September 2020 - sssd-devel - Fedora mailing-lists

[sssd PR#175][opened] Add module for starting services
by lslebodn 22 Nov '21

22 Nov '21

URL: https://github.com/SSSD/sssd/pull/175 Author: lslebodn Title: #175: Add module for starting services Action: opened PR body: """ This is a WIP version of reducing code duplication in our cwrap integration tests. I am still not sure whether we should also reuse function `create_sssd_fixture`. And if yes; then probably in different nodule then `services` And comments are welcome. BTW I wrote patches few weeks ago; therefore new tests are not converted. I am just sending patches to get some feedback. Site effect of this patches is that tests are cca 20% faster (IIRC) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/175/head:pr175 git checkout pr175

5 5

[sssd PR#844][opened] sssd-ad and gpo_child: GPO apply fixes during reading fails
by mastersin 03 Aug '21

03 Aug '21

URL: https://github.com/SSSD/sssd/pull/844 Author: mastersin Title: #844: sssd-ad and gpo_child: GPO apply fixes during reading fails Action: opened PR body: """ Ignore AD GPO errors: - if SecEdit/GptTmpl.inf is missing or - if reading sysvol_gpt_version fails and cached_gpt_version already exists """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/844/head:pr844 git checkout pr844

7 16

[sssd PR#5245][opened] RESOLV: Avoid DNS search to improve fail-over reaction
by thalman 16 Mar '21

16 Mar '21

URL: https://github.com/SSSD/sssd/pull/5245 Author: thalman Title: #5245: RESOLV: Avoid DNS search to improve fail-over reaction Action: opened PR body: """ In case of unreachable DNS server or invalid hostname sssd/c-ares tries to search in multiple domains based on the search directive in resolv.conf But the hostnames in config file are fully qualified and this just extends the time spent with DNS resolution. This patch set the c-ares library flags to avoid DNS search Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1608496 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5245/head:pr5245 git checkout pr5245

5 31

[sssd PR#5264][opened] Utils: White space replace with another character
by elkoniu 08 Feb '21

08 Feb '21

URL: https://github.com/SSSD/sssd/pull/5264 Author: elkoniu Title: #5264: Utils: White space replace with another character Action: opened PR body: """ Function responsible for replacing white space has wrong log levels set. It can create false positive critical error messages broadcasted across the system without any real reason. This patch adjusts those log levels to be on the debug level rather than criticar error level. Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1818671 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5264/head:pr5264 git checkout pr5264

3 7

[sssd PR#5268][opened] proxy_child hardening
by alexey-tikhonov 29 Jan '21

29 Jan '21

URL: https://github.com/SSSD/sssd/pull/5268 Author: alexey-tikhonov Title: #5268: proxy_child hardening Action: opened PR body: """ Fixes #3730 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5268/head:pr5268 git checkout pr5268

4 32

[sssd PR#616][opened] become_user: add supplementary groups so ad provider can access keytab
by asheplyakov 28 Jan '21

28 Jan '21

URL: https://github.com/SSSD/sssd/pull/616 Author: asheplyakov Title: #616: become_user: add supplementary groups so ad provider can access keytab Action: opened PR body: """ For security reasons one might want to run providers as a non-privileged user (say, _sssd). However some providers (in particular ad) might need an access to restricted (non world-readable) files (for instance, /etc/krb5.keytab). One of the possible ways to solve the problem is to - add a special group (for instance, _keytab) - set the owner:group of the file in question to root:_keytab - set the permissions of the file in question to 640 - make the _sssd user a member of the _keytab group For this to work become_user should assign supplementary groups, which is what this patch does. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/616/head:pr616 git checkout pr616

5 13

[sssd PR#5251][opened] [wip] subdomains: allow to inherit case_sensitive=Preserving
by pbrezina 26 Jan '21

26 Jan '21

URL: https://github.com/SSSD/sssd/pull/5251 Author: pbrezina Title: #5251: [wip] subdomains: allow to inherit case_sensitive=Preserving Action: opened PR body: """ The first patch is just man page update to reflect current state. I think it makes sense to be able to show subdomain names in their original casing. Patches 2-3 make it work for AD provider. Patch 4 makes it work for IPA provider. There is apparantely a bug in winbind, but there is no link the any bugzilla so I do not know if it was already fixed. The commit is four years old. This patch requires case_sensitive=Preserving to be set also on the server, otherwise it does not work. It can be enabled without the server setting but we need to make nss_cmd_getpwnam_ex (and other _ex commands) to always return case preserving name. So before I continue the work I'd like to ask @sumit-bose if we can do it like this. Resolves: https://github.com/SSSD/sssd/issues/5250 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5251/head:pr5251 git checkout pr5251

3 28

[sssd PR#5300][opened] ad: use parallel cldap ping for site discovery
by pbrezina 23 Oct '20

23 Oct '20

URL: https://github.com/SSSD/sssd/pull/5300 Author: pbrezina Title: #5300: ad: use parallel cldap ping for site discovery Action: opened PR body: """ This PR adds support for CLDAP (connectionless LDAP over UDP) and makes use of it during site discovery. The discovery process is improved, it now sends the CLDAP ping to all discovered domain controllers at once to avoid potential timeouts when some of them are unreachable (which is quite common in real environment). The first received reply is used. The netlogon information is now requested only when SSSD starts and when we are recovering from offline state To avoid swamping network with many ping. This is quite fine given the site and forest information is not dynamic but usually stable. Additional improvement is that if we already know client's site we ping only in-site controllers first. We were already doing that but now we also fallback to off-site controllers in case none in-site controller is unreachable. Previously we would just fail. There is a bug in openldap [1] that makes SSSD wait for timeout in-case none of the controller is reachable, but as long as at least one is reachble the resolution will be fast. Resolves: https://github.com/SSSD/sssd/issues/3743 https://github.com/SSSD/sssd/issues/5215 [1] https://bugs.openldap.org/show_bug.cgi?id=9328 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5300/head:pr5300 git checkout pr5300

4 25

[sssd PR#5269][opened] Translations update from Weblate
by weblate 12 Oct '20

12 Oct '20

URL: https://github.com/SSSD/sssd/pull/5269 Author: weblate Title: #5269: Translations update from Weblate Action: opened PR body: """ Translations update from [Weblate](https://translate.fedoraproject.org/projects/sssd/sssd-1-16/) for SSSD/sssd-1-16. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5269/head:pr5269 git checkout pr5269

