[sssd PR#5450][opened] kcm: add support for kerberos tgt renewals
by justin-stephenson
URL: https://github.com/SSSD/sssd/pull/5450
Author: justin-stephenson
Title: #5450: kcm: add support for kerberos tgt renewals
Action: opened
PR body:
"""
This allows configuration of KCM to attempt renewals for renew-applicable kerberos tickets stored in kcm, such as a TGT retrieved with `kinit` on the command-line.
krb5* renewal and lifetime options are configurable in the [kcm] section, if they do not exist in the [kcm] section then we check and fallback to using the first `auth_provider=krb5` domain in sssd.conf.
This support is only added to the secdb ccache backend. The overall high-level logic used here is similar to the existing pam_sss krb5 renewal code, adding necessary changes to unmarshal and retrieve ticket information from KCM secrets db.
Renewal is only attempted after half of the tgt lifetime has been reached.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5450/head:pr5450
git checkout pr5450
2 years, 11 months
[sssd PR#5585][opened] Poor man's backtrace.
by alexey-tikhonov
URL: https://github.com/SSSD/sssd/pull/5585
Author: alexey-tikhonov
Title: #5585: Poor man's backtrace.
Action: opened
PR body:
"""
In case SSSD is run with debug_level < 9, log everything
to a ring buffer in memory and flush the buffer to a log file on any
error (up to and including `min(0x0040, debug_level)`)
(i.e. if `debug_level` is explicitly set to 0 or 1 then only those
error levels will trigger backtrace, otherwise up to 2).
Feature is only supported for `logger == files`.
Feature is configurable via 'debug_backtrace_enabled' option.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5585/head:pr5585
git checkout pr5585
2 years, 11 months
[sssd PR#5617][opened] man: fix p11_uri example URIs
by sigmaris
URL: https://github.com/SSSD/sssd/pull/5617
Author: sigmaris
Title: #5617: man: fix p11_uri example URIs
Action: opened
PR body:
"""
The p11_uri requires a pkcs11: scheme, using `p11_uri = slot-description=My..` without pkcs11: as a prefix will cause p11_child to log an error:
p11_kit_uri_parse failed [-2][URI scheme must be 'pkcs11:'].
Fix the examples to include the pkcs11: scheme.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5617/head:pr5617
git checkout pr5617
2 years, 11 months