[SSSD] [sssd PR#630][closed] KCM/SECRETS: Use a library to access the secrets storage instead of the secrets responder, deprecate secrets responder

2018-08-13 Thread jhrozek 
   URL: https://github.com/SSSD/sssd/pull/630
Author: jhrozek
 Title: #630: KCM/SECRETS: Use a library to access the secrets storage instead 
of the secrets responder, deprecate secrets responder
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/630/head:pr630
git checkout pr630
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/JTCLAOYMRVDYJCTCSWCDOFYOCBFCDWHC/

[SSSD] [sssd PR#630][+Pushed] KCM/SECRETS: Use a library to access the secrets storage instead of the secrets responder, deprecate secrets responder

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/630
Title: #630: KCM/SECRETS: Use a library to access the secrets storage instead 
of the secrets responder, deprecate secrets responder

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/DDTUTEOGRIUAFWBPTNLZSML2XTTFHCP4/

[SSSD] [sssd PR#630][comment] KCM/SECRETS: Use a library to access the secrets storage instead of the secrets responder, deprecate secrets responder

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/630
Title: #630: KCM/SECRETS: Use a library to access the secrets storage instead 
of the secrets responder, deprecate secrets responder

jhrozek commented:
"""
* master:
fcbedf46fcfc66f443afa3171036b4bc7bbd380b
f74feb08b86e72eb3e098ed097d0574f815f6de3
7dd1991c93a8c0ac5c887573a1be18523a861522
f91adcc8eb58294d0a69b5ce938d959f059a8a84
24ba2120697d95139ba6c0107608f31196532097
0b9001e3a8c820f137cbe07f853317474dac53ac
e0bf64a736dc0fa244dc8023970ed4e65b4d7f31
fdfa36ae07dfc9bb7488d8dcde1e37ff95aeb3be
24b151e076313441518692a6afe7d3ec50e8c02f
ca73eedba23f4746d57161f185a5da5e1c5b6b7c
80811f941160e481112adc6933f59e3d2e5c5c85
0294bcf7cdf21fe6702423f77554a880699c85bc
aafaacd59d3ce935c4ca0a73a140f1e6f4cd49b0
4d7f07893fb3bcf9c39ec0ff318c73529f7f8278
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/630#issuecomment-412583793
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/HZ3SGJNAR6KA7HOAVTLSQC5VFWTZ7SWZ/

[SSSD] [sssd PR#611][+Pushed] Do not build the local provider by default

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/611
Title: #611: Do not build the local provider by default

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/WUQ7SQOUEDSKBNLJIKT3B54Z5TBK4WDW/

[SSSD] [sssd PR#611][closed] Do not build the local provider by default

2018-08-13 Thread jhrozek 
   URL: https://github.com/SSSD/sssd/pull/611
Author: fidencio
 Title: #611: Do not build the local provider by default
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/611/head:pr611
git checkout pr611
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/RL7QQVDRDXXMQQVAUVX4CC5OGDRENZZ3/

[SSSD] [sssd PR#611][comment] Do not build the local provider by default

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/611
Title: #611: Do not build the local provider by default

jhrozek commented:
"""
* master:
0e211b8ba30c3adcdeef21ca1339b194cbfffb04
82d51b7feba8df49df3f7a023d2b16aba26a858e
b8946c46e04e8b5329e4d95f9a67b4a76f883bb2
c075e2865b2fbedb6a7eeb6a90780c6dbffeb5fd
15342ebe8c22738e947728f06c6833b5be09eca8
5a87af9128c5468ce1f2e55602c9d3ec05987b8d
a24f0c202ed7ea159ad04eb19b506b7f21ad41cc
2e8fe6a3dd022721e1ff476c8fd7af317a535d63
728e4be10fc7a7b3173b74b1f597e835914c9abf
99b5bb54447287da5031dcd2bfebeef8b47d52d7
a8a9e66a852ba8aa1371e2e1897d49f3feee76da
064ca0b46eed06977dbd32c2bd894f71dc43be2e
6ebcc59b9458c5a118cd182c07a840fa6756a43e
35a200d5bd84d6a6742e77ffda9945e37134d721
2243b348976705ca81da954cb1ead1f406d01918
7d483737f3763947a5b8a43efbfaf31f54f956a4
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/611#issuecomment-412580797
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/RJ3HJRFMX6GT54BXUPDS7R6EC4UESK6S/

[SSSD] [sssd PR#611][comment] Do not build the local provider by default

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/611
Title: #611: Do not build the local provider by default

jhrozek commented:
"""
retest this please
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/611#issuecomment-412574313
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/MTDBUCW6N7NAQZWPFNRHZRBGX4K23YAS/

[SSSD] [sssd PR#630][comment] KCM/SECRETS: Use a library to access the secrets storage instead of the secrets responder, deprecate secrets responder

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/630
Title: #630: KCM/SECRETS: Use a library to access the secrets storage instead 
of the secrets responder, deprecate secrets responder

jhrozek commented:
"""
retest this please
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/630#issuecomment-412574163
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/7XOPWLQRNRXT4YBPPEXJT6Z7AK4XJPY2/

[SSSD] [sssd PR#611][comment] Do not build the local provider by default

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/611
Title: #611: Do not build the local provider by default

jhrozek commented:
"""
retest this please
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/611#issuecomment-412564711
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/OHRCJ3UJWREX3LTRTPOMORKLXTKFR7MF/

[SSSD] [sssd PR#611][synchronized] Do not build the local provider by default

2018-08-13 Thread fidencio 
   URL: https://github.com/SSSD/sssd/pull/611
Author: fidencio
 Title: #611: Do not build the local provider by default
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/611/head:pr611
git checkout pr611
From 045215f1a3a692bb0f0d8bc1e4562436376002d5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= 
Date: Wed, 18 Jul 2018 15:15:43 +0200
Subject: [PATCH 01/16] tests: adapt common_dom to files_provider
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Also start to consider the "files" provider when cleaning up the files.
This change will let us start to moving to "files" provider in our test
suite.

Related:
https://pagure.io/SSSD/sssd/issue/3304

Signed-off-by: Fabiano Fidêncio 
---
 src/tests/common_dom.c | 9 -
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/tests/common_dom.c b/src/tests/common_dom.c
index def28d510..1ae48eef2 100644
--- a/src/tests/common_dom.c
+++ b/src/tests/common_dom.c
@@ -340,7 +340,14 @@ void test_multidom_suite_cleanup(const char *tests_path,
 
 if (domains != NULL) {
 for (i = 0; domains[i] != NULL; i++) {
-if (strcmp(domains[i], LOCAL_SYSDB_FILE) == 0) {
+if (strcmp(domains[i], "FILES") == 0) {
+/* files domain */
+ret = sysdb_get_db_file(tmp_ctx, "files", domains[i], tests_path,
+&sysdb_path, &sysdb_ts_path);
+if (ret != EOK) {
+goto done;
+}
+} else if (strcmp(domains[i], LOCAL_SYSDB_FILE) == 0) {
 /* local domain */
 ret = sysdb_get_db_file(tmp_ctx, "local", domains[i], tests_path,
 &sysdb_path, &sysdb_ts_path);

From 74dec39bc6f1dffdafb246707592daf04212140e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= 
Date: Fri, 29 Jun 2018 13:51:54 +0200
Subject: [PATCH 02/16] tests: adapt test_sysdb_views to files provider
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Let's take advantage of the files provider and start to get rid of the
local provider references in our code.