3 5

[sssd PR#5286][opened] Translations update from Weblate
by weblate 12 Oct '20

12 Oct '20

URL: https://github.com/SSSD/sssd/pull/5286 Author: weblate Title: #5286: Translations update from Weblate Action: opened PR body: """ Translations update from [Weblate](https://translate.fedoraproject.org/projects/sssd/sssd-master/) for SSSD/sssd. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5286/head:pr5286 git checkout pr5286

2 5

[sssd PR#5257][opened] git-template: add tags to help with release notes automation
by pbrezina 12 Oct '20

12 Oct '20

URL: https://github.com/SSSD/sssd/pull/5257 Author: pbrezina Title: #5257: git-template: add tags to help with release notes automation Action: opened PR body: """ This commits add information on several tags that should be used so we are able to generate release notes on each new release automatically. This will make release notes more thorough and it will also simplify the process a lot since it take lots of time to do it manually. Why I chose `:tag:` format> 1. Using @ notation creates user references in github so I wanted to use something different. 2. Using a plain text like (Resolves) leads people to create their own variations (Fixes, Resolves XYZ, ...) which adds additional burden to maintainers. Using this format makes it less error prone and easier to parse. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5257/head:pr5257 git checkout pr5257

6 43

[sssd PR#5303][opened] tests: run TIER-0 multihost tests in PRCI
by pbrezina 08 Oct '20

08 Oct '20

URL: https://github.com/SSSD/sssd/pull/5303 Author: pbrezina Title: #5303: tests: run TIER-0 multihost tests in PRCI Action: opened PR body: """ I currently expect failure on rhel-7 box since there are problems with nss which prohibits me from creating a new vagrant box that is required for these tests. I had to revert "libdirsrv should be modified to be compatible with new DS" as it does not provision the directory server correctly, this needs to be fixed. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5303/head:pr5303 git checkout pr5303

4 42

[sssd PR#5341][opened] KCM: Fix access after free on shutdown
by justin-stephenson 07 Oct '20

07 Oct '20

URL: https://github.com/SSSD/sssd/pull/5341 Author: justin-stephenson Title: #5341: KCM: Fix access after free on shutdown Action: opened PR body: """ Skip triggering the queue entry destructor on KCM shutdown to prevent a crash when multiple requests are queued. Resolves: https://github.com/SSSD/sssd/issues/4733 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5341/head:pr5341 git checkout pr5341

2 28

[sssd PR#5281][opened] Dn with spaces for 1.16
by thalman 06 Oct '20

06 Oct '20

URL: https://github.com/SSSD/sssd/pull/5281 Author: thalman Title: #5281: Dn with spaces for 1.16 Action: opened PR body: """ Cherry picked commits of PR https://github.com/SSSD/sssd/pull/5262 Resolves: #5261 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5281/head:pr5281 git checkout pr5281

4 44

[sssd PR#5331][opened] autofs: if more then one entry is found store all of them
by pbrezina 06 Oct '20

06 Oct '20

URL: https://github.com/SSSD/sssd/pull/5331 Author: pbrezina Title: #5331: autofs: if more then one entry is found store all of them Action: opened PR body: """ There can be more entries with same cn (automountKey) attribute value that differs only in casing if different attribute is chosen as rdn. SSSD then searches for (cn=name)when name folder is being mounted but this returns both lowercase and uppercase entry and we only store one (which may not be the desired one based on the order in the result) and fail to mount one of the directories. Resolves: https://github.com/SSSD/sssd/issues/5330 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5331/head:pr5331 git checkout pr5331

2 10

[sssd PR#5262][opened] Dn with spaces
by elkoniu 02 Oct '20

02 Oct '20

URL: https://github.com/SSSD/sssd/pull/5262 Author: elkoniu Title: #5262: Dn with spaces Action: opened PR body: """ This PR is push to upstream work of @thalman as he is on PTO now. Those 2 commits fixes issue with white space in DN reported by one of clients. Client already confirmed that this solves the issue for him. When @thalman will be back from PTO he will took over this. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5262/head:pr5262 git checkout pr5262

6 69

[sssd PR#5306][opened] sss_cache: sss_cache exits immediately if SSSD is not running.
by tomofumi-yoshida 02 Oct '20

02 Oct '20

URL: https://github.com/SSSD/sssd/pull/5306 Author: tomofumi-yoshida Title: #5306: sss_cache: sss_cache exits immediately if SSSD is not running. Action: opened PR body: """ When running sss_cache if /var is mounted as NFS, the fcntl access time to /var/lib/sss/db/timestamps_implicit_files.ldb is accumulated and the sss_ cache command took a long time to complete. Not only executing sss_cache directly, but also sss_cache may be executed by other commands (for example, useradd and groupadd in shadow utility). In this case, I encountered this problem when running useradd. It is hard for all callers of sss_cache to fix, so fix sss_cache to exit immediately while SSSD is not running. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5306/head:pr5306 git checkout pr5306

3 6

[sssd PR#943][opened] files_ops: Fix cached password remove
by elkoniu 01 Oct '20

01 Oct '20

URL: https://github.com/SSSD/sssd/pull/943 Author: elkoniu Title: #943: files_ops: Fix cached password remove Action: opened PR body: """ When SSSD daemon will detect refresh of password (group) file it will delete all cached users (groups) data. With this change cached data will be deleted only for non existing users (groups). Resolves: https://pagure.io/SSSD/sssd/issue/3591 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/943/head:pr943 git checkout pr943

3 16

[sssd PR#5272][opened] WIP! responder_utils: GetUserGroups() returns SYSDB_PRIMARY_GROUP_GIDNUM
by ikerexxe 01 Oct '20

01 Oct '20

URL: https://github.com/SSSD/sssd/pull/5272 Author: ikerexxe Title: #5272: WIP! responder_utils: GetUserGroups() returns SYSDB_PRIMARY_GROUP_GIDNUM Action: opened PR body: """ This is work in progress! There was a mismatch between the information provided by NSS and IFP interfaces. nss_protocol_fill_initgr() returned SYSDB_PRIMARY_GROUP_GIDNUM, but GetUserGroups() didn't. This commit makes GetUserGroups() also return SYSDB_PRIMARY_GROUP_GIDNUM value. Resolves: https://github.com/SSSD/sssd/issues/4569 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5272/head:pr5272 git checkout pr5272

5 26

Implementing an AAD plugin
by Yancho Yanev 30 Sep '20

30 Sep '20

Hello, We are trying to integrate Azure Active Directory with Linux. We already did NSSWITCH and PAM prototypes but it looks like SSSD is a much better extension place because of the caching and offline capabilities. Unfortunately I cannot find sample code or instructions how to write a SSSD plugin. Neither I can see a devel package with the interface definitions. How do we add a provider? Can we do it in our own repo or the only way is to develop in yours? Also, I see that you are "fedorahosted". If this a clone for Fedora only? Does your enlistment produce Ubuntu packages or is the Ubuntu stuff in a different place? Thank you, Yancho Yanev

