sssd-devel February 2019

sssd-devel@lists.fedorahosted.org

9 participants
62 discussions

[sssd PR#709][opened] Regex fails if there's a whitespace before option name
by tdukaric 11 Jun '19

11 Jun '19

URL: https://github.com/SSSD/sssd/pull/709 Author: tdukaric Title: #709: Regex fails if there's a whitespace before option name Action: opened PR body: """ self.OPTCRE.match(line) fails if there's a whitespace before option name, which is valid for SSSD. This change will ignore any whitespace before the option name. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/709/head:pr709 git checkout pr709

5 11

[sssd PR#750][opened] Monitor: minor fixes
by alexey-tikhonov 20 May '19

20 May '19

URL: https://github.com/SSSD/sssd/pull/750 Author: alexey-tikhonov Title: #750: Monitor: minor fixes Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/750/head:pr750 git checkout pr750

3 9

[sssd PR#541][opened] memberof: keep memberOf attribute for nested member
by pbrezina 08 Apr '19

08 Apr '19

URL: https://github.com/SSSD/sssd/pull/541 Author: pbrezina Title: #541: memberof: keep memberOf attribute for nested member Action: opened PR body: """ If we have a member that is both direct and nested member, memberOf attribute was removed if the direct membership was deleted. 1) user ----------> groupB -> groupC -> groupA / 2) user -> groupA -> groupB -> groupC If we remove user->groupB from 1), we get 2) but groupB was still removed from user memberOf attribute. Resolves: https://pagure.io/SSSD/sssd/issue/3636 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/541/head:pr541 git checkout pr541

3 16

[sssd PR#756][opened] TESTS: Add test case title with @title in docstrings
by mrniranjan 08 Apr '19

08 Apr '19

URL: https://github.com/SSSD/sssd/pull/756 Author: mrniranjan Title: #756: TESTS: Add test case title with @title in docstrings Action: opened PR body: """ Adding test case titles starting with @title. When pytest is run with --junit-xml, the resulting junit file contains test function name as test case name. With the help of [pytest-modifyjunit](https://pagure.io/pytest-modifyjunit) , this plugin replaces test function name with test case title described with @title. sssd qe uses the junit.xml to import the result to Test case management system which tries to match the test case names in junit.xml with the test case title described in tcms. https://paste.fedoraproject.org/paste/dHR218kinyECa1yHiLXGxg is the junit.xml which doesn't contain test case title. https://paste.fedoraproject.org/paste/kVUlc-2mIibW18ILzbyqcg is the junit.xml which contains test case names with as defined in @title. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/756/head:pr756 git checkout pr756

4 26

[sssd PR#737][opened] providers/proxy: fixed issue 3931
by alexey-tikhonov 27 Mar '19

27 Mar '19

URL: https://github.com/SSSD/sssd/pull/737 Author: alexey-tikhonov Title: #737: providers/proxy: fixed issue 3931 Action: opened PR body: """ Set of patches related with https://pagure.io/SSSD/sssd/issue/3931 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/737/head:pr737 git checkout pr737

3 5

[sssd PR#745][opened] providers/ldap: minor fixes
by alexey-tikhonov 27 Mar '19

27 Mar '19

URL: https://github.com/SSSD/sssd/pull/745 Author: alexey-tikhonov Title: #745: providers/ldap: minor fixes Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/745/head:pr745 git checkout pr745

3 5

[sssd PR#706][opened] KCM: Fall back to using the first ccache if the default does not exist
by jhrozek 27 Mar '19

27 Mar '19

URL: https://github.com/SSSD/sssd/pull/706 Author: jhrozek Title: #706: KCM: Fall back to using the first ccache if the default does not exist Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/3838 KCM stores the default ccache in a separate DB entry. If the DB entry contains a UUID that cannot be found in the DB for whatever reason, we should just use the first ccache as the default. (This is what we already do if there is no default) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/706/head:pr706 git checkout pr706

2 5

[sssd PR#765][opened] sudo: format runas attributes to correct output name
by pbrezina 27 Mar '19