Apart from the obvious change from "local" to "files" and from "LOCAL"
to "FILES", we're also passing an on-the-fly created uid/gid to the
sysdb_store_user() function in order to avoid calling
sysdb_get_new_id(), which only should be used with the "local" provider.

Related:
https://pagure.io/SSSD/sssd/issue/3304

Signed-off-by: Fabiano Fidêncio 
---
 src/tests/cmocka/test_sysdb_views.c | 19 ++-
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/src/tests/cmocka/test_sysdb_views.c b/src/tests/cmocka/test_sysdb_views.c
index a0f57c864..8ef69b271 100644
--- a/src/tests/cmocka/test_sysdb_views.c
+++ b/src/tests/cmocka/test_sysdb_views.c
@@ -86,27 +86,27 @@ static int _setup_sysdb_tests(struct sysdb_test_ctx **ctx, bool enumerate)
 ret = confdb_init(test_ctx, &test_ctx->confdb, conf_db);
 assert_int_equal(ret, EOK);
 
-val[0] = "LOCAL";
+val[0] = "FILES";
 ret = confdb_add_param(test_ctx->confdb, true,
"config/sssd", "domains", val);
 assert_int_equal(ret, EOK);
 
-val[0] = "local";
+val[0] = "files";
 ret = confdb_add_param(test_ctx->confdb, true,
-   "config/domain/LOCAL", "id_provider", val);
+   "config/domain/FILES", "id_provider", val);
 assert_int_equal(ret, EOK);
 
 val[0] = enumerate ? "TRUE" : "FALSE";
 ret = confdb_add_param(test_ctx->confdb, true,
-   "config/domain/LOCAL", "enumerate", val);
+   "config/domain/FILES", "enumerate", val);
 assert_int_equal(ret, EOK);
 
 val[0] = "TRUE";
 ret = confdb_add_param(test_ctx->confdb, true,
-   "config/domain/LOCAL", "cache_credentials", val);
+   "config/domain/FILES", "cache_credentials", val);
 assert_int_equal(ret, EOK);
 
-ret = sssd_domain_init(test_ctx, test_ctx->confdb, "local",
+ret = sssd_domain_init(test_ctx, test_ctx->confdb, "files",
TESTS_PATH, &test_ctx->domain);
 assert_int_equal(ret, EOK);
 
@@ -565,8 +565,9 @@ static void enum_test_add_users(struct sysdb_test_ctx *test_ctx,
 fqname = sss_create_internal_fqname(test_ctx, usernames[i],
 test_ctx->domain->name);
 assert_non_null(fqname);
+
 ret = sysdb_store_user(test_ctx->domain, fqname,
-   NULL, 0, 0, fqname, "/", "/bin/sh",
+   NULL, 1234 + i, 1234 + i, fqname, "/", "/bin/sh",
NULL, NULL, NULL, 1, 1234 + i);
 assert_int_equal(ret, EOK);
 
@@ -1118,12 +1119,12 @@ int main(int

[SSSD] [sssd PR#629][+Pushed] ldap: remove parallel requests from rfc2307bis

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/629
Title: #629: ldap: remove parallel requests from rfc2307bis

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/SNMJMM5KQKV7YBXJAL4KGPHEEYL2MVIG/

[SSSD] [sssd PR#629][comment] ldap: remove parallel requests from rfc2307bis

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/629
Title: #629: ldap: remove parallel requests from rfc2307bis

jhrozek commented:
"""
* master: 5dafa8177326e032503a3f8195eb0d0dd4cb1b15
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/629#issuecomment-412556963
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/HDDE7GHC6SKQPF7OGXLUOUATDPBJALSO/

[SSSD] [sssd PR#629][closed] ldap: remove parallel requests from rfc2307bis

2018-08-13 Thread jhrozek 
   URL: https://github.com/SSSD/sssd/pull/629
Author: fidencio
 Title: #629: ldap: remove parallel requests from rfc2307bis
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/629/head:pr629
git checkout pr629
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/DBDQBVSUF6SDLVGBROFHQBVZBC33E6MX/

[SSSD] [sssd PR#628][comment] providers: drop ldap_{init, }groups_use_matching_rule_in_chain support

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/628
Title: #628: providers: drop ldap_{init,}groups_use_matching_rule_in_chain 
support

jhrozek commented:
"""
* master: 65bd6bf05d75c843e525f8bf89e9b75b02a2bfb7
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/628#issuecomment-412556072
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/DVC7OKGKWLJZQ4FHRDJAX7UHOSL2EKSV/

[SSSD] [sssd PR#628][+Pushed] providers: drop ldap_{init, }groups_use_matching_rule_in_chain support

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/628
Title: #628: providers: drop ldap_{init,}groups_use_matching_rule_in_chain 
support

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/J7HVI7LSUY3DSXS33OLTOEDLTXWJ3VXI/

[SSSD] [sssd PR#628][closed] providers: drop ldap_{init, }groups_use_matching_rule_in_chain support

2018-08-13 Thread jhrozek 
   URL: https://github.com/SSSD/sssd/pull/628
Author: fidencio
 Title: #628: providers: drop ldap_{init,}groups_use_matching_rule_in_chain 
support
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/628/head:pr628
git checkout pr628
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/PE2X55MKOI7MBVQRQPRJL2SCNI7FT4FN/

[SSSD] [sssd PR#627][closed] providers: disable ldap_sudo_include_regexp by default

2018-08-13 Thread jhrozek 
   URL: https://github.com/SSSD/sssd/pull/627
Author: fidencio
 Title: #627: providers: disable ldap_sudo_include_regexp by default
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/627/head:pr627
git checkout pr627
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/CDY2DWPD2I6NKAZ5SP72I3H554YR52LW/

[SSSD] [sssd PR#627][comment] providers: disable ldap_sudo_include_regexp by default

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/627
Title: #627: providers: disable ldap_sudo_include_regexp by default

jhrozek commented:
"""
* master; a2d543f61266f7ec0095a5395a4ea38c8e1426d5
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/627#issuecomment-412554078
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/FPNN2WHAFIB5ZRQM6DXQ7AW767XZRET4/

[SSSD] [sssd PR#627][+Pushed] providers: disable ldap_sudo_include_regexp by default

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/627
Title: #627: providers: disable ldap_sudo_include_regexp by default