1 0

[sssd PR#5296][opened] AD: validate `search_bases` in DPM_ACCT_DOMAIN_HANDLER
by alexey-tikhonov 30 Sep '20

30 Sep '20

URL: https://github.com/SSSD/sssd/pull/5296 Author: alexey-tikhonov Title: #5296: AD: validate `search_bases` in DPM_ACCT_DOMAIN_HANDLER Action: opened PR body: """ In specific circumstances "sdom->*_search_bases" might be unset yet when "ad_get_account_domain_send() -> ad_get_account_domain_prepare_search()" is executed. Resolves: https://github.com/SSSD/sssd/issues/5295 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5296/head:pr5296 git checkout pr5296

3 15

[sssd PR#5297][opened] Fix IP network by address lookup
by scabrero 30 Sep '20

30 Sep '20

URL: https://github.com/SSSD/sssd/pull/5297 Author: scabrero Title: #5297: Fix IP network by address lookup Action: opened PR body: """ Resolves https://github.com/SSSD/sssd/issues/5256. The first commit fixes the error path when an IP host is not found in the proxy provider. A memory allocation error was logged because we didn't jump to done label after receiving ENOENT. ``` [be[test]] [proxy_save_host] (0x0040): Cannot get cased name. [be[test]] [get_host_byname] (0x0040): Failed to store host [(null)] [12]: Cannot allocate memory ``` """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5297/head:pr5297 git checkout pr5297

4 13

[sssd PR#5307][opened] (WiP) Covscan issues cleanup
by alexey-tikhonov 30 Sep '20

30 Sep '20

URL: https://github.com/SSSD/sssd/pull/5307 Author: alexey-tikhonov Title: #5307: (WiP) Covscan issues cleanup Action: opened PR body: """ Set of patches to address covscan issues. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5307/head:pr5307 git checkout pr5307

4 17

[sssd PR#5283][opened] Add dyndns_auth_ptr support
by joakim-tjernlund 29 Sep '20

29 Sep '20

URL: https://github.com/SSSD/sssd/pull/5283 Author: joakim-tjernlund Title: #5283: Add dyndns_auth_ptr support Action: opened PR body: """ Allows to specify auth method for DNS PTR updates. Default to same as dyndns_auth. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5283/head:pr5283 git checkout pr5283

4 28

[sssd PR#5313][opened] KCM: Fix SSH GSSAPI delegation for the memory back end
by justin-stephenson 29 Sep '20

29 Sep '20

URL: https://github.com/SSSD/sssd/pull/5313 Author: justin-stephenson Title: #5313: KCM: Fix SSH GSSAPI delegation for the memory back end Action: opened PR body: """ When GSSAPI credentials are delegated over SSH, the KCM set default ccache operation looks for a ERR_NO_CREDS return code to continue handling the SSH-created ccache correctly. https://github.com/SSSD/sssd/blob/fbc7082149ccc6ee4fe077480a5d692a86e75c79/… The memory back end will now return this error code in this situation, matching the default secdb back end. Note we already have a multihost for GSSAPI delegation with the default KCM back end. The memory back end is only returning ERR_KCM_CC_END, so i'm not sure if we should be returning ERR_KCM_CC_END elsewhere. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5313/head:pr5313 git checkout pr5313

3 18

[sssd PR#5302][opened] conf: disable python2 bindings by default
by pbrezina 29 Sep '20

29 Sep '20

URL: https://github.com/SSSD/sssd/pull/5302 Author: pbrezina Title: #5302: conf: disable python2 bindings by default Action: opened PR body: """ Python2 is being fully replaced by Python3 on modern distros so there is no need to build the bindings by default. We even don't ship python2 packages in Fedora for quite some time now. Keeping this on by default requires using --without-python2-bindings on modern distributions where python2 is not installed by default. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5302/head:pr5302 git checkout pr5302

3 13

[sssd PR#5318][opened] enable files domain in copr builds for testing
by sgoveas 29 Sep '20

29 Sep '20

URL: https://github.com/SSSD/sssd/pull/5318 Author: sgoveas Title: #5318: enable files domain in copr builds for testing Action: opened PR body: """ Tests against copr build fail without this option enabled Signed-off-by: Steeve Goveas <sgoveas(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5318/head:pr5318 git checkout pr5318

4 9

[sssd PR#5339][opened] MAN: update 'ldap_referrals' config entry
by tscherf 29 Sep '20

29 Sep '20

URL: https://github.com/SSSD/sssd/pull/5339 Author: tscherf Title: #5339: MAN: update 'ldap_referrals' config entry Action: opened PR body: """ Add explicit statement that 'ldap_referrals' should be turned off when Active Directory is used as a backend with the SSSD LDAP provider. Resolves: https://github.com/SSSD/sssd/issues/5338 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5339/head:pr5339 git checkout pr5339

3 12

[sssd PR#5252][opened] Add offline_timeout_max option to control offline interval backoff
by deastoe 23 Sep '20

23 Sep '20

URL: https://github.com/SSSD/sssd/pull/5252 Author: deastoe Title: #5252: Add offline_timeout_max option to control offline interval backoff Action: opened PR body: """ The offline_timeout period determines the minimum time between attempts of a data provider to go back online, if it is offline due to eg. unreachable servers. Each time this check fails there is a backoff factor applied meaning there can be up to 60 minutes between these attempts. Here we introduce the offline_timeout_max option which allows the the maximum period between attempts to be defined in the configuration, instead of the default 60 minutes; therefore providing more flexibility. Setting offline_timeout_max to 0 disables the backoff functionality. Additionally fix two issues observed in be_ptask scheduling: - Backoff is not applied on the first re-schedule operation - The maximum backoff value (previously hardcoded) might not be reached. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5252/head:pr5252 git checkout pr5252

4 13

[sssd PR#5324][opened] MAN: fix 'pam_responsive_filter' option type
by tscherf 23 Sep '20

23 Sep '20

URL: https://github.com/SSSD/sssd/pull/5324 Author: tscherf Title: #5324: MAN: fix 'pam_responsive_filter' option type Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5324/head:pr5324 git checkout pr5324

3 12

[sssd PR#5326][opened] sss_nss_idmap-tests: fixed error in iteration over `test_data`
by alexey-tikhonov 23 Sep '20

