[sssd PR#5935][opened] sysdb: more specific mpg search filter
by alexey-tikhonov
URL: https://github.com/SSSD/sssd/pull/5935
Author: alexey-tikhonov
Title: #5935: sysdb: more specific mpg search filter
Action: opened
PR body:
"""
Originally all user of an mpg domain had an automatically created
user-private group and as a result the ID space was unified in the sense
that a given ID either belongs to a group or to a user with a
user-private group.
With the introduction of id-overrides and the auto_private_groups option
this assumption is not true anymore and as a result the search filter
for GIDs must be more specific with respect to the user objects.
Resolves: https://github.com/SSSD/sssd/issues/5790
:fixes: Improve mpg search filter to be more reliable with id-overrides
and the new auto_private_groups options.
Reviewed-by: Pavel Březina <pbrezina(a)redhat.com>
(cherry picked from commit 4be5fcd9afd62b1094eb27970627d327ac770127)
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5935/head:pr5935
git checkout pr5935
2 years, 3 months
[sssd PR#5918][opened] Client ca validation error
by ikerexxe
URL: https://github.com/SSSD/sssd/pull/5918
Author: ikerexxe
Title: #5918: Client ca validation error
Action: opened
PR body:
"""
Improve the error handling for FindByValidCertificate() by returning a
specific exception ID when the certificate authority file is missing.
Moreover, the log lines have been changed to point to p11_child logs
when an unknown error happens.
Moreover, a new test case has been created for the certificate authority
file missing situation.
Finally, include a reference to ca_db, p11_child_timeout and
certificate_verification in sssd-ifp man page. These options can used be
to control how the certificates are validated with
FindByValidCertificate() API.
Resolves: https://github.com/SSSD/sssd/issues/5911
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5918/head:pr5918
git checkout pr5918
2 years, 3 months
[sssd PR#5933][opened] Fix for test bz1294670
by dparmar18
URL: https://github.com/SSSD/sssd/pull/5933
Author: dparmar18
Title: #5933: Fix for test bz1294670
Action: opened
PR body:
"""
test_bz1294670 in src/tests/multihost/alltests/test_sudo.py had 2 problems:
1) Wrong variable used in line 59 where there does not exist any variable named 'localuser', it should be 'user' from line 48.
2) Wrong indentation of ssh.close() on line 66, should be aligned with the indentation of 'ssh' variable declaration on line 56.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5933/head:pr5933
git checkout pr5933
2 years, 3 months
[sssd PR#5863][opened] Responder and Child process tevent chain id improvements
by justin-stephenson
URL: https://github.com/SSSD/sssd/pull/5863
Author: justin-stephenson
Title: #5863: Responder and Child process tevent chain id improvements
Action: opened
PR body:
"""
This PR adds the following tevent chain ID functionality:
* Add tevent chain ID logic into responders (log messages with tag [CID #])
* Add ability to parse child log files by passing the backend request ID into child processes and setting the chain ID inside the child.
sss_chain_id getter/setter functions moved into their own source file (remove dependency to tevent), and some small changes to analyzer are needed.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5863/head:pr5863
git checkout pr5863
2 years, 3 months