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/FG6A5XBLNALEBAXX2RSIMHMCDEUFVT4V/

[SSSD] [sssd PR#397][+Pushed] cleanup: Remove CONFDB_DOMAIN_LEGACY_PASS

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/397
Title: #397: cleanup: Remove CONFDB_DOMAIN_LEGACY_PASS

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/E5OYFBRF5ECAFNUSNRKDXNAXO3KO7GNR/

[SSSD] [sssd PR#397][comment] cleanup: Remove CONFDB_DOMAIN_LEGACY_PASS

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/397
Title: #397: cleanup: Remove CONFDB_DOMAIN_LEGACY_PASS

jhrozek commented:
"""
* master: 1adf2f982c28096ca03b9910a412a8a63559ec10
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/397#issuecomment-412550531
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/2QEPLY6YRWBSNF2RN2XCLUVPW2VBTXAD/

[SSSD] [sssd PR#397][closed] cleanup: Remove CONFDB_DOMAIN_LEGACY_PASS

2018-08-13 Thread jhrozek 
   URL: https://github.com/SSSD/sssd/pull/397
Author: amitkumar50
 Title: #397: cleanup: Remove CONFDB_DOMAIN_LEGACY_PASS
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/397/head:pr397
git checkout pr397
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/P6B4LXAGATTORJSYTM6P5HMQRHWNZUA3/

[SSSD] [sssd PR#601][closed] sbus: integrate sssd with sbus2

2018-08-13 Thread jhrozek 
   URL: https://github.com/SSSD/sssd/pull/601
Author: pbrezina
 Title: #601: sbus: integrate sssd with sbus2
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/601/head:pr601
git checkout pr601
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/5PEPQFXW3OQYYZJKQNI3B6VMCCHQFI4K/

[SSSD] [sssd PR#601][+Pushed] sbus: integrate sssd with sbus2

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/601
Title: #601: sbus: integrate sssd with sbus2

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/7YEKL5MWYW67B264FY5KYUMD7UWEWWKR/

[SSSD] [sssd PR#601][comment] sbus: integrate sssd with sbus2

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/601
Title: #601: sbus: integrate sssd with sbus2

jhrozek commented:
"""
* master:
c0c8499b6ac36b44e3db7e8c1d44ce32f38662b5
3d1b6458568f3df4d5c192f432e73d65e4a9d293
7c1dd71c31faa00039f764af45a28e8668731769
5edba6ce412f5be57a36fac1a7bd2b884c36ddf3
aaecabf2d0e7a0732e4169b9b7c09a266603abd8
fbe2476a3dd9be83ffa85c29dca26f734618d72d
de3a63c4b8e55ae2dbd3fbf12ca868c854ed8052
e50fb8ace7e1af34bd0742a3683343e5f0055ae9
c7e2d7a56d8969f26921811e5122f78b257fb51e
924f8098333e07d7bc2675f93cf4e57ec489a194
2963f2d917bd904f72b11daf400293ba518c74a0
06631b456011c630029f6fd2d1c3e97d95bab710
f91e90a7690e928e127a6f1020bb125c79377992
7f3ed078768d39153ef7929bd97fae047cf18965
b49ee1bfc3b541b08d7c7b7188d8bde3dbd1bd44
564c0798adbcfe132509d5245ea5b7fa2e4d3b51
e347b55571e1f08b48865e06a86d2f009442e10a
9c9a432833476053c46859ae67b0cfa19a41efa2
c2ed0caee434accef1999e5794daa12322c73bb7
40e3863ef226eac58d74ea7fcb25dcfa99672dc5
7e9f0a0c99bc8eace31f44c4c5e9ce7e13d76680
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/601#issuecomment-412549579
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/SFGQBIQZRDDFZZ3EBG3BUPSBEZCNP44A/

[SSSD] [sssd PR#620][+superseded] Add pam_cert_pam_services option

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/620
Title: #620: Add pam_cert_pam_services option

Label: +superseded
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/G4DZJCTMYIC6ICGD26INJ2BWYG3C6BBX/

[SSSD] [sssd PR#620][closed] Add pam_cert_pam_services option

2018-08-13 Thread fidencio 
   URL: https://github.com/SSSD/sssd/pull/620
Author: abbra
 Title: #620: Add pam_cert_pam_services option
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/620/head:pr620
git checkout pr620
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/HDEFDLABN4PR4C4ZTY6OD3CSC7NNV7QU/

[SSSD] [sssd PR#620][comment] Add pam_cert_pam_services option

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/620
Title: #620: Add pam_cert_pam_services option

fidencio commented:
"""
@lslebodn's patch has been merged, thus I'm closing this PR.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/620#issuecomment-412535140
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/6KMZQAIJKX4BKQYEFCWN7PI7E5UVPAO2/

[SSSD] Re: RFC: 2.0 release notes

2018-08-13 Thread Simo Sorce 
LGTM,
great work guys.

Simo.

On Mon, 2018-08-13 at 15:20 +0200, Jakub Hrozek wrote:
> Hi,
> 
> we’re about to release 2.0. Here are my draft release notes:
> 
> SSSD 2.0.0
> ===
> 
> 
> Highlights
> --
> This release removes or deprecates functionality from SSSD, therefore the SSSD
> team decided it was time to bump the major version number. The sssd-1-16
> branch will be still supported (most probably even as a LTM branch) so that
> users who rely on any of the removed features can either migrate or ask for
> the features to be readded.
> 
> Except for the removed features, this release contains a reworked internal IPC
> and a new default storage back end for the KCM responder.
> 
> Removed features
> 
> * The Python API for managing users and groups in local domains
>   (`id_provider=local`) was removed completely. The interface
>   had been packaged as module called `pysss.local`
> * The LDAP provider had a special-case branch for evaluating group
>   memberships with the RFC2307bis schema when group nesting was
>   explicitly disabled. This codepath was adding needless additional
>   complexity for little performance gain and was rarely used.
> * The `ldap_groups_use_matching_rule_in_chain` and
>   `ldap_initgroups_use_matching_rule_in_chain` options and the code that
>   evaluated them was removed. Neither of these options provided
>   a significant performance benefit and the code implementing
>   these options was complex and rarely used.
> 
> Deprecated features
> ^^^
> * The local provider (`id_provider=local`) and the command line
>   tools to manage users and groups in the local domains, such as
>   `sss_useradd` is not built by default anymore. There is a configure-time
>   switch `--enable-local-domain` you can use to re-enable the local
>   domain support. However, upstream would like to remove the local
>   domain completely in a future release.
> * The `sssd_secrets`` responder is not packaged by default. The responder
>   was meant to provide a REST API to access user secrets as well as
>   a proxy to Custodia servers, but as Custodia development all but
>   stopped and the local secrets handling so far didn't gain traction,
>   we decided to not enable this code by default. This also means that the
>   default SSSD configuration no longer requires libcurl and http-parser.
> 
> Changed default settings
> 
> * The `ldap_sudo_include_regexp` option changed its default value
>   from `true` to `false`. This means that wild cards in the `sudoHost`
>   LDAP attribute are no longer supported by default. The reason we
>   changed the default was that the wildcard was costly to evaluate
>   on the LDAP server side and at the same time rarely used.
> 
> New features
> 
> * The KCM responder has a new back end to store credential caches
>   in a local database. This new back end is enabled by default and
>   actually uses the same storage as the `sssd-secrets` responder had used,
>   so the switch from sssd-secrets to this new back end should be
>   completely seamless. The `sssd-secrets` socket is no longer required for
>   KCM to operate.
> 
> Packaging Changes
> -
> * The `sss_useradd`, `sss_userdel`, `sss_usermod`, `sss_groupadd`,
>   `sss_groupdel`, `sss_groupshow` and `sss_groupmod` binaries and their
>   manual pages are no longer packaged by default unless
>   `--enable-local-provider` is selected.
> * The sssd_secrets responder is no longer packaged by default unless
>   `--enable-secrets-responder` is selected.
> * The new internal IPC mechanism uses several private libraries that
>   need to be packaged - `libsss_sbus.so`, `libsss_sbus_sync.so`, 
> `libsss_iface.so`,
>   `libsss_iface_sync.so`, `libifp_iface.so` and `libifp_iface_sync.so`
> * The new KCM ccache back end relies on a private library
>   `libsss_secrets.so` that must be packaged in case either the KCM 
> responder
>   or the secrets responder are enabled.
> 
> Documentation Changes
> -
> * The `ldap_groups_use_matching_rule_in_chain` and
>   `ldap_initgroups_use_matching_rule_in_chain` options were removed.
> * The `ldap_sudo_include_regexp` option changed its default value
>   from `true` to `false`.
> 
> Tickets Fixed
> -
> To be generated
> 
> Detailed Changelog
> --
> To be generated
> ___
> sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
> To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/s