23 Sep '20

URL: https://github.com/SSSD/sssd/pull/5326 Author: alexey-tikhonov Title: #5326: sss_nss_idmap-tests: fixed error in iteration over `test_data` Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5326/head:pr5326 git checkout pr5326

3 9

[sssd PR#5327][opened] Disable LTO for unit tests using --wrap
by alexey-tikhonov 23 Sep '20

23 Sep '20

URL: https://github.com/SSSD/sssd/pull/5327 Author: alexey-tikhonov Title: #5327: Disable LTO for unit tests using --wrap Action: opened PR body: """ Additionally, gets rid of unneeded `libsss_nss_idmap_tests`. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5327/head:pr5327 git checkout pr5327

2 7

[sssd PR#5322][opened] spec: disable lto to make mock build work
by pbrezina 23 Sep '20

23 Sep '20

URL: https://github.com/SSSD/sssd/pull/5322 Author: pbrezina Title: #5322: spec: disable lto to make mock build work Action: opened PR body: """ Mock build on Fedora 33+ does not work in PRCI because LTO is incompatible with out tests. This is just a quick fix to make PRCI green again. If anyone has an idea how to disable it for make check only, bring it. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5322/head:pr5322 git checkout pr5322

2 3

[sssd PR#5316][opened] SSSCTL: fix logs-remove when log directory is empty
by luizluca 21 Sep '20

21 Sep '20

URL: https://github.com/SSSD/sssd/pull/5316 Author: luizluca Title: #5316: SSSCTL: fix logs-remove when log directory is empty Action: opened PR body: """ "sssctl logs-remove" calls "truncate --size 0 *.log" and "*.log" will expand to literal '*.log' when directory is empty. The result is a new empty '*.log' file. Add '--no-create' to truncate call. Signed-off-by: Luiz Angelo Daros de Luca <luizluca(a)gmail.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5316/head:pr5316 git checkout pr5316

3 9

[sssd PR#5319][opened] Covscan cleanup
by alexey-tikhonov 21 Sep '20

21 Sep '20

URL: https://github.com/SSSD/sssd/pull/5319 Author: alexey-tikhonov Title: #5319: Covscan cleanup Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5319/head:pr5319 git checkout pr5319

3 20

[sssd PR#5226][closed] python/pysss_nss_idmap: check return from functions
by pbrezina 17 Sep '20

17 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Author: ikerexxe Title: #5226: python/pysss_nss_idmap: check return from functions Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5226/head:pr5226 git checkout pr5226

1 0

[sssd PR#5226][-Ready to push] python/pysss_nss_idmap: check return from functions
by pbrezina 17 Sep '20

17 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: -Ready to push

1 0

[sssd PR#5226][-Accepted] python/pysss_nss_idmap: check return from functions
by pbrezina 17 Sep '20

17 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: -Accepted

1 0

[sssd PR#5226][+Pushed] python/pysss_nss_idmap: check return from functions
by pbrezina 17 Sep '20

17 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: +Pushed

1 0

[sssd PR#5226][comment] python/pysss_nss_idmap: check return from functions
by pbrezina 17 Sep '20

17 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5226 * `master` * 03b00f72e4997f887a73b0ae7c5ca6715a453961 - python/pysss: if PyModule* fails decrement references * 8b1a8cf9379c09b3f352b5749f4e0125ac3212d8 - python/pyhbac: if PyModule* fails decrement references * c008d899f001dac455b129d1df53c9da7c5858cd - python/pysss_nss_idmap: check return from functions * 838baa837370bcc911adca446ed4709a2f1094ba - util/sss_python: change MODINITERROR to dereference module """ See the full comment at https://github.com/SSSD/sssd/pull/5226#issuecomment-694192253

1 0

[sssd PR#5226][+Ready to push] python/pysss_nss_idmap: check return from functions
by pbrezina 17 Sep '20

17 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: +Ready to push

1 0

[sssd PR#5299][opened] dp: fix potential race condition in provider's sbus server
by pbrezina 17 Sep '20

17 Sep '20

URL: https://github.com/SSSD/sssd/pull/5299 Author: pbrezina Title: #5299: dp: fix potential race condition in provider's sbus server Action: opened PR body: """ We can hit a segfault if provider start is somehow delayed. - dp_init_send - sbus_server_create_and_connect_send - sbus_server_create (*) - dp_init_done (callback for sbus_server_create_and_connect_send) - sbus_server_create_and_connect_recv - sbus_server_set_on_connection (sets clients data and creates dp_cli) At (*) sbus server is already created and accepts new connections once we get into tevent loop. So it is possible that the client connects to server before sbus_server_set_on_connection is called and thus the client is not properly initialized. However it should not happen in normal start because providers are started before responders and it can happen only if data provider startup is somehow delay. You can use this diff to reproduce the crash: ```diff --- a/src/providers/data_provider_be.c +++ b/src/providers/data_provider_be.c @@ -702,6 +702,8 @@ int main(int argc, const char *argv[]) uid_t uid; gid_t gid; + sleep(5); + struct poptOption long_options[] = { POPT_AUTOHELP SSSD_MAIN_OPTS ``` Resolves: https://github.com/SSSD/sssd/issues/5298 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5299/head:pr5299 git checkout pr5299

2 24

[sssd PR#5315][opened] ldap: add ldap_sasl_realm to cfg_rules.ini
by luizluca 17 Sep '20

17 Sep '20

URL: https://github.com/SSSD/sssd/pull/5315 Author: luizluca Title: #5315: ldap: add ldap_sasl_realm to cfg_rules.ini Action: opened PR body: """ Fixes #5314 Signed-off-by: Luiz Angelo Daros de Luca <luizluca(a)gmail.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5315/head:pr5315 git checkout pr5315

3 9

[sssd PR#5317][opened] CLIENT:PAM: fixed missed return check
by alexey-tikhonov 17 Sep '20

17 Sep '20

URL: https://github.com/SSSD/sssd/pull/5317 Author: alexey-tikhonov Title: #5317: CLIENT:PAM: fixed missed return check Action: opened PR body: """ Return code of `prompt_2fa()` wasn't checked and thus its fail wasn't properly processed. Spotted with a help of following warning: ``` Error: CLANG_WARNING: sssd-2.3.2/src/sss_client/pam_sss.c:2355:21: warning: Value stored to 'ret' is never read # ret = prompt_2fa(pamh, pi, _("First Factor (Current Password): "), # ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ``` """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5317/head:pr5317 git checkout pr5317

3 10

[sssd PR#5226][+Accepted] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: +Accepted

1 0

[sssd PR#5226][-Waiting for review] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: -Waiting for review

