[sssd PR#5407][opened] kcm: check socket path loaded from configuration
by ikerexxe
URL: https://github.com/SSSD/sssd/pull/5407
Author: ikerexxe
Title: #5407: kcm: check socket path loaded from configuration
Action: opened
PR body:
"""
There are three major execution flows for this change:
1. If kcm socket path is not defined in sssd configuration, then log it and fall back to the default location.
2. If kcm socket path is defined in sssd configuration but the location is invalid, then log it and fall back to the default location.
3. If kcm socket path is defined in sssd configuration and the location is valid, then use it.
Apart from that some unit-tests have been implement to check that the changes work as expected.
I wonder if the changes included in confdb_get_string() should be ported to all confdb_get_*() methods.
Resolves: https://github.com/SSSD/sssd/issues/5406
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5407/head:pr5407
git checkout pr5407
3 years, 2 months
[sssd PR#5503][opened] pam_sss: Don't fail on deskprofiles phase for AD users
by stanislavlevin
URL: https://github.com/SSSD/sssd/pull/5503
Author: stanislavlevin
Title: #5503: pam_sss: Don't fail on deskprofiles phase for AD users
Action: opened
PR body:
"""
By default (if session_provider is not none) during session setup pam_sss attempts to fetch desktop rules and profiles for user from IPA domain. As part of this job, the data provider looks for the user info(uid and gid) in IPA domain but fails to do that for AD user from a trusted domain returning PAM_SESSION_ERR.
The requested target domain has been already found in `dp_req_new` and may be referenced as `params->domain`. This change doesn't introduce the possibility to fetch deskprofiles for AD users, but at least, to don't break PAM authentication for them.
Fixes: https://github.com/SSSD/sssd/issues/5499
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5503/head:pr5503
git checkout pr5503
3 years, 2 months