[SSSD] RFC: 2.0 release notes

2018-08-13 Thread Jakub Hrozek 
Hi,

we’re about to release 2.0. Here are my draft release notes:

SSSD 2.0.0
===


Highlights
--
This release removes or deprecates functionality from SSSD, therefore the SSSD
team decided it was time to bump the major version number. The sssd-1-16
branch will be still supported (most probably even as a LTM branch) so that
users who rely on any of the removed features can either migrate or ask for
the features to be readded.

Except for the removed features, this release contains a reworked internal IPC
and a new default storage back end for the KCM responder.

Removed features

* The Python API for managing users and groups in local domains
  (`id_provider=local`) was removed completely. The interface
  had been packaged as module called `pysss.local`
* The LDAP provider had a special-case branch for evaluating group
  memberships with the RFC2307bis schema when group nesting was
  explicitly disabled. This codepath was adding needless additional
  complexity for little performance gain and was rarely used.
* The `ldap_groups_use_matching_rule_in_chain` and
  `ldap_initgroups_use_matching_rule_in_chain` options and the code that
  evaluated them was removed. Neither of these options provided
  a significant performance benefit and the code implementing
  these options was complex and rarely used.

Deprecated features
^^^
* The local provider (`id_provider=local`) and the command line
  tools to manage users and groups in the local domains, such as
  `sss_useradd` is not built by default anymore. There is a configure-time
  switch `--enable-local-domain` you can use to re-enable the local
  domain support. However, upstream would like to remove the local
  domain completely in a future release.
* The `sssd_secrets`` responder is not packaged by default. The responder
  was meant to provide a REST API to access user secrets as well as
  a proxy to Custodia servers, but as Custodia development all but
  stopped and the local secrets handling so far didn't gain traction,
  we decided to not enable this code by default. This also means that the
  default SSSD configuration no longer requires libcurl and http-parser.

Changed default settings

* The `ldap_sudo_include_regexp` option changed its default value
  from `true` to `false`. This means that wild cards in the `sudoHost`
  LDAP attribute are no longer supported by default. The reason we
  changed the default was that the wildcard was costly to evaluate
  on the LDAP server side and at the same time rarely used.

New features

* The KCM responder has a new back end to store credential caches
  in a local database. This new back end is enabled by default and
  actually uses the same storage as the `sssd-secrets` responder had used,
  so the switch from sssd-secrets to this new back end should be
  completely seamless. The `sssd-secrets` socket is no longer required for
  KCM to operate.

Packaging Changes
-
* The `sss_useradd`, `sss_userdel`, `sss_usermod`, `sss_groupadd`,
  `sss_groupdel`, `sss_groupshow` and `sss_groupmod` binaries and their
  manual pages are no longer packaged by default unless
  `--enable-local-provider` is selected.
* The sssd_secrets responder is no longer packaged by default unless
  `--enable-secrets-responder` is selected.
* The new internal IPC mechanism uses several private libraries that
  need to be packaged - `libsss_sbus.so`, `libsss_sbus_sync.so`, 
`libsss_iface.so`,
  `libsss_iface_sync.so`, `libifp_iface.so` and `libifp_iface_sync.so`
* The new KCM ccache back end relies on a private library
  `libsss_secrets.so` that must be packaged in case either the KCM responder
  or the secrets responder are enabled.

Documentation Changes
-
* The `ldap_groups_use_matching_rule_in_chain` and
  `ldap_initgroups_use_matching_rule_in_chain` options were removed.
* The `ldap_sudo_include_regexp` option changed its default value
  from `true` to `false`.

Tickets Fixed
-
To be generated

Detailed Changelog
--
To be generated
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/TBPGM4JPW3F5AKF6ELW45BMPPEOOENLO/

[SSSD] [sssd PR#637][+Pushed] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/637
Title: #637: Relicense GPLv2 only files as GPLv3+

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/Z45RXT4MAARWTEJJJ2SDEPZMU4RN3UNF/

[SSSD] [sssd PR#637][closed] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread fidencio 
   URL: https://github.com/SSSD/sssd/pull/637
Author: jhrozek
 Title: #637: Relicense GPLv2 only files as GPLv3+
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/637/head:pr637
git checkout pr637
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/4SP3ATFZXIXN4RLXOM2N5BN4UQNU6KMH/

[SSSD] [sssd PR#637][comment] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/637
Title: #637: Relicense GPLv2 only files as GPLv3+

fidencio commented:
"""
master:
 a57d9ec
 3badebc
 e4864db
 444b463
 a542217
 2527589
 e92040a
 33c668e
 7dc03ff
 3ae7458
 62a1eb3
 02008a0
 7283ee1
 23df598
 5eee13a
 85486d2
 895524e
 e7afe9f
 c2296d0
 8cc6710
 85d939d
 aa5f817
 1f244c0
 44d637d
 8a1092b
 31f3f79
 744ae1a
 b5c42f4
 b94cf69
 fa125f1
 89248d0
 bcbc2f2
 df5297f
 ce5a90b
 79f70d6
 3ee03cf
 de47b66
 02d2340
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/637#issuecomment-412513273
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/5JIFHRIDD4XP3EXLFWVANMVDNOQWS33B/