1 0

[sssd PR#5226][comment] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions alexey-tikhonov commented: """ Thank you. ACK. """ See the full comment at https://github.com/SSSD/sssd/pull/5226#issuecomment-693559497

1 0

[sssd PR#5226][synchronized] python/pysss_nss_idmap: check return from functions
by ikerexxe 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Author: ikerexxe Title: #5226: python/pysss_nss_idmap: check return from functions Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5226/head:pr5226 git checkout pr5226

1 0

[sssd PR#5226][synchronized] python/pysss_nss_idmap: check return from functions
by ikerexxe 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Author: ikerexxe Title: #5226: python/pysss_nss_idmap: check return from functions Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5226/head:pr5226 git checkout pr5226

1 0

[sssd PR#5226][reopened] python/pysss_nss_idmap: check return from functions
by ikerexxe 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Author: ikerexxe Title: #5226: python/pysss_nss_idmap: check return from functions Action: reopened To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5226/head:pr5226 git checkout pr5226

1 0

[sssd PR#5226][closed] python/pysss_nss_idmap: check return from functions
by ikerexxe 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Author: ikerexxe Title: #5226: python/pysss_nss_idmap: check return from functions Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5226/head:pr5226 git checkout pr5226

1 0

[sssd PR#5226][comment] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions alexey-tikhonov commented: """ Thank you for the updated version. Please see a couple of comments inline. """ See the full comment at https://github.com/SSSD/sssd/pull/5226#issuecomment-693396748

1 0

[sssd PR#5226][-Changes requested] python/pysss_nss_idmap: check return from functions
by ikerexxe 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: -Changes requested

1 0

[sssd PR#5226][+Waiting for review] python/pysss_nss_idmap: check return from functions
by ikerexxe 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: +Waiting for review

1 0

[sssd PR#5226][synchronized] python/pysss_nss_idmap: check return from functions
by ikerexxe 16 Sep '20

16 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Author: ikerexxe Title: #5226: python/pysss_nss_idmap: check return from functions Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5226/head:pr5226 git checkout pr5226

1 0

SELinux attributes in Samba domain
by Mikhail Novosyolov 14 Sep '20

14 Sep '20

Hello everyone! I am thinking about storing SELinux attributes of domain users in Samba AD domain. The problem is that Samba AD copies Windows domain, but there is no SELinux in Windows. Currently FreeIPA can store this as a server in LDAP and sssd can get and apply SELinux attributes from FreeIPA's LDAP: $ grep -inHr ipaSELinux src/providers/ipa/ipa_config.h:34:#define IPA_CONFIG_SELINUX_DEFAULT_USER_CTX "ipaSELinuxUserMapDefault" src/providers/ipa/ipa_config.h:35:#define IPA_CONFIG_SELINUX_MAP_ORDER "ipaSELinuxUserMapOrder" src/providers/ipa/ipa_opts.c:271: { "ipa_selinux_usermap_object_class", "ipaselinuxusermap", SYSDB_SELINUX_USERMAP_CLASS, NULL}, src/providers/ipa/ipa_opts.c:276: { "ipa_selinux_usermap_selinux_user", "ipaSELinuxUser", SYSDB_SELINUX_USER, NULL}, In general it just gets a string and processes it, this email is about storing that string inside the domain per user. My question is: how can SELinux attributes be stored inside Samba? I understand that it will not a standartized name (but maybe we can come up to upstreamizing something into sssd...?), but I am ready to keep with something not upstream for now and to try to make SSSD to the same for selinux in Samba as it does in FreeIPA. I think I should extend Samba's scheme with custom attributes like in the guide http://david-latham.blogspot.com/2012/12/extending-ad-schema-on-samba4.html And then try to make sssd read those values. Does it sound like a not very bad approach? Thanks!

1 0

[sssd PR#5226][+Changes requested] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: +Changes requested

1 0

[sssd PR#5226][-Waiting for review] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: -Waiting for review

1 0

[sssd PR#5226][comment] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions alexey-tikhonov commented: """ Why do we need both `MODINITERROR` and `FREEMOD_AND_RETURN`? I still think we can have single macro (calling `Py_XDECREF` on NULL should be safe) and use it everywhere. """ See the full comment at https://github.com/SSSD/sssd/pull/5226#issuecomment-692215487

1 0

[sssd PR#5226][-Changes requested] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: -Changes requested

1 0

[sssd PR#5226][+Waiting for review] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: +Waiting for review

1 0

[sssd PR#5178][closed] ldap: add new option ldap_library_debug_level
by pbrezina 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5178 Author: sumit-bose Title: #5178: ldap: add new option ldap_library_debug_level Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5178/head:pr5178 git checkout pr5178

1 0

[sssd PR#5178][-Ready to push] ldap: add new option ldap_library_debug_level
by pbrezina 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5178 Title: #5178: ldap: add new option ldap_library_debug_level Label: -Ready to push

1 0

[sssd PR#5178][-Accepted] ldap: add new option ldap_library_debug_level
by pbrezina 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5178 Title: #5178: ldap: add new option ldap_library_debug_level Label: -Accepted

1 0

[sssd PR#5178][+Pushed] ldap: add new option ldap_library_debug_level
by pbrezina 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5178 Title: #5178: ldap: add new option ldap_library_debug_level Label: +Pushed

1 0

[sssd PR#5178][comment] ldap: add new option ldap_library_debug_level
by pbrezina 14 Sep '20

14 Sep '20

URL: https://github.com/SSSD/sssd/pull/5178 Title: #5178: ldap: add new option ldap_library_debug_level pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5178 * `master` * 5fb22633d2d35867aef26028a240b86c9da1a524 - ldap: add new option ldap_library_debug_level """ See the full comment at https://github.com/SSSD/sssd/pull/5178#issuecomment-691941292

1 0

[sssd PR#5203][comment] sss_cache: Do nothing if SYSTEMD_OFFLINE=1
by cgwalters 10 Sep '20

10 Sep '20

URL: https://github.com/SSSD/sssd/pull/5203 Title: #5203: sss_cache: Do nothing if SYSTEMD_OFFLINE=1 cgwalters commented: """ LGTM. Another case where we want to us this is anywhere that `useradd --root /path/to/altroot` is invoked as is the case in Ignition today. We don't want to involve anything sssd there, just want to modify the `/etc/passwd` files and that's it. See https://bugzilla.redhat.com/show_bug.cgi?id=1874747 """ See the full comment at https://github.com/SSSD/sssd/pull/5203#issuecomment-690369061

1 0

[sssd PR#5203][edited] sss_cache: Do nothing if SYSTEMD_OFFLINE=1
by travier 10 Sep '20

