[SSSD] [PATCHES] sudo failing for ad trusted user in IPA environment

Pavel Březina pbrezina at redhat.com
Tue Nov 13 14:53:43 UTC 2012


On 11/12/2012 02:33 PM, Pavel Březina wrote:
> On 11/09/2012 03:18 PM, Simo Sorce wrote:
>> On Fri, 2012-11-09 at 14:28 +0100, Pavel Březina wrote:
>>>  From 724ebcafa2d4e54df048ca2a578b03281fb7fe6f Mon Sep 17 00:00:00 2001
>>> From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina at redhat.com>
>>> Date: Fri, 9 Nov 2012 13:31:52 +0100
>>> Subject: [PATCH 1/6] sudo: fix missing parameter in two debug messages
>>>
>>> ---
>>>   src/responder/sudo/sudosrv_get_sudorules.c | 2 +-
>>>   1 file changed, 1 insertion(+), 1 deletion(-)
>>>
>>> diff --git a/src/responder/sudo/sudosrv_get_sudorules.c
>>> b/src/responder/sudo/sudosrv_get_sudorules.c
>>> index
>>> b6e016c73cba6c86b9f20af63357c6fcc2b5508b..0e0437622e94a234b1597bcd272633f6944d4762
>>> 100644
>>> --- a/src/responder/sudo/sudosrv_get_sudorules.c
>>> +++ b/src/responder/sudo/sudosrv_get_sudorules.c
>>> @@ -369,7 +369,7 @@ errno_t sudosrv_get_rules(struct sudo_cmd_ctx
>>> *cmd_ctx)
>>>                                      NULL, &groupnames);
>>>       if (ret != EOK) {
>>>           DEBUG(SSSDBG_CRIT_FAILURE,
>>> -             ("Unable to retrieve user info [%d]: %s\n",
>>> strerror(ret)));
>>> +             ("Unable to retrieve user info [%d]: %s\n", ret,
>>> strerror(ret)));
>>>           goto done;
>>>       }
>>
>> The comment says 2 debug messages, but the patch only has one, which is
>> wrong ?
>>
>> Simo.
>>
>
> Hi,
> thank you. Looks like I forgot to modify the second message. New patches
> are attached.

I'm attaching a new set of patches base on IRC discussion with Simo
and Jakub.

Domain name is no longer sent to sudo. This was done without changing 
the protocol.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-sudo-fix-missing-parameter-in-two-debug-messages.patch
Type: text/x-patch
Size: 1585 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20121113/82f408b7/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-use-tmp_ctx-in-sudosrv_get_sudorules_from_cache.patch
Type: text/x-patch
Size: 4796 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20121113/82f408b7/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-sudo-support-users-from-subdomains.patch
Type: text/x-patch
Size: 16912 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20121113/82f408b7/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-sudo-do-not-send-domain-name-with-username.patch
Type: text/x-patch
Size: 5354 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20121113/82f408b7/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0005-libsss_sudo-bump-version-to-2-1-1-revision.patch
Type: text/x-patch
Size: 999 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20121113/82f408b7/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0006-sudo-print-message-if-old-protocol-is-used.patch
Type: text/x-patch
Size: 1476 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20121113/82f408b7/attachment-0005.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0007-sudo-print-how-many-rules-we-are-refreshing-or-retur.patch
Type: text/x-patch
Size: 1746 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20121113/82f408b7/attachment-0006.bin>


More information about the sssd-devel mailing list