On Thu, May 26, 2016 at 11:31:07AM +0200, Lukas Slebodnik wrote:
> On (16/05/16 14:00), Pavel Březina wrote:
>> Hi,
>> the patches are finally ready to be tested and reviewed. It is too huge to be
>> sent to the list so please checkout my fedorapeople or github repo:
>>
>>
https://fedorapeople.org/cgit/pbrezina/public_git/sssd.git/log/?h=backend
>>
https://github.com/pbrezina/sssd/tree/backend
>>
>> Subdomain handlers are not yet converted so subdomain support is disabled,
>> otherwise everything should work although I'm sure you'll find some
bugs.
>>
>> I managed to do some simple tests (initgroups, authentication) with ldap
>> provider so far and will continue testing and fixing so if you find a bug
>> make sure you run with the latest version before reporting it please :-)
>>
>> Since the changes touch almost all areas of SSSD I encourage everyone to run
>> and try. Some handlers were converted quite easily, some took more handy
>> work. Areas that are most likely to contain some bugs are these (please give
>> it extra attention):
>>
>> - proxy provider
>> - if group membership changes during initgroups, nss memory cache should be
>> clear through dbus call
>> - selinux support
>> - hbac support
>> - change password
>> - password migration (ipa)
>>
>
> I checked the latest version from git and password change still does not work.
> There are also lots of other issues with ad provider (15 good, 35 bad)
> @see attached report.
>
> BTW CI failed as well.
> ldap_local_override_test.py::test_regr_2790_override FAILED
> test_memory_cache.py::test_initgroups FAILED
> test_memory_cache.py::test_initgroups_with_mc FAILED
> test_memory_cache.py::test_initgroups_fqname_with_mc FAILED
> test_memory_cache.py::test_invalidation_of_gids_after_initgroups FAILED
> test_memory_cache.py::test_initgroups_without_change_in_membership FAILED
> test_memory_cache.py::test_invalidate_user_before_stop FAILED
> test_memory_cache.py::test_invalidate_user_after_stop FAILED
> test_memory_cache.py::test_invalidate_users_before_stop FAILED
> test_memory_cache.py::test_invalidate_users_after_stop FAILED
> test_memory_cache.py::test_invalidate_group_before_stop FAILED
> test_memory_cache.py::test_invalidate_group_after_stop FAILED
> test_memory_cache.py::test_invalidate_groups_before_stop FAILED
>
> and make distcheck failed on rhel6
> ../src/providers/ad/ad_init_new.c:42:40: error: providers/ad/ad_subdomains.h:
> No such file or directory
> ../src/providers/ad/ad_init_new.c: In function 'sssm_ad_subdomains_init':
> ../src/providers/ad/ad_init_new.c:623: error: implicit declaration of function
> 'ad_subdomains_init'
>
>
http://sssd-ci.duckdns.org/logs/job/43/95/summary.html
>
> I am looking forward to the new fixed version :-)
In addition, I was running downstream tests and even authentication was
failing. I haven't had a chance to check LDAP authentication manually,
though, I just ran the tests.
It works for me locally (even integration tests) so I suspect it will be
one or small amount of bugs that repeats in those tests. Maybe some
configuration that I did not tried. Logs and sssd.conf from some of
those tests would be nice to have, otherwise I'm blind.