10 Sep '20

URL: https://github.com/SSSD/sssd/pull/5203 Author: travier Title: #5203: sss_cache: Do nothing if SYSTEMD_OFFLINE=1 Action: edited Changed field: body Original value: """ Do not check for `/var` being RO as this will break cases where we explicitely request sssd not to update the cache by setting `SYSTEMD_OFFLINE=1`. This will still complain if `/var` is RO and `SYSTEMD_OFFLINE` is not set. See initial discussion at: https://pagure.io/SSSD/sssd/pull-request/3959 Fixes: sss_cache: Do nothing if /var is read-only https://github.com/SSSD/sssd/commit/073b03a096a763170165fe3814fa987881713e75 """

1 0

[sssd PR#5203][edited] sss_cache: Do nothing if SYSTEMD_OFFLINE=1
by travier 10 Sep '20

10 Sep '20

URL: https://github.com/SSSD/sssd/pull/5203 Author: travier Title: #5203: sss_cache: Do nothing if SYSTEMD_OFFLINE=1 Action: edited Changed field: body Original value: """ Do not check for /var being RO as this will break cases where we explicitely request sssd not to update the cache by setting SYSTEMD_OFFLINE=1. This will still complain if /var is RO and SYSTEMD_OFFLINE is not set. See initial discussion at: https://pagure.io/SSSD/sssd/pull-request/3959 Fixes: sss_cache: Do nothing if /var is read-only https://github.com/SSSD/sssd/commit/073b03a096a763170165fe3814fa987881713e75 """

1 0

[sssd PR#5203][edited] sss_cache: Do nothing if SYSTEMD_OFFLINE=1
by travier 10 Sep '20

10 Sep '20

URL: https://github.com/SSSD/sssd/pull/5203 Author: travier Title: #5203: sss_cache: Do nothing if SYSTEMD_OFFLINE=1 Action: edited Changed field: body Original value: """ sssd_cache will not be able to operate successfully if either condition is true thus avoid checking for both. See initial discussion at: https://pagure.io/SSSD/sssd/pull-request/3959 Fixes: sss_cache: Do nothing if /var is read-only https://github.com/SSSD/sssd/commit/073b03a096a763170165fe3814fa987881713e75 """

1 0

[sssd PR#5203][edited] sss_cache: Do nothing if SYSTEMD_OFFLINE=1
by travier 10 Sep '20

10 Sep '20

URL: https://github.com/SSSD/sssd/pull/5203 Author: travier Title: #5203: sss_cache: Do nothing if SYSTEMD_OFFLINE=1 Action: edited Changed field: title Original value: """ sss_cache: Do nothing if either /var is RO or SYSTEMD_OFFLINE=1 """

1 0

[sssd PR#5226][comment] python/pysss_nss_idmap: check return from functions
by ikerexxe 09 Sep '20

09 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions ikerexxe commented: """ > I think you just spotted yet another one place that needs fixing: `TYPE_READY` calls `PyModule_AddObject()` and doesn't check a result. > > Moreover, taking into account where this macro (`TYPE_READY`) is used, `Py_XDECREF` should be called there as well, IMO. Agreed. Take a look to the latest update, which contains all the aforementioned errors fixed. """ See the full comment at https://github.com/SSSD/sssd/pull/5226#issuecomment-689423505

1 0

[sssd PR#5226][synchronized] python/pysss_nss_idmap: check return from functions
by ikerexxe 09 Sep '20

09 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Author: ikerexxe Title: #5226: python/pysss_nss_idmap: check return from functions Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5226/head:pr5226 git checkout pr5226

1 0

[sssd PR#5226][comment] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 08 Sep '20

08 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions alexey-tikhonov commented: """ I think you just spotted yet another one place that needs fixing: `TYPE_READY` calls `PyModule_AddObject()` and doesn't check a result. Moreover, taking into account where this macro (`TYPE_READY`) is used, `Py_XDECREF` should be called there as well, IMO. """ See the full comment at https://github.com/SSSD/sssd/pull/5226#issuecomment-688929798

1 0

[sssd PR#5226][comment] python/pysss_nss_idmap: check return from functions
by ikerexxe 08 Sep '20

08 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions ikerexxe commented: """ > Thanks for the update. Please see comment inline. Yes, it makes sense. I'll change it. > > Btw, wouldn't it make sense to include `Py_DECREF(module);` (actually better `Py_XDECREF`) into `MODINITERROR`? It makes sense to include `Py_XDECREF(module)` in another macro called `FREEMOD_AND_RETURN`(?) and call it from the changes I've made. I wouldn't like messing with `MODINITERROR` as it's already called from other places where it doesn't make to decrease module. An example: https://github.com/SSSD/sssd/blob/fbc7082149ccc6ee4fe077480a5d692a86e75c79/… What do you think? """ See the full comment at https://github.com/SSSD/sssd/pull/5226#issuecomment-688916091

1 0

[sssd PR#5226][+Changes requested] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 07 Sep '20

07 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: +Changes requested

1 0

[sssd PR#5226][-Waiting for review] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 07 Sep '20

07 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: -Waiting for review

1 0

[sssd PR#5226][comment] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 07 Sep '20

07 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions alexey-tikhonov commented: """ Thanks for the update. Please see comment inline. Btw, wouldn't it make sense to include `Py_DECREF(module);` (actually better `Py_XDECREF`) into `MODINITERROR`? """ See the full comment at https://github.com/SSSD/sssd/pull/5226#issuecomment-688432755

1 0

[sssd PR#5226][+Waiting for review] python/pysss_nss_idmap: check return from functions
by ikerexxe 07 Sep '20

07 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: +Waiting for review

1 0

[sssd PR#5226][-Changes requested] python/pysss_nss_idmap: check return from functions
by ikerexxe 07 Sep '20

07 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: -Changes requested

1 0

[sssd PR#5226][synchronized] python/pysss_nss_idmap: check return from functions
by ikerexxe 07 Sep '20

07 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Author: ikerexxe Title: #5226: python/pysss_nss_idmap: check return from functions Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5226/head:pr5226 git checkout pr5226

1 0

[sssd PR#5178][+Ready to push] ldap: add new option ldap_library_debug_level
by pbrezina 04 Sep '20

04 Sep '20

URL: https://github.com/SSSD/sssd/pull/5178 Title: #5178: ldap: add new option ldap_library_debug_level Label: +Ready to push

1 0

[sssd PR#5178][+Accepted] ldap: add new option ldap_library_debug_level
by pbrezina 04 Sep '20

