sssd-devel March 2021

sssd-devel@lists.fedorahosted.org

6 participants
47 discussions

[sssd PR#175][opened] Add module for starting services
by lslebodn 22 Nov '21

22 Nov '21

URL: https://github.com/SSSD/sssd/pull/175 Author: lslebodn Title: #175: Add module for starting services Action: opened PR body: """ This is a WIP version of reducing code duplication in our cwrap integration tests. I am still not sure whether we should also reuse function `create_sssd_fixture`. And if yes; then probably in different nodule then `services` And comments are welcome. BTW I wrote patches few weeks ago; therefore new tests are not converted. I am just sending patches to get some feedback. Site effect of this patches is that tests are cca 20% faster (IIRC) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/175/head:pr175 git checkout pr175

5 5

[sssd PR#5434][opened] Adding multihost tests for ad_allow_remote_domain_local_groups, bz1883488 bz1756240
by sidecontrol 13 Oct '21

13 Oct '21

URL: https://github.com/SSSD/sssd/pull/5434 Author: sidecontrol Title: #5434: Adding multihost tests for ad_allow_remote_domain_local_groups, bz1883488 bz1756240 Action: opened PR body: """ This is the first multihost test that requires more than one AD server, it requires a root, child and tree domain and users created from the playbooks in CI. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5434/head:pr5434 git checkout pr5434

4 15

[sssd PR#5473][opened] Tests: alltests: Check default debug level of sssd and corresponding logs
by madhuriupadhye 05 Oct '21

05 Oct '21

URL: https://github.com/SSSD/sssd/pull/5473 Author: madhuriupadhye Title: #5473: Tests: alltests: Check default debug level of sssd and corresponding logs Action: opened PR body: """ Check default debug level of sssd and corresponding logs It consists of four test cases: 1. Check the default debug level by authenticating the user 2. Check default level as 0 and 1 3. Check default level as 2 4. Check SBUS code triggers failure message during modules startup Verifies: Issues: #5422 #5425 Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1893159 https://bugzilla.redhat.com/show_bug.cgi?id=1915319 Signed-off-by: Madhuri Upadhye <mupadhye(a)redhat.com> """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5473/head:pr5473 git checkout pr5473

4 17

[sssd PR#844][opened] sssd-ad and gpo_child: GPO apply fixes during reading fails
by mastersin 03 Aug '21

03 Aug '21

URL: https://github.com/SSSD/sssd/pull/844 Author: mastersin Title: #844: sssd-ad and gpo_child: GPO apply fixes during reading fails Action: opened PR body: """ Ignore AD GPO errors: - if SecEdit/GptTmpl.inf is missing or - if reading sysvol_gpt_version fails and cached_gpt_version already exists """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/844/head:pr844 git checkout pr844

7 16

[sssd PR#5552][opened] files: split update into batches
by sumit-bose 09 Jul '21

09 Jul '21

URL: https://github.com/SSSD/sssd/pull/5552 Author: sumit-bose Title: #5552: files: split update into batches Action: opened PR body: """ If the files managed by the files provider contain many users or groups processing them might take a considerable amount of time. To keep the backend responsive this patch splits the update into multiple steps running one after the other but returning to the main loop in between. This avoids issues during startup because the watchdog timer state is reset properly. Additionally SBUS messages are process and as a result the domain can be marked inconsistent in the frontends properly. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5552/head:pr5552 git checkout pr5552

4 128

[sssd PR#5419][opened] Adding tests to cover ad discovery improvements using cldap
by sidecontrol 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5419 Author: sidecontrol Title: #5419: Adding tests to cover ad discovery improvements using cldap Action: opened PR body: """ * This test requires a primary and secondary domain controller so AD can be moved between sites * Currently contains four test cases ** Two DCs in one site no restrictions. ** Two DCs in one site, traffic blocked to the other DC ** DCs in seperate sites no restrictions ** DCs in seperate sites, traffic blocked to the other DC Signed-off-by: Dan Lavu <dlavu(a)redhat.com> SSSD-2497 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5419/head:pr5419 git checkout pr5419

4 10

[sssd PR#5442][opened] Adding multihost test for supporting asymmetric nsupdate auth
by sidecontrol 17 Jun '21

17 Jun '21

URL: https://github.com/SSSD/sssd/pull/5442 Author: sidecontrol Title: #5442: Adding multihost test for supporting asymmetric nsupdate auth Action: opened PR body: """ * https://bugzilla.redhat.com/show_bug.cgi?id=1884301 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5442/head:pr5442 git checkout pr5442

4 10

[sssd PR#5548][opened] Add support to verify authentication indicators in pam_sss_gss
by aborah-sudo 13 May '21

13 May '21

URL: https://github.com/SSSD/sssd/pull/5548 Author: aborah-sudo Title: #5548: Add support to verify authentication indicators in pam_sss_gss Action: opened PR body: """ Error code of '[pam_cmd_gssapi_sec_ctx] (0x0400): Check if acquired service ticket has req. indicators:'. '2' is 'not applied' (ENOENT), """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5548/head:pr5548 git checkout pr5548

4 22

[sssd PR#5550][opened] Translations update from Weblate
by weblate 10 May '21

10 May '21

URL: https://github.com/SSSD/sssd/pull/5550 Author: weblate Title: #5550: Translations update from Weblate Action: opened PR body: """ Translations update from [Weblate](https://translate.fedoraproject.org/projects/sssd/sssd-master/) for SSSD/sssd. Current translation status: ![Weblate translation status](https://translate.fedoraproject.org/widgets/sssd/-/sssd-master/hori… """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5550/head:pr5550 git checkout pr5550

2 3

[sssd PR#5450][opened] kcm: add support for kerberos tgt renewals
by justin-stephenson 10 May '21

10 May '21

URL: https://github.com/SSSD/sssd/pull/5450 Author: justin-stephenson Title: #5450: kcm: add support for kerberos tgt renewals Action: opened PR body: """ This allows configuration of KCM to attempt renewals for renew-applicable kerberos tickets stored in kcm, such as a TGT retrieved with `kinit` on the command-line. krb5* renewal and lifetime options are configurable in the [kcm] section, if they do not exist in the [kcm] section then we check and fallback to using the first `auth_provider=krb5` domain in sssd.conf. This support is only added to the secdb ccache backend. The overall high-level logic used here is similar to the existing pam_sss krb5 renewal code, adding necessary changes to unmarshal and retrieve ticket information from KCM secrets db. Renewal is only attempted after half of the tgt lifetime has been reached. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5450/head:pr5450 git checkout pr5450

5 93

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel March 2021