URL: https://github.com/SSSD/sssd/pull/5682
Author: rajsshah86
Title: #5682: bugfix for newline char in sss_obfuscate
Action: opened
PR body:
"""
Fixed bug which causes addition of newline character in password during encryption
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5682/head:pr5682
git checkout pr5682
URL: https://github.com/SSSD/sssd/pull/5705
Author: assafmo
Title: #5705: p11_child: do_card fix loop exit condition
Action: opened
PR body:
"""
This commit fixes the exit condition when searching for a token in p11_child/do_card, specifically in case a token is present in a slot, but there are empty slots before it.
This commit fixes issue #5025, thanks to this comment by @sumit-bose: https://github.com/SSSD/sssd/issues/5025#issuecomment-801842175
Closes #5025
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5705/head:pr5705
git checkout pr5705
URL: https://github.com/SSSD/sssd/pull/5709
Author: elkoniu
Title: #5709: General: Hardeninig getenv() usage
Action: opened
PR body:
"""
Pointer returned by getenv() should be cached locally before
it is passed down to sub functions.
This PR fixes this for:
* pam_sm_authenticate()
* sysdb_ldb_connect()
* files_init_file_sources()
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1977830
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5709/head:pr5709
git checkout pr5709
URL: https://github.com/SSSD/sssd/pull/844
Author: mastersin
Title: #844: sssd-ad and gpo_child: GPO apply fixes during reading fails
Action: opened
PR body:
"""
Ignore AD GPO errors:
- if SecEdit/GptTmpl.inf is missing
or
- if reading sysvol_gpt_version fails and cached_gpt_version already exists
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/844/head:pr844
git checkout pr844
URL: https://github.com/SSSD/sssd/pull/5693
Author: alexey-tikhonov
Title: #5693: Basics of 'subid ranges' support for IPA provider
Action: opened
PR body:
"""
This is for preliminary review.
Limitations:
- only IPA provider
- single subid interval pair (subuid+subgid) per user
- idviews aren't supported
- only forward lookup (user -> subid)
Known TODOs:
- delete cached subid ranges in case "not found" on a server
- distinguish "user not found" vs "user doesn't have ranges defined"
To test:
- build shadow-utils from latest upstream (or get Fedora Rawhide build from https://copr.fedorainfracloud.org/coprs/ipedrosa/subid_ranges/)
- build FreeIPA with https://github.com/freeipa/freeipa/pull/5713 (or ping me for details of internal test setup)
- build SSSD with this PR (enabling `--with-subid`)
- edit /etc/nsswitch.conf: `subid: sss`
- use for example this [utility](https://github.com/shadow-maint/shadow/blob/master/src/list_subi... from shadow-utils upstream to fetch subid ranges from IPA server (or `new?idmap`)
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5693/head:pr5693
git checkout pr5693