[SSSD] [sssd PR#637][-Accepted] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/637
Title: #637: Relicense GPLv2 only files as GPLv3+

Label: -Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/SC67BR4QQTNQZVOLIFMYW626IGN4KQWT/

[SSSD] [sssd PR#638][closed] Explicitly add GPLv3+ license blob to several files

2018-08-13 Thread fidencio 
   URL: https://github.com/SSSD/sssd/pull/638
Author: jhrozek
 Title: #638: Explicitly add GPLv3+ license blob to several files
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/638/head:pr638
git checkout pr638
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/GVFLWLH7IMJX2PUEZPNEPIUIAVEN66F3/

[SSSD] [sssd PR#638][comment] Explicitly add GPLv3+ license blob to several files

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/638
Title: #638: Explicitly add GPLv3+ license blob to several files

fidencio commented:
"""
master:
 9ba105f
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/638#issuecomment-412512867
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/ILXUIV2OUMJLD3MGT3AGDYRR7JTRLLB4/

[SSSD] [sssd PR#635][comment] sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/635
Title: #635: sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

fidencio commented:
"""
master:
 2b3b41d
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/635#issuecomment-412512696
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/ZUZ3SS4UL4HXXXS2UHTX5GNNFS5ZBVK5/

[SSSD] [sssd PR#635][closed] sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

2018-08-13 Thread fidencio 
   URL: https://github.com/SSSD/sssd/pull/635
Author: fidencio
 Title: #635: sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/635/head:pr635
git checkout pr635
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/JVGQD7NFF6ORZFXCH3EXR76W6GMHAQ36/

[SSSD] [sssd PR#638][comment] Explicitly add GPLv3+ license blob to several files

2018-08-13 Thread mzidek-rh 
  URL: https://github.com/SSSD/sssd/pull/638
Title: #638: Explicitly add GPLv3+ license blob to several files

mzidek-rh commented:
"""
Ack.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/638#issuecomment-412502789
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/XG6FRZJFZ7D4PQP2XNKNJSLQ7ZBSNN24/

[SSSD] [sssd PR#638][+Accepted] Explicitly add GPLv3+ license blob to several files

2018-08-13 Thread mzidek-rh 
  URL: https://github.com/SSSD/sssd/pull/638
Title: #638: Explicitly add GPLv3+ license blob to several files

Label: +Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/OA3B633SQOR6QJWNM7W4EDOGXLU56IRZ/

[SSSD] [sssd PR#601][comment] sbus: integrate sssd with sbus2

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/601
Title: #601: sbus: integrate sssd with sbus2

jhrozek commented:
"""
I think this PR has gotten sufficient testing given its sheer size.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/601#issuecomment-412499930
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/ZT7VAQPC6N4PT5EIJEICKOIBLLRKKNSA/

[SSSD] [sssd PR#601][+Accepted] sbus: integrate sssd with sbus2

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/601
Title: #601: sbus: integrate sssd with sbus2

Label: +Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/TCQGAIGQVRWCEF3VEUNCPHJQNFXNEF5Z/

[SSSD] [sssd PR#638][opened] Explicitly add GPLv3+ license blob to several files

2018-08-13 Thread jhrozek 
   URL: https://github.com/SSSD/sssd/pull/638
Author: jhrozek
 Title: #638: Explicitly add GPLv3+ license blob to several files
Action: opened

PR body:
"""
In the absence of an explicit license blob in a file, the default GPLv3+
license applies, but it's better to be explicit.
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/638/head:pr638
git checkout pr638
From 4d0b5169b1443e9294c6a0ac0f9a474d890e4752 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek 
Date: Mon, 13 Aug 2018 12:18:44 +
Subject: [PATCH] Explicitly add GPLv3+ license blob to several files

In the absence of an explicit license blob in a file, the default GPLv3+
license applies, but it's better to be explicit.
---
 src/config/SSSDConfigTest.py  | 18 ++
 src/sss_client/sss_pac_responder_client.c | 17 +
 src/tests/pyhbac-test.py  | 19 +++
 src/tools/sss_seed.c  | 17 +
 4 files changed, 71 insertions(+)

diff --git a/src/config/SSSDConfigTest.py b/src/config/SSSDConfigTest.py
index 87d1f6e64..44acbf2ba 100755
--- a/src/config/SSSDConfigTest.py
+++ b/src/config/SSSDConfigTest.py
@@ -1,4 +1,22 @@
 #!/usr/bin/env python
+#  SSSD
+#
+#  SSSD Config API tests
+#
+#  Copyright (C) Red Hat
+#
+#  This program is free software; you can redistribute it and/or modify
+#  it under the terms of the GNU General Public License as published by
+#  the Free Software Foundation; either version 3 of the License, or
+#  (at your option) any later version.
+#
+#  This program is distributed in the hope that it will be useful,
+#  but WITHOUT ANY WARRANTY; without even the implied warranty of
+#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#  GNU General Public License for more details.
+#
+#  You should have received a copy of the GNU General Public License
+#  along with this program.  If not, see .
 '''
 Created on Sep 18, 2009
 
diff --git a/src/sss_client/sss_pac_responder_client.c b/src/sss_client/sss_pac_responder_client.c
index 1185381f1..07d92315d 100644
--- a/src/sss_client/sss_pac_responder_client.c
+++ b/src/sss_client/sss_pac_responder_client.c
@@ -1,3 +1,20 @@
+/*
+Copyright (C) 2016 Red Hat
+
+This program is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program.  If not, see .
+*/
+
 
 #include 
 #include 
diff --git a/src/tests/pyhbac-test.py b/src/tests/pyhbac-test.py
index 393fb2d4c..2b7e0334b 100755
--- a/src/tests/pyhbac-test.py
+++ b/src/tests/pyhbac-test.py
@@ -1,4 +1,23 @@
 #!/usr/bin/env python
+#  SSSD
+#
+#  SSSD HBAC python API tests
+#
+#  Copyright (C) Red Hat
+#
+#  This program is free software; you can redistribute it and/or modify
+#  it under the terms of the GNU General Public License as published by
+#  the Free Software Foundation; either version 3 of the License, or
+#  (at your option) any later version.
+#
+#  This program is distributed in the hope that it will be useful,
+#  but WITHOUT ANY WARRANTY; without even the implied warranty of
+#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#  GNU General Public License for more details.
+#
+#  You should have received a copy of the GNU General Public License
+#  along with this program.  If not, see .
+
 from __future__ import print_function
 
 import unittest
diff --git a/src/tools/sss_seed.c b/src/tools/sss_seed.c
index c11500bd2..564f5b3b9 100644
--- a/src/tools/sss_seed.c
+++ b/src/tools/sss_seed.c
@@ -1,3 +1,20 @@
+/*
+Copyright (C) 2016 Red Hat
+
+This program is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program.  If not, see .
+*/
+
 #include 
 #include 
 #include 
___
sssd-devel mailing list -- sssd-devel@lists.fedorahost