04 Sep '20

URL: https://github.com/SSSD/sssd/pull/5178 Title: #5178: ldap: add new option ldap_library_debug_level Label: +Accepted

1 0

[sssd PR#5178][comment] ldap: add new option ldap_library_debug_level
by pbrezina 04 Sep '20

04 Sep '20

URL: https://github.com/SSSD/sssd/pull/5178 Title: #5178: ldap: add new option ldap_library_debug_level pbrezina commented: """ Ack. """ See the full comment at https://github.com/SSSD/sssd/pull/5178#issuecomment-687084934

1 0

[sssd PR#5223][closed] [wip] Add .clang-format
by pbrezina 04 Sep '20

04 Sep '20

URL: https://github.com/SSSD/sssd/pull/5223 Author: pbrezina Title: #5223: [wip] Add .clang-format Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5223/head:pr5223 git checkout pr5223

1 0

[sssd PR#5223][comment] [wip] Add .clang-format
by pbrezina 04 Sep '20

04 Sep '20

URL: https://github.com/SSSD/sssd/pull/5223 Title: #5223: [wip] Add .clang-format pbrezina commented: """ I am closing this PR. clang-format is not smart enough to actually do this automatically and there was no desire to bring this upstream since I seem to be the only user. """ See the full comment at https://github.com/SSSD/sssd/pull/5223#issuecomment-687049676

1 0

[sssd PR#5270][opened] CONFDB: fixed compilation warning
by alexey-tikhonov 04 Sep '20

04 Sep '20

URL: https://github.com/SSSD/sssd/pull/5270 Author: alexey-tikhonov Title: #5270: CONFDB: fixed compilation warning Action: opened PR body: """ Fixed following compilation warning: ``` ../src/confdb/confdb.c: In function ‘confdb_get_domains’: ../src/confdb/confdb.c:2499:12: warning: ‘enabled’ may be used uninitialized in this function [-Wmaybe-uninitialized] ``` """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5270/head:pr5270 git checkout pr5270

3 20

[sssd PR#5294][opened] krb5: only try pkinit with Smartcard credentials
by sumit-bose 04 Sep '20

04 Sep '20

URL: https://github.com/SSSD/sssd/pull/5294 Author: sumit-bose Title: #5294: krb5: only try pkinit with Smartcard credentials Action: opened PR body: """ Currently pkinit is tried if a Smartcard is present. But depending on the used PAM service and other configurations it might happen that the user didn't provide the Smartcard PIN but e.g. the password. Hence, before trying pkinit we should check if the right credentials are available. Resolves: https://github.com/SSSD/sssd/issues/5290 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5294/head:pr5294 git checkout pr5294

3 12

[sssd PR#269][opened] Add support for ActiveDirectory's logonHours restrictions
by NWilson 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/269 Author: NWilson Title: #269: Add support for ActiveDirectory's logonHours restrictions Action: opened PR body: """ This is a straightforward patch for denying access to a user when the user is not permitted to access their account due to logonHours restrictions. This matches the default behaviour for domain-joined Windows machines. When outside the logonHours, all types of authentication are denied (password/Kerberos/certificate) - so it is appropriate to put this check inside the PAM "account" rules. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/269/head:pr269 git checkout pr269

9 30

[sssd PR#5234][-Accepted] pam: use requested_domains to restrict cache_req searches
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches Label: -Accepted

1 0

[sssd PR#5234][closed] pam: use requested_domains to restrict cache_req searches
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Author: sumit-bose Title: #5234: pam: use requested_domains to restrict cache_req searches Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5234/head:pr5234 git checkout pr5234

1 0

[sssd PR#5234][-Ready to push] pam: use requested_domains to restrict cache_req searches
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches Label: -Ready to push

1 0

[sssd PR#5234][+Pushed] pam: use requested_domains to restrict cache_req searches
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches Label: +Pushed

1 0

[sssd PR#5234][comment] pam: use requested_domains to restrict cache_req searches
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5234 * `master` * 35ab0493a68e37f7107e02a19bd04e3c036ef9e3 - pam_sss: clarify man page entry of domains option * db170d0a4793afebf69d9fa87d19dd6bbe1ceeca - intg: krb5 auth and pam_sss domains option test * 3808c04fb2f091204acdd093041d7d35eb540fb1 - pam: use requested_domains to restrict cache_req searches * 6ec94790e790d43e1d6ffdd47d0537e92e64e05c - tests: add unit-test for cache_req_data_set_requested_domains * b50521e46263be79a1c847637daade0891c3eb6c - cache_req: allow to restrict the domains an object is search in """ See the full comment at https://github.com/SSSD/sssd/pull/5234#issuecomment-686417332

1 0

[sssd PR#5239][closed] gpo: use correct base dn
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5239 Author: pbrezina Title: #5239: gpo: use correct base dn Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5239/head:pr5239 git checkout pr5239

1 0

[sssd PR#5239][-Accepted] gpo: use correct base dn
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5239 Title: #5239: gpo: use correct base dn Label: -Accepted

1 0

[sssd PR#5239][+Pushed] gpo: use correct base dn
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5239 Title: #5239: gpo: use correct base dn Label: +Pushed

1 0

[sssd PR#5239][-Ready to push] gpo: use correct base dn
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5239 Title: #5239: gpo: use correct base dn Label: -Ready to push

1 0

[sssd PR#5239][comment] gpo: use correct base dn
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5239 Title: #5239: gpo: use correct base dn pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5239 * `master` * a0792b32fce7a029768be8e0fc78741218564cd8 - gpo: use correct base dn * d79f59338a42f8aec4d489a83a584fc187baffe2 - gpo: remove unused variable domain_dn """ See the full comment at https://github.com/SSSD/sssd/pull/5239#issuecomment-686417080

1 0

[sssd PR#5241][-Ready to push] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules Label: -Ready to push

1 0

[sssd PR#5241][closed] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5241 Author: sumit-bose Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5241/head:pr5241 git checkout pr5241

1 0

[sssd PR#5241][-Accepted] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules Label: -Accepted

1 0

[sssd PR#5241][+Pushed] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules Label: +Pushed

1 0

[sssd PR#5241][comment] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5241 * `master` * 69e1f5fe79806a530e90c8af09bedd3b9e6b4dac - GPO: respect ad_gpo_implicit_deny when evaluation rules """ See the full comment at https://github.com/SSSD/sssd/pull/5241#issuecomment-686416799

1 0

[sssd PR#5304][closed] Add seconds in copr build version
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5304 Author: sgoveas Title: #5304: Add seconds in copr build version Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5304/head:pr5304 git checkout pr5304

