[SSSD] IPA migration fixes

Jan Zelený jzeleny at redhat.com
Thu Aug 18 14:48:32 UTC 2011


> On Wed, Aug 17, 2011 at 04:58:05PM +0200, Jakub Hrozek wrote:
> > On Wed, Aug 17, 2011 at 01:15:31PM +0200, Jakub Hrozek wrote:
> > > https://fedorahosted.org/sssd/ticket/924 started as a segfault ticket
> > > but we could never reproduce the crash afterwards.
> > > 
> > > As Sumit noted it might have been caused by setting the O_NONBLOCK flag
> > > twice. However, the changes Sumit proposed in the ticket still make
> > > sense because they provide much cleaner solution.
> > > 
> > > Attached are two patches:
> > > 
> > > [PATCH 1/2] Provide means of forcing TLS and GSSAPI enabled/disabled
> > > for sdap connections
> > > 
> > > This will be used to force TLS on the auth connection only and allow
> > > staying on GSSAPI-backed ID connection for the rest of the request.
> > 
> > Self-nack on patch #1, it is not complete. I'll provide an updated
> > version later.
> 
> New patches attached.

The patches look fine, but I didn't manage to set up environment to test the 
new behavior. Nothing seems to be broken though

Jan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110818/14c1df01/attachment.sig>


More information about the sssd-devel mailing list