[SSSD] [sssd PR#636][comment] failover: tune up default timeouts

2018-08-13 Thread pbrezina 
  URL: https://github.com/SSSD/sssd/pull/636
Title: #636: failover: tune up default timeouts

pbrezina commented:
"""
What would you like to have? This will allow to test 3 servers before 
timeouting the whole operation. Can we decrease the lowest timeout from 6 to 
say 3? I think no.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/636#issuecomment-412497620
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/DHSEXWCDDLGLDXFYZSKBHJSWWFBSDPRT/

[SSSD] [sssd PR#637][+Accepted] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/637
Title: #637: Relicense GPLv2 only files as GPLv3+

Label: +Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/5OPRUSATPMOXYSDF5URDLKRV3IWBELP4/

[SSSD] [sssd PR#637][comment] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/637
Title: #637: Relicense GPLv2 only files as GPLv3+

fidencio commented:
"""
Adding the "Accepted" label as per @mzidek-rh's review.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/637#issuecomment-412495034
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/O7IZFKBIJYRUEHSO7EN3MUSW45A54QBU/

[SSSD] [sssd PR#630][+Accepted] KCM/SECRETS: Use a library to access the secrets storage instead of the secrets responder, deprecate secrets responder

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/630
Title: #630: KCM/SECRETS: Use a library to access the secrets storage instead 
of the secrets responder, deprecate secrets responder

Label: +Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/OBFJ27FYX63CB5H5XRLJKRJ36SMEOH4G/

[SSSD] [sssd PR#630][comment] KCM/SECRETS: Use a library to access the secrets storage instead of the secrets responder, deprecate secrets responder

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/630
Title: #630: KCM/SECRETS: Use a library to access the secrets storage instead 
of the secrets responder, deprecate secrets responder

fidencio commented:
"""
CI: http://vm-031.${abc}/logs/job/91/87/summary.html
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/630#issuecomment-412494544
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/AYHSGC6WIVAFNVZO3LCMYURGJZ43XUQK/

[SSSD] [sssd PR#637][comment] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread mzidek-rh 
  URL: https://github.com/SSSD/sssd/pull/637
Title: #637: Relicense GPLv2 only files as GPLv3+

mzidek-rh commented:
"""
Ok, then it is an ACK.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/637#issuecomment-412490392
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/TSZFUDSN5SAKYKEWOO5GEC4HNBVXF54Z/

[SSSD] [sssd PR#637][comment] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/637
Title: #637: Relicense GPLv2 only files as GPLv3+

jhrozek commented:
"""
I think it's fine as long as the centos ci passes, realistically the only thing 
that could have break is pep8.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/637#issuecomment-412489768
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/MS7SEBSV7KFF3RFVAR3JEVZEU7NZ63I2/

[SSSD] [sssd PR#637][comment] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread mzidek-rh 
  URL: https://github.com/SSSD/sssd/pull/637
Title: #637: Relicense GPLv2 only files as GPLv3+

mzidek-rh commented:
"""
LGTM.

Does it make sense to run a CI for this? I think the CI infra is quite 
overloaded and this is just change in comments. I would probably skip the CI 
for this if it is OK with others.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/637#issuecomment-412489433
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/OMSTJLOZ4CE2274PZZI5TNKQGHQL5OAN/

[SSSD] [sssd PR#636][comment] failover: tune up default timeouts

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/636
Title: #636: failover: tune up default timeouts

jhrozek commented:
"""
18 and 24 seem like /really/ long time outs. Can we use something lower? I 
can't imagine waiting for 24 seconds until sssd goes offline..
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/636#issuecomment-412483702
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/OEPMLNIJ4XHPHQCZOIEQKA3QAED57I2H/

[SSSD] [sssd PR#637][opened] Relicense GPLv2 only files as GPLv3+

2018-08-13 Thread jhrozek 
   URL: https://github.com/SSSD/sssd/pull/637
Author: jhrozek
 Title: #637: Relicense GPLv2 only files as GPLv3+
Action: opened

PR body:
"""
This patchset is seemingly large, but only the license blobs were in fact 
changed. There is one patch per changed file.

In most cases, we should be totally fine as everyone who touched the file was a 
RH employee and RH owns the copyright and at the same time, the work was 
original, not a derivative of some original v2 only work.

There are two exceptions:
 - there was an outside contributor who fixed some typos. I contacted him and 
Rene Genz kindly agreed to use v3+
 - ipachangeconf.py was based on authconfig code. But since the authconfig code 
itself is v2+, there v2 only blob was a mistake in the first place.
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/637/head:pr637
git checkout pr637
From fb5ffd854c57c745dd388036cc715508c3a2ecd0 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek 
Date: Mon, 13 Aug 2018 09:53:00 +
Subject: [PATCH 01/38] src/tests/python-test.py is GPLv3+
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The following people touched the file:

$ git log --format='%an <%ae>' src/tests/python-test.py | sort | uniq
Bohuslav Kabrda 
Fabiano Fidêncio 
Lukas Slebodnik 
René Genz 
Stephen Gallagher 

All except René Genz are Red Hat employees and Rene agreed to use GPLv3+
for his contribution.
---
 src/tests/python-test.py | 11 +--
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/src/tests/python-test.py b/src/tests/python-test.py
index c0494db1a..b66bf3966 100644
--- a/src/tests/python-test.py
+++ b/src/tests/python-test.py
@@ -6,10 +6,10 @@
 #
 # Copyright (C) 2009  Red Hat
 # see file 'COPYING' for use and warranty information
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of the GNU General Public License as
-# published by the Free Software Foundation; version 2 only
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
 #
 # This program is distributed in the hope that it will be useful,
 # but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ -17,8 +17,7 @@
 # GNU General Public License for more details.
 #
 # You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+# along with this program.  If not, see .
 
 import os
 import tempfile

From 698e41145679e9a95aad3cd9d0c252234fe64cd9 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek 
Date: Mon, 13 Aug 2018 09:56:01 +
Subject: [PATCH 02/38] src/tests/intg/util.py is licensed under GPLv3+
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

$ git log --format='%an <%ae>' src/tests/intg/util.py | sort | uniq
Fabiano Fidêncio 
Jakub Hrozek 
Lukas Slebodnik 
Michal Židek 
Nikolai Kondrashov 

All people who touched the file are Red Hat employees and the file is
original work.
---
 src/tests/intg/util.py | 15 ---
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/src/tests/intg/util.py b/src/tests/intg/util.py
index bfebbfb35..dd4dcf3f8 100644
--- a/src/tests/intg/util.py
+++ b/src/tests/intg/util.py
@@ -4,14 +4,15 @@
 # Copyright (c) 2015 Red Hat, Inc.
 # Author: Nikolai Kondrashov 
 #
-# This is free software; you can redistribute it and/or modify it
-# under the terms of the GNU General Public License as published by
-# the Free Software Foundation; version 2 only
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
 #
-# This program is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see .

