On (26/05/16 13:08), Pavel Březina wrote:
> On 05/26/2016 11:47 AM, Jakub Hrozek wrote:
>> On Thu, May 26, 2016 at 11:31:07AM +0200, Lukas Slebodnik wrote:
>>> On (16/05/16 14:00), Pavel Březina wrote:
>>>> Hi,
>>>> the patches are finally ready to be tested and reviewed. It is too huge
to be
>>>> sent to the list so please checkout my fedorapeople or github repo:
>>>>
>>>>
https://fedorapeople.org/cgit/pbrezina/public_git/sssd.git/log/?h=backend
>>>>
https://github.com/pbrezina/sssd/tree/backend
>>>>
>>>> Subdomain handlers are not yet converted so subdomain support is
disabled,
>>>> otherwise everything should work although I'm sure you'll find
some bugs.
>>>>
>>>> I managed to do some simple tests (initgroups, authentication) with ldap
>>>> provider so far and will continue testing and fixing so if you find a
bug
>>>> make sure you run with the latest version before reporting it please :-)
>>>>
>>>> Since the changes touch almost all areas of SSSD I encourage everyone to
run
>>>> and try. Some handlers were converted quite easily, some took more handy
>>>> work. Areas that are most likely to contain some bugs are these (please
give
>>>> it extra attention):
>>>>
>>>> - proxy provider
>>>> - if group membership changes during initgroups, nss memory cache should
be
>>>> clear through dbus call
>>>> - selinux support
>>>> - hbac support
>>>> - change password
>>>> - password migration (ipa)
I just had a long debugging session with Jakub and we tracked the
problem down to comparing uninitialized variable in create_initgr_ctx().
The diff is simple:
}
+ ret = EOK;
done:
if (ret != EOK) {
talloc_free(ctx);
return NULL;
}
return ctx;
}
At least integration tests should work, downstream tests are in progress
but I suppose it'll fix most of the issues if not all.