Re: [SSSD] [PATCHES] Split off helper libraries into their own packages

2010-02-01 Thread Dmitri Pal
Stephen Gallagher wrote: > Patches 0001-0003: License and package libpath_utils > 01: In the header should the COPYING.lesser be COPYING.LESSER? Otherwise Ok. 02: Ok 03: I can' review this file I do not know the RPM syntax yet. > Patches 0004-0007: License and package libcollection. (Patch 0005 fi

Re: [SSSD] On FAST support in SSSD

2010-02-01 Thread Dmitri Pal
Stephen Gallagher wrote: > I think this discussion deserves wider exposure, so I'm forwarding it to > the sssd-devel list. > > This pertains to https://fedorahosted.org/sssd/ticket/237 - Kerberos > client functionality should be able to use FAST if available > > > Original Message

Re: [SSSD] sssd.spec for SLES

2010-02-01 Thread Sumit Bose
Hi, this patch works for me. I think it's ok to integrate the changes as they are available. ACK bye, Sumit On Mon, Feb 01, 2010 at 08:54:06AM -0500, Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Sergei, I appreciate the patch, but I'm going to recommend holdin

Re: [SSSD] [PATCHES] Split off helper libraries into their own packages

2010-02-01 Thread Dmitri Pal
Stephen Gallagher wrote: > Patches 0001-0003: License and package libpath_utils > > Patches 0004-0007: License and package libcollection. (Patch 0005 fixes > an incorrect #include in collection.h) > > Patch 0008-0011: License and package libini_config. (Patch 0009 fixes an > array index mistake tha

[SSSD] On FAST support in SSSD

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I think this discussion deserves wider exposure, so I'm forwarding it to the sssd-devel list. This pertains to https://fedorahosted.org/sssd/ticket/237 - Kerberos client functionality should be able to use FAST if available - Original Messa

Re: [SSSD] [PATCH] Check cache_credentials in sysdb_cache_auth_send()

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/26/2010 11:43 AM, Sumit Bose wrote: > I'm not sure this is a good idea, unless you want to force > provider=local domains to have cache_credentials=true. Right now, this > will break authentication against the LOCAL domain if cache_credentials >

Re: [SSSD] [PATCH] First step to handle LDAP referrals

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/27/2010 11:50 AM, Sumit Bose wrote: >> > > New versions attached. > > bye, > Sumit > Ack to both. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.r

Re: [SSSD] [PATCH] Warn the user if authentication happens offline

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/28/2010 11:37 AM, Sumit Bose wrote: > Hi, > > this patch should fix #239. All translatable strings are in the pam > client and now it should be quite easy to add new messages which should > be presented to the user. > > It is quite easy to see

Re: [SSSD] [PATCH] Add offline failed login counter

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/01/2010 09:02 AM, Sumit Bose wrote: > > oh, sorry, I thought you've meant a different DEBUG message. I hope I've > found all of them now. > > bye, > Sumit > > Ack. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after ye

Re: [SSSD] [PATCH] Add offline failed login counter

2010-02-01 Thread Sumit Bose
On Mon, Feb 01, 2010 at 08:29:09AM -0500, Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Nack > > On 01/29/2010 05:51 AM, Sumit Bose wrote: > > On Thu, Jan 28, 2010 at 02:52:21PM -0500, Stephen Gallagher wrote: > > The DEBUG messages after failure to save SYSDB_LAS

Re: [SSSD] [PATCH] Force offline operation with SIGUSR1

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/29/2010 07:23 AM, Sumit Bose wrote: > On Tue, Jan 26, 2010 at 09:42:52AM -0500, Stephen Gallagher wrote: > If the monitor receives SIGUSR1, it will instruct all providers to > enter offline operation. If any individual provider receives > SIGUSR1

Re: [SSSD] [PATCH] Updated collection patch

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/01/2010 06:14 AM, Jakub Hrozek wrote: > On 01/27/2010 08:45 PM, Dmitri Pal wrote: >> Hi, > >> I removed semicolons. >> For the env var I opened a new issue. >> https://fedorahosted.org/sssd/ticket/394 >> I want to handle it separately and in one

Re: [SSSD] [PATCH] Rename PAM_USER_INFO to PAM_SYSTEM_INFO

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/26/2010 12:57 PM, Stephen Gallagher wrote: > On 01/25/2010 11:39 AM, Sumit Bose wrote: > >> rebased to current master. > >> bye, >> Sumit > > > Ack > Pushed to master. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year afte

Re: [SSSD] [PATCH] Improve logging of pam_sss

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/26/2010 10:04 AM, Stephen Gallagher wrote: > On 01/25/2010 11:44 AM, Sumit Bose wrote: >> Hi, > >> this patch makes the logging of pam_sss a bit clearer and less verbose. > >> This should fix bz556534. > >> This patch might affect testing, bec

Re: [SSSD] sssd.spec for SLES

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sergei, I appreciate the patch, but I'm going to recommend holding off on it for a couple days, as I'm currently working to split out several of our other libraries as well (path_utils, collection, ini and refarray), so it might be better to solve this

Re: [SSSD] sssd.spec for SLES

2010-02-01 Thread Sergei V. Kovylov
Hi all. Here is update of suse/sssd.spec.in file to meet current changes (splitting sssd and dhash, etc). 2009/12/15 Stephen Gallagher : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 12/15/2009 06:53 AM, Sumit Bose wrote: >> On Fri, Dec 11, 2009 at 02:58:36PM +0300, Sergei V. Kovylov wr

Re: [SSSD] [PATCH] Force offline operation with SIGUSR1

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/29/2010 07:23 AM, Sumit Bose wrote: > On Tue, Jan 26, 2010 at 09:42:52AM -0500, Stephen Gallagher wrote: > If the monitor receives SIGUSR1, it will instruct all providers to > enter offline operation. If any individual provider receives > SIGUSR1

Re: [SSSD] [PATCH] Add offline failed login counter

2010-02-01 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nack On 01/29/2010 05:51 AM, Sumit Bose wrote: > On Thu, Jan 28, 2010 at 02:52:21PM -0500, Stephen Gallagher wrote: > > Nack. Please specify in the SSSDConfig API that the time is in minutes. > >> fixed > > > I think it would be more correct to re

Re: [SSSD] [PATCH] Updated collection patch

2010-02-01 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/27/2010 08:45 PM, Dmitri Pal wrote: > Hi, > > I removed semicolons. > For the env var I opened a new issue. > https://fedorahosted.org/sssd/ticket/394 > I want to handle it separately and in one patch across all unit tests in > "common". ACK --

Re: [SSSD] [PATCH] Added option to use libcrypto from OpenSSL instead of NSS.

2010-02-01 Thread Sumit Bose
oops, sorry for citing the whole patch. bye, Sumit ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/sssd-devel

Re: [SSSD] [PATCH] Added option to use libcrypto from OpenSSL instead of NSS.

2010-02-01 Thread Sumit Bose
On Fri, Jan 29, 2010 at 04:45:39PM -0600, George McCollister wrote: > > crypto_sha512crypt.c is a clone of nss_sha512crypt.c with the exception that > all usage of NSS and related libraries has been switched to libcrypto. I > renamed nss_sha512crypt.h to sha512crypt.h since it is common to both