From e4a9ba62745f00fbb9cf7a93d91d5335f1edfcd4 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek 
Date: Mon, 13 Aug 2018 09:58:57 +
Subject: [PATCH 03/38] src/tests/intg/test_ts_cache.py is licensed under
 GPLv3+
MIME-Version: 1.0
Content-Type: text/plai

[SSSD] [sssd PR#636][opened] failover: tune up default timeouts

2018-08-13 Thread pbrezina 
   URL: https://github.com/SSSD/sssd/pull/636
Author: pbrezina
 Title: #636: failover: tune up default timeouts
Action: opened

PR body:
"""
Resolves:
https://pagure.io/SSSD/sssd/issue/3217
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/636/head:pr636
git checkout pr636
From 58daa8f44d86708f5757ab86e5be0c7d70f32640 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= 
Date: Mon, 13 Aug 2018 12:21:13 +0200
Subject: [PATCH] failover: tune up default timeouts

Resolves:
https://pagure.io/SSSD/sssd/issue/3217
---
 src/man/include/failover.xml | 6 ++
 src/man/sssd-ldap.5.xml  | 2 +-
 src/providers/ad/ad_opts.c   | 2 +-
 src/providers/data_provider_fo.c | 2 +-
 src/providers/ipa/ipa_opts.c | 2 +-
 src/providers/ldap/ldap_opts.c   | 2 +-
 6 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/src/man/include/failover.xml b/src/man/include/failover.xml
index cd6fd4d79..1eb7aa2bd 100644
--- a/src/man/include/failover.xml
+++ b/src/man/include/failover.xml
@@ -79,6 +79,9 @@
 
 How long would SSSD talk to a single DNS server.
 
+
+Default: 6
+
 
 
 
@@ -92,6 +95,9 @@
 include several steps, such as resolving DNS SRV
 queries or locating the site.
 
+
+Default: 18
+
 
 
 
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index 3145f0730..6fabca7e9 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -1453,7 +1453,7 @@
 StartTLS operation.
 
 
-Default: 6
+Default: 24
 
 
 
diff --git a/src/providers/ad/ad_opts.c b/src/providers/ad/ad_opts.c
index afcfa3773..3c26309c4 100644
--- a/src/providers/ad/ad_opts.c
+++ b/src/providers/ad/ad_opts.c
@@ -63,7 +63,7 @@ struct dp_option ad_def_ldap_opts[] = {
 { "ldap_default_authtok", DP_OPT_BLOB, NULL_BLOB, NULL_BLOB },
 { "ldap_search_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
 { "ldap_network_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
-{ "ldap_opt_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
+{ "ldap_opt_timeout", DP_OPT_NUMBER, { .number = 24 }, NULL_NUMBER },
 { "ldap_tls_reqcert", DP_OPT_STRING, { "hard" }, NULL_STRING },
 { "ldap_user_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
 { "ldap_user_search_scope", DP_OPT_STRING, { "sub" }, NULL_STRING },
diff --git a/src/providers/data_provider_fo.c b/src/providers/data_provider_fo.c
index 332174e34..f7a66899a 100644
--- a/src/providers/data_provider_fo.c
+++ b/src/providers/data_provider_fo.c
@@ -821,7 +821,7 @@ void _be_fo_set_port_status(struct be_ctx *ctx,
 /* Resolver back end interface */
 static struct dp_option dp_res_default_opts[] = {
 { "lookup_family_order", DP_OPT_STRING, { "ipv4_first" }, NULL_STRING },
-{ "dns_resolver_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
+{ "dns_resolver_timeout", DP_OPT_NUMBER, { .number = 18 }, NULL_NUMBER },
 { "dns_resolver_op_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
 { "dns_discovery_domain", DP_OPT_STRING, NULL_STRING, NULL_STRING },
 DP_OPTION_TERMINATOR
diff --git a/src/providers/ipa/ipa_opts.c b/src/providers/ipa/ipa_opts.c
index 485ad4fe3..919a515e1 100644
--- a/src/providers/ipa/ipa_opts.c
+++ b/src/providers/ipa/ipa_opts.c
@@ -75,7 +75,7 @@ struct dp_option ipa_def_ldap_opts[] = {
 { "ldap_default_authtok", DP_OPT_BLOB, NULL_BLOB, NULL_BLOB },
 { "ldap_search_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
 { "ldap_network_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
-{ "ldap_opt_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
+{ "ldap_opt_timeout", DP_OPT_NUMBER, { .number = 24 }, NULL_NUMBER },
 { "ldap_tls_reqcert", DP_OPT_STRING, { "hard" }, NULL_STRING },
 { "ldap_user_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
 { "ldap_user_search_scope", DP_OPT_STRING, { "sub" }, NULL_STRING },
diff --git a/src/providers/ldap/ldap_opts.c b/src/providers/ldap/ldap_opts.c
index 8b82e92ee..74f4d6e6f 100644
--- a/src/providers/ldap/ldap_opts.c
+++ b/src/providers/ldap/ldap_opts.c
@@ -36,7 +36,7 @@ struct dp_option default_basic_opts[] = {
 { "ldap_default_authtok", DP_OPT_BLOB, NULL_BLOB, NULL_BLOB },
 { "ldap_search_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
 { "ldap_network_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
-{

[SSSD] [sssd PR#601][comment] sbus: integrate sssd with sbus2

2018-08-13 Thread pbrezina 
  URL: https://github.com/SSSD/sssd/pull/601
Title: #601: sbus: integrate sssd with sbus2

pbrezina commented:
"""
Ticket to fix tests: https://pagure.io/SSSD/sssd/issue/3806

I included new patch to disable failing tests and fixed the whitespace issue. 
It turned out there were few trailing whitespaces in codegen templates that 
were removed by Jakub's `git am` and thus the files got regenerated.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/601#issuecomment-412469626
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/5MDND5XLTK3ZUYVPCDFJ4TODTRXWNMLK/

[SSSD] [sssd PR#628][+Accepted] providers: drop ldap_{init, }groups_use_matching_rule_in_chain support

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/628
Title: #628: providers: drop ldap_{init,}groups_use_matching_rule_in_chain 
support

Label: +Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/ZLAZ5KOX34ME24XCC2L24NLL2ARY6AKT/

[SSSD] [sssd PR#630][comment] KCM/SECRETS: Use a library to access the secrets storage instead of the secrets responder, deprecate secrets responder

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/630
Title: #630: KCM/SECRETS: Use a library to access the secrets storage instead 
of the secrets responder, deprecate secrets responder

fidencio commented:
"""
I gave it a try in the last version and it works as expected.