27 Mar '19

URL: https://github.com/SSSD/sssd/pull/765 Author: pbrezina Title: #765: sudo: format runas attributes to correct output name Action: opened PR body: """ sudo internally calls getpwnam and getgrnam on user and groups that should be used for the invoked command. Output of these calls is compared to values in runAsUser/Group attributes. When different output format is used then what is present in LDAP, this comparison will fail, denying user to use sudo. Now, we convert these attributes into correct output name, respecting domain resolution order, fully qualified domains and fqname format. E.g. sudo call: sudo -u tuser(a)ipa.vm -g tgroup(a)ipa.vm id Resolves: https://pagure.io/SSSD/sssd/issue/3957 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/765/head:pr765 git checkout pr765

2 7

[sssd PR#650][opened] Implement a hybrid mode of generating private groups
by jhrozek 20 Mar '19

20 Mar '19

URL: https://github.com/SSSD/sssd/pull/650 Author: jhrozek Title: #650: Implement a hybrid mode of generating private groups Action: opened PR body: """ Related: https://pagure.io/SSSD/sssd/issue/3822 Design page PR: https://pagure.io/SSSD/docs/pull-request/72 Commit mesages follow, hopefully they are enough to explain what is going on. SYSDB: Special case getgrnam and getgrgid searches in hybrid MPG mode In hybrid MPG mode, we want to return the MPG group only in case the user entry has no original GID set. To achieve this, we first search with the non-MPG filter to find 'real' groups. If that fails, we try the MPG filter, but throw away entries that has any real GID set. Related: https://pagure.io/SSSD/sssd/issue/3822 SYSDB: Refactor the mpg and non-mpg searches out of sysdb_getgrnam() and sysdb_getgrgid() to make them more reusable The getgrnam and getgrgid searches already special-case lookups with overrides where in some cases the search falls back no a non-MPG search. The upcoming special case for the hybrid mode would do something similar, just in the opposite direction, so it makes sense to split out the functions for just the MPG step and just the non-MPG step into reusable functions. Related: https://pagure.io/SSSD/sssd/issue/3822 CONFDB/NSS: Add the hybrid MPG mode Permits a new option value 'hybrid' for the auto_private_groups option. The option was even previously marked as a string option in both the configAPI and the man pages, so we don't have to change the type now. If the hybrid mode is selected and the user's original GID number is available, then during initgroups and getpwnam, it is used as their primary GID instead of the MPG group. The original group is also not added as a secondary group during initgroups in this case. Related: https://pagure.io/SSSD/sssd/issue/3822 CONFDB: Read auto_private_groups as string, not bool In preparation to adding the third value of auto_private_groups, this patch reads the confdb value as string and checks for the option values on its own. Related: https://pagure.io/SSSD/sssd/issue/3822 UTIL: Convert bool mpg to an enum mpg_mode Instead of bool mpg inside struct sss_domain_info, let's introduce enum mpg_mode that currently maps pretty much 1:1 to the boolean. In future patches, a third value will be added. Also adds a getter for the mpg_mode value because we want to discourage getting or setting the value directly. Instead, the sss_domain_info structure should be opaque in the future. Related: https://pagure.io/SSSD/sssd/issue/3822 UTIL: Add a is_domain_mpg shorthand Instead of looking into the domain structure directly, add a sss_domain_is_mpg() function. This will make sense when we add a third state instead of the boolean that will also be mpg-like. Related: https://pagure.io/SSSD/sssd/issue/3822 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/650/head:pr650 git checkout pr650

2 59

[sssd PR#763][opened] sdap: use ldap_pwmodify_mode to change password
by pbrezina 19 Mar '19

19 Mar '19

URL: https://github.com/SSSD/sssd/pull/763 Author: pbrezina Title: #763: sdap: use ldap_pwmodify_mode to change password Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/1314 Now you can set `ldap_pwmodify_mode = "exop"` (default) to use extended operation to change the password (current state) or set it to `ldap_modify` to modify `userPassword` attribute directly. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/763/head:pr763 git checkout pr763

2 8

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel February 2019