sssd-devel August 2019

sssd-devel@lists.fedorahosted.org

9 participants
59 discussions

[sssd PR#845][opened] MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8
by jhrozek 21 Aug '19

21 Aug '19

URL: https://github.com/SSSD/sssd/pull/845 Author: jhrozek Title: #845: MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8 Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/3932 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/845/head:pr845 git checkout pr845

3 4

[sssd PR#866][comment] autofs: do not enumerate when only single entry is requested
by pbrezina 15 Aug '19

15 Aug '19

URL: https://github.com/SSSD/sssd/pull/866 Title: #866: autofs: do not enumerate when only single entry is requested pbrezina commented: """ There are lots of commits but I tried to keep them as small as possible so really each commit implements only one change, so the review process should be easier. """ See the full comment at https://github.com/SSSD/sssd/pull/866#issuecomment-521629437

1 0

Removing nscd from Fedora
by Florian Weimer 15 Aug '19

15 Aug '19

We'd like to propose removing nscd from Fedora, for Fedora 32. (The goal is to make this change downstream, too.) Carlos told me that in the past, sssd couldn't do full caching for nss_files, and that was still a concern at the time. Has this changed? What about WINS/winbind? Thanks, Florian

4 4

[sssd PR#857][opened] Don't qualify users from files domain when default_domain_suffix is set
by jhrozek 14 Aug '19

14 Aug '19

URL: https://github.com/SSSD/sssd/pull/857 Author: jhrozek Title: #857: Don't qualify users from files domain when default_domain_suffix is set Action: opened PR body: """ Resolves: https://pagure.io/SSSD/sssd/issue/4052 The files domain should always be non-qualified. The usual rules like qualification of all domains except the one set with default_domain_suffix should not apply. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/857/head:pr857 git checkout pr857

2 9

[sssd PR#862][opened] pam: fix loop in Smartcard authentication
by sumit-bose 14 Aug '19

14 Aug '19

URL: https://github.com/SSSD/sssd/pull/862 Author: sumit-bose Title: #862: pam: fix loop in Smartcard authentication Action: opened PR body: """ If 'try_cert_auth' or 'require_cert_auth' options are used and a wrong PIN is entered the PAM responder might end in an endless loop. This patch uses a flag to avoid the loop and makes sure that during authentication the error code causing the loop is not returned. Related to https://pagure.io/SSSD/sssd/issue/4051 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/862/head:pr862 git checkout pr862

2 5

Re: SSSD Internals Document published
by Jakub Hrozek 08 Aug '19

08 Aug '19

This is quite embarassing, but we still haven't converted that document from the old wiki to pagure. I've been working on that on and off when I had some free time, the current state can be viewed at: https://pagure.io/fork/jhrozek/SSSD/docs/blob/42227852ef7059966fcac09c544b4… On Tue, Jul 30, 2019 at 09:44:01PM +0000, Ratnayake, Lalitha wrote: > Hello, > > Does anyone know where I could find the "SSSD Internals Document"? The following link redirects to https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement !! > > > https://fedorahosted.org/sssd/wiki/InternalsDocs<https://fedorahosted.org/sssd/wiki/InternalsDocs.> > > Thanks, > Lali. > > Lali Ratnayake > GENView R&D - C20 Security > 500 Palladium Dr. Suite 2100 | Ottawa, Ontario, Canada, K2V 1C2 > office: +1.343.883.2579 > [ribboncommunications.com] > <https://ribboncommunications.com/> > > > ----------------------------------------------------------------------------------------------------------------------- > Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. that > is confidential and/or proprietary for the sole use of the intended recipient. Any review, disclosure, reliance or > distribution by others or forwarding without express permission is strictly prohibited. If you are not the intended > recipient, please notify the sender immediately and then delete all copies, including any attachments. > ----------------------------------------------------------------------------------------------------------------------- > _______________________________________________ > sssd-devel mailing list -- sssd-devel(a)lists.fedorahosted.org > To unsubscribe send an email to sssd-devel-leave(a)lists.fedorahosted.org > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.…

1 0

[sssd PR#705][opened] KCM: Add configurable quotas
by jhrozek 07 Aug '19

07 Aug '19

URL: https://github.com/SSSD/sssd/pull/705 Author: jhrozek Title: #705: KCM: Add configurable quotas Action: opened PR body: """ This PR adds several patches that let the user configure quotas to store their ccaches. Please see the commit messages, I hope they are verbose enough. One thing that should be pointed out is that the global number of ccaches is explicitly unlimited. Does anyone see an issue with just enforcing the per-UID limits? An upcoming PR(s) would implement warning when the quota is being exceeded and a sssctl command to let the administrator display the quota taken. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/705/head:pr705 git checkout pr705

3 43

[sssd PR#859][opened] Make sure child log files have the right permissions
by sumit-bose 07 Aug '19

07 Aug '19

URL: https://github.com/SSSD/sssd/pull/859 Author: sumit-bose Title: #859: Make sure child log files have the right permissions Action: opened PR body: """ If SSSD runs a unprivileged user we should make sure the log files for child processes have the right permission so that the child process can write to them. Related to https://pagure.io/SSSD/sssd/issue/4056 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/859/head:pr859 git checkout pr859

2 5

[sssd PR#856][opened] pam_sss: Add missing colon to the PIN prompt
by Jakuje 07 Aug '19

07 Aug '19

URL: https://github.com/SSSD/sssd/pull/856 Author: Jakuje Title: #856: pam_sss: Add missing colon to the PIN prompt Action: opened PR body: """ This can be noticed in the sudo prompt, when the system is configured to authenticate users using smart cards. Resolves: Pagure#4049 [1] [1] https://pagure.io/SSSD/sssd/issue/4049 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/856/head:pr856 git checkout pr856

3 8

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel August 2019