1 0

[sssd PR#5304][-Ready to push] Add seconds in copr build version
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5304 Title: #5304: Add seconds in copr build version Label: -Ready to push

1 0

[sssd PR#5304][-Accepted] Add seconds in copr build version
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5304 Title: #5304: Add seconds in copr build version Label: -Accepted

1 0

[sssd PR#5304][+Pushed] Add seconds in copr build version
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5304 Title: #5304: Add seconds in copr build version Label: +Pushed

1 0

[sssd PR#5304][comment] Add seconds in copr build version
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5304 Title: #5304: Add seconds in copr build version pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5304 * `master` * 39c564beccd3dff5421ef082a15e62d8345aa58f - Add seconds in copr version """ See the full comment at https://github.com/SSSD/sssd/pull/5304#issuecomment-686416617

1 0

[sssd PR#5305][opened] pytest/testlib: Execute pk12util command to create ca.p12
by mrniranjan 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5305 Author: mrniranjan Title: #5305: pytest/testlib: Execute pk12util command to create ca.p12 Action: opened PR body: """ execute the pk12util command to create ca.p12 file Minor fix: return variable should be out of the for loop scope Signed-off-by: Niranjan M.R <mrniranjan(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5305/head:pr5305 git checkout pr5305

2 8

[sssd PR#5234][comment] pam: use requested_domains to restrict cache_req searches
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches pbrezina commented: """ Thank you. Ack. """ See the full comment at https://github.com/SSSD/sssd/pull/5234#issuecomment-686415705

1 0

[sssd PR#5234][+Ready to push] pam: use requested_domains to restrict cache_req searches
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches Label: +Ready to push

1 0

[sssd PR#5234][-Waiting for review] pam: use requested_domains to restrict cache_req searches
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches Label: -Waiting for review

1 0

[sssd PR#5234][+Accepted] pam: use requested_domains to restrict cache_req searches
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches Label: +Accepted

1 0

[sssd PR#5239][+Ready to push] gpo: use correct base dn
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5239 Title: #5239: gpo: use correct base dn Label: +Ready to push

1 0

[sssd PR#5304][comment] Add seconds in copr build version
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5304 Title: #5304: Add seconds in copr build version pbrezina commented: """ Thank you. Ack. """ See the full comment at https://github.com/SSSD/sssd/pull/5304#issuecomment-686414311

1 0

[sssd PR#5304][+Ready to push] Add seconds in copr build version
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5304 Title: #5304: Add seconds in copr build version Label: +Ready to push

1 0

[sssd PR#5304][+Accepted] Add seconds in copr build version
by pbrezina 03 Sep '20

03 Sep '20

URL: https://github.com/SSSD/sssd/pull/5304 Title: #5304: Add seconds in copr build version Label: +Accepted

1 0

[sssd PR#5239][+Accepted] gpo: use correct base dn
by elkoniu 02 Sep '20

02 Sep '20

URL: https://github.com/SSSD/sssd/pull/5239 Title: #5239: gpo: use correct base dn Label: +Accepted

1 0

[sssd PR#5239][-Waiting for review] gpo: use correct base dn
by elkoniu 02 Sep '20

02 Sep '20

URL: https://github.com/SSSD/sssd/pull/5239 Title: #5239: gpo: use correct base dn Label: -Waiting for review

1 0

[sssd PR#5234][comment] pam: use requested_domains to restrict cache_req searches
by sumit-bose 02 Sep '20

02 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches sumit-bose commented: """ > LGTM except mentioning pam_sss inside cache_req. ah, sorry, I missed this. Latest version should fix it. """ See the full comment at https://github.com/SSSD/sssd/pull/5234#issuecomment-685640787

1 0

[sssd PR#5234][synchronized] pam: use requested_domains to restrict cache_req searches
by sumit-bose 02 Sep '20

02 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Author: sumit-bose Title: #5234: pam: use requested_domains to restrict cache_req searches Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5234/head:pr5234 git checkout pr5234

1 0

[sssd PR#5234][synchronized] pam: use requested_domains to restrict cache_req searches
by sumit-bose 02 Sep '20

02 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Author: sumit-bose Title: #5234: pam: use requested_domains to restrict cache_req searches Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5234/head:pr5234 git checkout pr5234

1 0

[sssd PR#5226][+Changes requested] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: +Changes requested

1 0

[sssd PR#5226][-Waiting for review] python/pysss_nss_idmap: check return from functions
by alexey-tikhonov 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5226 Title: #5226: python/pysss_nss_idmap: check return from functions Label: -Waiting for review

1 0

[sssd PR#5239][comment] gpo: use correct base dn
by pbrezina 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5239 Title: #5239: gpo: use correct base dn pbrezina commented: """ @elkoniu Bump. """ See the full comment at https://github.com/SSSD/sssd/pull/5239#issuecomment-684758714

1 0

[sssd PR#5234][comment] pam: use requested_domains to restrict cache_req searches
by pbrezina 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5234 Title: #5234: pam: use requested_domains to restrict cache_req searches pbrezina commented: """ LGTM except mentioning pam_sss inside cache_req. """ See the full comment at https://github.com/SSSD/sssd/pull/5234#issuecomment-684758277

1 0

[sssd PR#5241][+Ready to push] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules Label: +Ready to push

1 0

[sssd PR#5241][+Accepted] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules Label: +Accepted

1 0

[sssd PR#5241][-Waiting for review] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules Label: -Waiting for review

1 0

[sssd PR#5241][comment] GPO: respect ad_gpo_implicit_deny when evaluation rules
by pbrezina 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules pbrezina commented: """ Thank you, this is great. Ack. """ See the full comment at https://github.com/SSSD/sssd/pull/5241#issuecomment-684711790

1 0

[sssd PR#5253][opened] libdirsrv should be modified to be compatible with new DS
by aborah-sudo 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5253 Author: aborah-sudo Title: #5253: libdirsrv should be modified to be compatible with new DS Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5253/head:pr5253 git checkout pr5253

5 26

[sssd PR#5301][opened] use prerealease option in make srpm script
by sgoveas 01 Sep '20

01 Sep '20

URL: https://github.com/SSSD/sssd/pull/5301 Author: sgoveas Title: #5301: use prerealease option in make srpm script Action: opened PR body: """ With --prereleasae option enabled, make_srpm.sh script can set different version each time copr build is created. It adds date time and git commit hash in the build version. eg. 2.3.2-0.20200826.1356.gitdb1049057.fc31 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5301/head:pr5301 git checkout pr5301

2 8

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel September 2020