[sssd PR#918][comment] Add support for NSS hosts database lookup.
by pbrezina
URL: https://github.com/SSSD/sssd/pull/918
Title: #918: Add support for NSS hosts database lookup.
pbrezina commented:
"""
* `master`
* 8a66d6e5a8abc9a89e12a5ef386541193f965b19 - TESTS: Add LDAP resolver target integration tests
* e980b0f6a0aa2ded35f7cc81d8049eac159319da - PROXY: Add support for iphost enumeration
* 45dbaddde02ac0c5b1af612ece19933d50c132a4 - AD: Implement iphost cleanup for expired cache entries
* ae6d042cbb6b8a2bfecc37edeb3a1509796f6846 - LDAP: Implement iphost cleanup for expired cache entries
* 10d9346afd1a415cb6c624e9134c977bc6aec8f8 - AD: Add support for iphost enumeration
* 2be80a00cbd2227e828adb510c2d11cd3cfede48 - AD: Setup resolver enumeration tasks
* 82b808d93ea8ffaea7a89f9196ad87a6f67441a9 - LDAP: Add support for iphost enumeration
* 8a51bc0df6d9f45d00b561dc3f03373d0527ce96 - LDAP: Setup resolver enumeration tasks
* 8b96109ffff823766ee5795f76bf17907392f6ee - CACHE_REQ: Add support for enumerating hosts
* 11cc32e48b5cb70aecbe040b6629482cb497108e - SYSDB: Add support for enumerating hosts
* bbcd849a4208bb54d83ebdb4b57e35f25b887dd7 - NSS: Add client support for [set|get|end]hostent()
* 29b27395f39cb64834a054d1477467c045feaee3 - LDAP: Add support for iphost lookups (no enumeration)
* b8fba016681aabf82eb7739259e323242aa4a8c4 - LDAP: Prepare for iphost lookups
* 0498591eaeea0ff92e12e26e818fbf660d45c5b2 - AD: Initialize ldap_iphost_* options
* 6a7775263cec46b577d3d25be2e2086136c7a134 - LDAP: Document new ldap_iphost_* options
* a61c6d61c39e566eeda38ceceb8fa11831822d51 - LDAP: Initialize ldap_iphost_* options
* 1402f10046eb830c9fcb591c8898f73dd13ddc95 - AD: Initialize resolver provider
* 5672d2beb735d35bbf33efc25c48de4f31c33563 - LDAP: Initialize resolver provider
* 29c583b6450af52fd0b93b526fda67b946d925ba - PROXY: Handle resolver hosts by address requests
* 00bc7897163a9fed2bc7ba613f36c6b076e6d8c0 - SYSDB: Extend sysdb_store_host() to accept extra attributes
* bbb7a45dfd16a7eb8e1b56da508a536e520e3bcd - PROXY: Store results from NSS library call into the cache
* be791978953d0cfec64a08d7da2aae6d44af8e53 - PROXY: Handle resolver hosts by name requests
* b1fe85eb0034f3aacb549322b4620976f09e39af - PROXY: Register resolver hosts handler method
* 688e6a6b56966200e530c9e3a6de534e1f763b7e - PROXY: Load resolver NSS library
* 0ec8bd578b55564182a21b05773c109393c16840 - PROXY: Create a module context to store id and auth contexts
* b523fb6a03dbf6289159d4fb8b491fe35f1c2693 - UTIL: Allow to specify mandatory and optional symbols when loading nss libs
* d6d03aafc49615ae1e4e88a692aa893214c3926d - CONFDB: Add a new resolver_timeout to timeout cached resolver entries
* 6f6900374520b34b25199259731e410be7b7ebf3 - CONFDB: Add new options for resolver provider
* 2c317ce9fc5a66ef82969baaf1d949fbee5dcd75 - DP: Implement resolver target handler
* 014cd3a542bbb27d72c160a5c596b6797c6ed46e - TESTS: Add gethostbyname and gethostbyaddr NSS responder tests
* 55cfacfe33e656840aed8bdb3ca7870a7bdad4dc - NSS: Add gethostbyname and gethostbyaddr support to the NSS responder
* e931f27dfd3800c3931c6aba7e75e7499b64a913 - NSS: Add client support for hosts (non-enumeration)
* 6e66e321797e52d7a9ed093683c45c678c9deec5 - CACHE_REQ: Implement ip_host_by_addr and ip_host_by_name plugins
* dafdd066ef2358ee06796ce5bba8f0b0891c9d64 - CACHE_REQ: Add a data field to store network addresses
* 1cb209556adad75264802de543f03e08f7058d23 - CACHE_REQ: Rename cache req host by name name plugin used by SSH
* 469891df69faeceba2084efd8ce421b1ec11103e - RESPONDER: Add sss_dp_resolver_get_send
* d76d818cb2015c4d5a4b70fac055f99134c5c858 - DP: Add a new filter type, filter by address
* 99ce117106b9c0d0e0167f1c10f5840a7912fa7f - SBUS: Add new resolver target interface
* 622849279be17cc9b7b59f81753aa05a0594df47 - SYSDB: Add index for hostAddress attribute
* 860c457063fedf4c0020e705060b97cd5a80d1a7 - SYSDB: Add sysdb functions for hosts entries
* d263fa9d643197bf0f3245e06149f7a3dd96f08d - UTIL: Add a function to canonicalize IP addresses
* 12bd3f96ca101192ddc6b0afb424c183e68989c9 - STAP: Add missing session data provider target
"""
See the full comment at https://github.com/SSSD/sssd/pull/918#issuecomment-595124324
4 years, 1 month
[sssd PR#996][opened] 1.16: failover: make sure we switch to anoter server if only port differs
by pbrezina
URL: https://github.com/SSSD/sssd/pull/996
Author: pbrezina
Title: #996: 1.16: failover: make sure we switch to anoter server if only port differs
Action: opened
PR body:
"""
This is a regression introduced in 735af71a8e169f17fa5462db610a1567c9618e29.
After this commit we checked only server name instead of name and port combo.
Steps to reproduce:
1. Configure SSSD to use two servers with same name but different ports
```
[domain/LDAP]
debug_level=0xFFF0
id_provider = ldap
ldap_uri = ldap://$SERVER1:12345,ldap://$SERVER1:389
ldap_tls_cacertdir = /etc/openldap/certs
ldap_search_base = dc=example,dc=com
```
2. The first server port is unreachable, the second is working.
3. Run sssd and try to resolve user.
4. Without the patch SSSD tries to connect to the first server twice
because new URI is not constructed and goes offline.
Resolves:
https://pagure.io/SSSD/sssd/issue/4112
Reviewed-by: Michal Židek <mzidek(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/996/head:pr996
git checkout pr996
4 years, 1 month