul. Konduktorska 35, 40-155 Katowice, NIP: 2050005130, wpisana do rejestru przedsiębiorców Krajowego Rejestru Sądowego prowadzonego przez Sąd Rejonowy Katowice-Wschód w Katowicach, VIII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem KRS 0000702305.

2 1

[sssd PR#841][opened] DEBUG: Add debug to display ldapsearch requests
by thalman 05 Nov '19

05 Nov '19

URL: https://github.com/SSSD/sssd/pull/841 Author: thalman Title: #841: DEBUG: Add debug to display ldapsearch requests Action: opened PR body: """ The existing debug output from SSSD is quite helpful in this respect, but it would be better if a small enhancement were made so that for a specific debug level SSSD would print out all the details of the LDAP search it is doing, ie the LDAP server, the base dn, the scope, filter and attributes requested. Server address is already in the log nowadays so this change writes missing search scope. Also received attributes are logged with SSSDBG_TRACE_LIBS debug level. Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1542137 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/841/head:pr841 git checkout pr841

4 37

[sssd PR#922][opened] Fix timing to save errno
by miztake 05 Nov '19

05 Nov '19

URL: https://github.com/SSSD/sssd/pull/922 Author: miztake Title: #922: Fix timing to save errno Action: opened PR body: """ The timing to save some errnos is after DEBUG output, not immediately after the system call. Fix to save errno before DEBUG output so that errno is not overwritten by DEBUG output processing. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/922/head:pr922 git checkout pr922

4 17

[sssd PR#558][opened] WIP: Add a test for sss_nss_getgrouplist_timeout and fix invalidating the initgroups cache
by jhrozek 04 Nov '19

04 Nov '19

URL: https://github.com/SSSD/sssd/pull/558 Author: jhrozek Title: #558: WIP: Add a test for sss_nss_getgrouplist_timeout and fix invalidating the initgroups cache Action: opened PR body: """ This is a WIP on adding tests for the sss_nss_ex interface. I covered only the sss_nss_getgrouplist_timeout function so far. I'm submitting the PR already in this state to get some feedback if this coverage is enough and the other functions can be covered similarly or if there is some issue with this approach. Also, I found a bug in invalidating the initgroups memory cache, that's the first of the two patches. Here I'm really not sure if the fix is even how the issue should be fixed, so I just hacked something up, even without allocation checks etc. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/558/head:pr558 git checkout pr558

3 10

[sssd PR#914][opened] bash_rc: Build with systemtap
by mzidek-rh 04 Nov '19

04 Nov '19

URL: https://github.com/SSSD/sssd/pull/914 Author: mzidek-rh Title: #914: bash_rc: Build with systemtap Action: opened PR body: """ We build with --enable-systemtap in Fedora and RHEL by default. We should do the same in the helper script in contrib/fedora/bashrc_sssd. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/914/head:pr914 git checkout pr914

3 9

[sssd PR#920][opened] Add comment to workaround for libsemanage issue
by elkoniu 04 Nov '19

04 Nov '19

URL: https://github.com/SSSD/sssd/pull/920 Author: elkoniu Title: #920: Add comment to workaround for libsemanage issue Action: opened PR body: """ libsemanage < 2.6 use to not set right file mask in our usecase. It has been fixed by manual umask() call but is no longer needed. Fix will be keept as a precaution for future libsemanage versions. Related bug: https://bugzilla.redhat.com/show_bug.cgi?id=1186422 Related issue: https://pagure.io/SSSD/sssd/issue/3583 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/920/head:pr920 git checkout pr920

5 14

[sssd PR#921][opened] util/server.c: fix handling when error occurs in waitpid()
by miztake 04 Nov '19

04 Nov '19

URL: https://github.com/SSSD/sssd/pull/921 Author: miztake Title: #921: util/server.c: fix handling when error occurs in waitpid() Action: opened PR body: """ -1 is returned if an error occurs in waitpid(). Fixed inappropriate error handling. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/921/head:pr921 git checkout pr921

5 12

[sssd PR#923][opened] PRNG usage amended
by alexey-tikhonov 04 Nov '19

04 Nov '19

URL: https://github.com/SSSD/sssd/pull/923 Author: alexey-tikhonov Title: #923: PRNG usage amended Action: opened PR body: """ This PR is intended to address https://pagure.io/SSSD/sssd/issue/4024#comment-603526 sss_rand() was: - moved out of crypto lib, - non security relevant purpose was emphasized - attempt to "use RAND_bytes() if available" was removed to simplify things and make return value compatible with rand() MMAP_CACHE: use CSPRNG to init hash table seed """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/923/head:pr923 git checkout pr923

3 9

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel November 2019