[SSSD] [PATCHES][PRELIMINARY] sudo - new design

Pavel Březina pbrezina at redhat.com
Mon Apr 23 15:04:12 UTC 2012


Hello everybody,
here is the first set of patches for the new sudo clothes. [1]

As it does not touch the responder, I believe it does not require the
patches from the other preliminary sudo thread (already acked). However
it was written atop them.

[2/10]
This is the main change for the async processing of the sudo rules. It
make sdap_sudo_refresh_send() more generic by adding there two filters:
ldap_filter - used for search in the LDAP
sysdb_filter - used for a deletion of the rules from sysdb

This way we can have many different refresh styles without touching
this fundamental function.

 From this patch further the provider will return an error to the
responder making it unusable.

[...]
The rest of the patches has a self-describing subject. Don't be afraid
of the count, these patches are very small :-)

The next set of patches is where the fun begin, so be patient :-)

[1] https://fedorahosted.org/sssd/wiki/DesignDocs/SUDOCachingRules
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-sudo-ldap-provider-move-async-routines-to-sdap_async.patch
Type: text/x-patch
Size: 46154 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-sudo-ldap-provider-give-sdap_sudo_refresh_send-searc.patch
Type: text/x-patch
Size: 21874 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-confdb-add-entry_cache_sudo_timeout-option.patch
Type: text/x-patch
Size: 1937 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-sudo-ldap-provider-add-sysdb-ctx-in-sdap_sudo_refres.patch
Type: text/x-patch
Size: 2821 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0005-sudo-ldap-provider-add-domain-info-in-sdap_sudo_refr.patch
Type: text/x-patch
Size: 1211 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0006-sudo-ldap-provider-add-expiration-time-to-each-rule.patch
Type: text/x-patch
Size: 5674 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment-0005.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0007-sudo-ldap-provider-provide-API-for-full-refresh.patch
Type: text/x-patch
Size: 3525 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment-0006.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0008-sudo-ldap-provider-add-support-for-on-demand-full-re.patch
Type: text/x-patch
Size: 3768 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment-0007.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0009-sudo-ldap-provider-provide-API-for-refresh-of-specif.patch
Type: text/x-patch
Size: 4818 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment-0008.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0010-sudo-ldap-provider-add-support-for-on-demand-refresh.patch
Type: text/x-patch
Size: 2587 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120423/097e5984/attachment-0009.bin>


More information about the sssd-devel mailing list