sssd-devel May 2019

sssd-devel@lists.fedorahosted.org

3 participants
52 discussions

[sssd PR#390][opened] NSS: Add option to disable memcache
by mzidek-rh 21 Oct '19

21 Oct '19

URL: https://github.com/SSSD/sssd/pull/390 Author: mzidek-rh Title: #390: NSS: Add option to disable memcache Action: opened PR body: """ Added option use_memcache to centrally disable memcache for all clients without the need to specify SSS_NSS_USE_MEMCACHE=NO environment variable. Resolves: https://pagure.io/SSSD/sssd/issue/3496 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/390/head:pr390 git checkout pr390

8 106

[sssd PR#546][opened] TESTS: Re-add tests for `kdestroy -A`
by fidencio 23 Sep '19

23 Sep '19

URL: https://github.com/SSSD/sssd/pull/546 Author: fidencio Title: #546: TESTS: Re-add tests for `kdestroy -A` Action: opened PR body: """ This reverts commit 89726be5a05493b7af312f0be9ac5ecb6f1822e1 and also do a few modifications on it in order to ensure we don't have any regression on https://pagure.io/SSSD/sssd/issue/3413 As this patch depends on a krb5 patch applied to the distros we run our internal CI on, I've opened a bug report providing patches for Fedora[0] and Debian[1]. [0]: https://bugzilla.redhat.com/show_bug.cgi?id=1561917 [1]: https://salsa.debian.org/debian/krb5/merge_requests/1 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/546/head:pr546 git checkout pr546

4 27

[sssd PR#560][opened] NSS: close files after mmap
by ChrisKowalczyk 17 Sep '19

17 Sep '19

URL: https://github.com/SSSD/sssd/pull/560 Author: ChrisKowalczyk Title: #560: NSS: close files after mmap Action: opened PR body: """ The files in MC cache folder were initialized by SSSD on startup, and mapped by using mmap function. due to the fact that they weren't closed afterwards, their File descriptors were still marker alive but marked as 'Deleted'. This was noticed by a customer of SUSE, see more details here: https://bugzilla.suse.com/show_bug.cgi?id=1080156 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/560/head:pr560 git checkout pr560

6 12

[sssd PR#810][opened] TESTS: ability to run unit tests under valgrind (sssd-1-16 backport)
by alexey-tikhonov 02 Sep '19

02 Sep '19

URL: https://github.com/SSSD/sssd/pull/810 Author: alexey-tikhonov Title: #810: TESTS: ability to run unit tests under valgrind (sssd-1-16 backport) Action: opened PR body: """ Adds ability to run unit tests under valgrind with handy makefile targets. Enabled with --enable-valgrind passed to ./configure script. Reviewed-by: Pavel Březina <pbrezina(a)redhat.com> (cherry picked from commit e812151511f7b09908efb3c8ebed294a26efebc7) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/810/head:pr810 git checkout pr810

2 11

[sssd PR#807][opened] sudo: do not update last usn value on rules refresh
by pbrezina 30 Aug '19

30 Aug '19

URL: https://github.com/SSSD/sssd/pull/807 Author: pbrezina Title: #807: sudo: do not update last usn value on rules refresh Action: opened PR body: """ Refreshing specific rules may produce a higher usn value that the one that is already remembered if the rules changed on the server. However, there may be another rule that is not being refreshed which usn value is higher then the current value but lower then the value of some of the refreshed rules. If the highest usn value is updated in this case, the rule would not be found be smart refresh. Thus we must not update the usn value during rules refresh. Resolves: https://pagure.io/SSSD/sssd/issue/3996 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/807/head:pr807 git checkout pr807

2 11

[sssd PR#821][opened] SERVER: Receving SIGSEGV process on shutdown
by thalman 29 Aug '19

29 Aug '19

URL: https://github.com/SSSD/sssd/pull/821 Author: thalman Title: #821: SERVER: Receving SIGSEGV process on shutdown Action: opened PR body: """ There is race condition when dynamic libraries are unloaded. Talloc library calls our destructors but they still need openssl calls which might be not available. Solution is to free explicitely memory context and trigger destructors before calling exit(). The first commit seems to fix the issue but consider similar way of freeing resources in kerberos and ldap providers in other two commits. Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1672584 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/821/head:pr821 git checkout pr821

3 28

[sssd PR#820][opened] ad: delete domains disabled through ad_enabled_domains from cache
by pbrezina 23 Aug '19

23 Aug '19

URL: https://github.com/SSSD/sssd/pull/820 Author: pbrezina Title: #820: ad: delete domains disabled through ad_enabled_domains from cache Action: opened PR body: """ Steps to reproduce: 1. Have at least one subdomain in ad domain (e.g. child.ad.vm is subdomain of ad.vm). 2. Enable all domains, set ad_enabled_domains = [ad.vm] ... ad_enabled_domains = 3. Look up 'administrator(a)child.ad.vm' $ id administrator(a)child.ad.vm uid=1678800500(administrator(a)child.ad.vm) ... 4. Disable the subdomain by setting 'ad_enabled_domains = ad.vm' 5. Restart sssd without clearing the cache 6. Request for *(a)child.ad.vm will go to data provider and try to lookup the user in child.ad.vm domain which will yield 'domain not found'. However if the user is cached it will return the user. $ id administrator(a)child.ad.vm uid=1678800500(administrator(a)child.ad.vm) ... Subdomains that are not root domains are removed from cache. Root domains are disabled in sysdb with new `enabled` attribute. Resolves: https://pagure.io/SSSD/sssd/issue/4009 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/820/head:pr820 git checkout pr820

2 21

[sssd PR#705][opened] KCM: Add configurable quotas
by jhrozek 07 Aug '19

07 Aug '19

URL: https://github.com/SSSD/sssd/pull/705 Author: jhrozek Title: #705: KCM: Add configurable quotas Action: opened PR body: """ This PR adds several patches that let the user configure quotas to store their ccaches. Please see the commit messages, I hope they are verbose enough. One thing that should be pointed out is that the global number of ccaches is explicitly unlimited. Does anyone see an issue with just enforcing the per-UID limits? An upcoming PR(s) would implement warning when the quota is being exceeded and a sssctl command to let the administrator display the quota taken. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/705/head:pr705 git checkout pr705

3 43

[sssd PR#636][opened] failover: tune up default timeouts
by pbrezina 31 Jul '19

31 Jul '19

URL: https://github.com/SSSD/sssd/pull/636 Author: pbrezina Title: #636: failover: tune up default timeouts Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/3217 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/636/head:pr636 git checkout pr636

3 22

[sssd PR#796][opened] ci: enable sssd-ci for 1-16 branch
by pbrezina 16 Jul '19

16 Jul '19

URL: https://github.com/SSSD/sssd/pull/796 Author: pbrezina Title: #796: ci: enable sssd-ci for 1-16 branch Action: opened PR body: """ Fedora 28 is the latest version containing 1.16 so I think it is fine to not run the test against Fedora 29+. Besides this change this patch contains files from master without change. (including PR 793 that is not yet merge) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/796/head:pr796 git checkout pr796

3 25

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel May 2019