I've fired an internal CI build and I'll add the "Accepted" label as soon as I 
get the results.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/630#issuecomment-412462154
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/YUWD5WJEV7FPPLV6HU7SXEXJJ2RA3SS5/

[SSSD] [sssd PR#611][comment] Do not build the local provider by default

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/611
Title: #611: Do not build the local provider by default

jhrozek commented:
"""
Coverity and CI were OK
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/611#issuecomment-412460335
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/BKCBM6QUDTBASVEMEQFB2BOMVHNL7UJJ/

[SSSD] [sssd PR#611][+Accepted] Do not build the local provider by default

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/611
Title: #611: Do not build the local provider by default

Label: +Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/AHVN4JJNKKOSEW34IT7MSA6CWBOQBZFD/

[SSSD] [sssd PR#601][comment] sbus: integrate sssd with sbus2

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/601
Title: #601: sbus: integrate sssd with sbus2

jhrozek commented:
"""
And one more thing - after I ran make, I seem to have a newline in each of the 
generated files, e.g.:
```
diff --git a/src/responder/ifp/ifp_iface/sbus_ifp_arguments.c 
b/src/responder/ifp/ifp_iface/sbus_ifp_arguments.c
index 031db83ca..caf862d45 100644
--- a/src/responder/ifp/ifp_iface/sbus_ifp_arguments.c
+++ b/src/responder/ifp/ifp_iface/sbus_ifp_arguments.c
@@ -395,3 +395,4 @@ errno_t _sbus_ifp_invoker_write_u

 return EOK;
 }
+
diff --git a/src/responder/ifp/ifp_iface/sbus_ifp_client_async.c 
b/src/responder/ifp/ifp_iface/sbus_ifp_client_async.c
index 792061c62..d251e016c 100644
--- a/src/responder/ifp/ifp_iface/sbus_ifp_client_async.c
+++ b/src/responder/ifp/ifp_iface/sbus_ifp_client_async.c
@@ -28,3 +28,4 @@
 #include "responder/ifp/ifp_iface/sbus_ifp_arguments.h"
 #include "responder/ifp/ifp_iface/sbus_ifp_keygens.h"
 #include "responder/ifp/ifp_iface/sbus_ifp_client_properties.h"
+
```

Did something change in the codegen that needs to be commited?
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/601#issuecomment-412448997
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/ROMQMFP74JHO2OWZLFMZRD5LZETWK7ZK/

[SSSD] [sssd PR#601][-Changes requested] sbus: integrate sssd with sbus2

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/601
Title: #601: sbus: integrate sssd with sbus2

Label: -Changes requested
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/FNWZ43C6PS3YYDYH73DCZXFD6XU2HXGJ/

[SSSD] [sssd PR#601][comment] sbus: integrate sssd with sbus2

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/601
Title: #601: sbus: integrate sssd with sbus2

jhrozek commented:
"""
I can't figure that one either. Please create a ticket into 2.1 and resubmit 
the patches with the test disabled.

btw the beaker test with the non-root user is still failing, but manually 
everything works OK now. So I think once you resubmit with a nicer patch to 
disable the test, we can push the patches..
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/601#issuecomment-412445126
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/GUWZZNVH7LYRSJ6Z32N2FE2UCZ7E4LVW/

[SSSD] [sssd PR#635][+Accepted] sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/635
Title: #635: sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

Label: +Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/DCACOO6AVU2AHXHCICCBTNB6SAHUUJDS/

[SSSD] [sssd PR#601][comment] sbus: integrate sssd with sbus2

2018-08-13 Thread pbrezina 
  URL: https://github.com/SSSD/sssd/pull/601
Title: #601: sbus: integrate sssd with sbus2

pbrezina commented:
"""
Thank you. Please also do not forget the get domains test issue: 
https://github.com/SSSD/sssd/pull/601#issuecomment-399073534 I still was not 
able to figure this one out. But if necessary, we can disable this test and 
create a ticket for fixing it.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/601#issuecomment-412443003
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/T4GEVYXJJ6GBNMCIIJ6QXHIW7Z4MVXCR/

[SSSD] [sssd PR#624][comment] Fix "test-find-uid" and "find_uid-tests" tests

2018-08-13 Thread stanislavlevin 
  URL: https://github.com/SSSD/sssd/pull/624
Title: #624: Fix "test-find-uid" and "find_uid-tests" tests

stanislavlevin commented:
"""
I'm sorry, i had a vacation.
Thank you for a fix up and merging!
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/624#issuecomment-412437330
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/F5L7WCYBAKSUELXWFVRPLQQHOGA56VMT/

[SSSD] [sssd PR#635][comment] sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

2018-08-13 Thread fidencio 
  URL: https://github.com/SSSD/sssd/pull/635
Title: #635: sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

fidencio commented:
"""
After a quick chat with @jhrozek, I've decided to re-submit the patch and 
treated the manual reference (pubkeys) as a typo as we should not break command 
line compatibility by changing the command line option.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/635#issuecomment-412428922
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/MXXEH65Y7BY4PWT5BAKDTRQ6S6CLIEZ4/

[SSSD] [sssd PR#635][comment] sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

2018-08-13 Thread jhrozek 
  URL: https://github.com/SSSD/sssd/pull/635
Title: #635: sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

jhrozek commented:
"""
LGTM, let's give CI time to finish
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/635#issuecomment-412428775
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/KFTKCS3IY2YW7H6BQLDNW2ZCQA5DKQR4/

[SSSD] [sssd PR#635][synchronized] sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys

2018-08-13 Thread fidencio 
   URL: https://github.com/SSSD/sssd/pull/635
Author: fidencio
 Title: #635: sss_ssh_knownhostsproxy: fix typo pubkey -> pubkeys
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/635/head:pr635
git checkout pr635
From e31695e4567c7a3dc2035a7660262c67d2b50c04 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= 
Date: Sun, 12 Aug 2018 23:56:21 +0200
Subject: [PATCH] man/sss_ssh_knownhostsproxy: fix typo pubkeys -> pubkey
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

In commit 36f2fe8f63 a discrepancy between the command line option and
the manpage has been introduced.

Related:
https://pagure.io/SSSD/sssd/issue/3542

Signed-off-by: Fabiano Fidêncio 
---
 src/man/sss_ssh_knownhostsproxy.1.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/man/sss_ssh_knownhostsproxy.1.xml b/src/man/sss_ssh_knownhostsproxy.1.xml
index f84732c5d..58aeb0409 100644
--- a/src/man/sss_ssh_knownhostsproxy.1.xml
+++ b/src/man/sss_ssh_knownhostsproxy.1.xml
@@ -86,7 +86,7 @@ GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts
 
 
 
--k,--pubkeys
+-k,--pubkey
 
 
 
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/sssd-devel@lists.fedorahosted.org/message/GCMEC67FC673ZHBWQ7UJOTTQO67HX2X7/