[SSSD] [sssd PR#5633][comment] Gentoo/openrc: Add sssd-kcm service script

2021-05-19 Thread joakim-tjernlund
  URL: https://github.com/SSSD/sssd/pull/5633
Title: #5633: Gentoo/openrc: Add sssd-kcm service script

joakim-tjernlund commented:
"""
I am done now, please merge.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5633#issuecomment-844334755
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5633][synchronized] Gentoo/openrc: Add sssd-kcm service script

2021-05-19 Thread joakim-tjernlund
   URL: https://github.com/SSSD/sssd/pull/5633
Author: joakim-tjernlund
 Title: #5633: Gentoo/openrc: Add sssd-kcm service script
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5633/head:pr5633
git checkout pr5633
From 6a14b2444e0df7ea9d8e07feaeae23bfa1196fcd Mon Sep 17 00:00:00 2001
From: Joakim Tjernlund 
Date: Sun, 16 May 2021 17:53:21 +0200
Subject: [PATCH] Gentoo/openrc: Add sssd-kcm service script

---
 Makefile.am |  3 ++-
 configure.ac|  2 +-
 src/sysv/gentoo/sssd-kcm.in | 21 +
 3 files changed, 24 insertions(+), 2 deletions(-)
 create mode 100644 src/sysv/gentoo/sssd-kcm.in

diff --git a/Makefile.am b/Makefile.am
index 4d9acaef99..12cdfbc606 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -5079,7 +5079,8 @@ endif
 else
 if HAVE_GENTOO
 init_SCRIPTS += \
-src/sysv/gentoo/sssd
+src/sysv/gentoo/sssd \
+src/sysv/gentoo/sssd-kcm
 else
 init_SCRIPTS += \
 src/sysv/sssd
diff --git a/configure.ac b/configure.ac
index 496c558fb8..e98487cae0 100644
--- a/configure.ac
+++ b/configure.ac
@@ -524,7 +524,7 @@ AC_DEFINE_UNQUOTED([ABS_SRC_DIR], ["$my_srcdir"], [Absolute path to the source d
 
 AC_CONFIG_FILES([Makefile contrib/sssd.spec src/examples/rwtab src/doxy.config
  contrib/sssd-pcsc.rules
- src/sysv/sssd src/sysv/gentoo/sssd
+ src/sysv/sssd src/sysv/gentoo/sssd src/sysv/gentoo/sssd-kcm
  po/Makefile.in src/man/Makefile src/tests/cwrap/Makefile
  src/tests/intg/Makefile src/tests/test_CA/Makefile
  src/tests/test_CA/intermediate_CA/Makefile
diff --git a/src/sysv/gentoo/sssd-kcm.in b/src/sysv/gentoo/sssd-kcm.in
new file mode 100644
index 00..c9242bf9fb
--- /dev/null
+++ b/src/sysv/gentoo/sssd-kcm.in
@@ -0,0 +1,21 @@
+#!/sbin/openrc-run
+# Copyright 1999-2021 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v3
+
+description="SSSD Kerberos Cache Manager"
+command="@libexecdir@/sssd/sssd_kcm"
+command_background="true"
+command_args="--uid=0 --gid=0 --logger=files ${SSSD_KCM_OPTIONS}"
+pidfile="@pidpath@/sssd_kcm.pid"
+
+start_pre()
+{
+"@sbindir@/sssd" --genconf-section=kcm || return $?
+}
+
+depend()
+{
+need localmount clock
+use syslog
+before sssd
+}
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5613][-Ready to push] ipa: read auto_private_groups from id range if available

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5613
Title: #5613: ipa: read auto_private_groups from id range if available

Label: -Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5613][-Accepted] ipa: read auto_private_groups from id range if available

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5613
Title: #5613: ipa: read auto_private_groups from id range if available

Label: -Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5613][closed] ipa: read auto_private_groups from id range if available

2021-05-19 Thread pbrezina
   URL: https://github.com/SSSD/sssd/pull/5613
Author: pbrezina
 Title: #5613: ipa: read auto_private_groups from id range if available
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5613/head:pr5613
git checkout pr5613
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5613][+Pushed] ipa: read auto_private_groups from id range if available

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5613
Title: #5613: ipa: read auto_private_groups from id range if available

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5641][-Ready to push] UTIL/SECRETS: mistype fix

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5641
Title: #5641: UTIL/SECRETS: mistype fix

Label: -Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5613][comment] ipa: read auto_private_groups from id range if available

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5613
Title: #5613: ipa: read auto_private_groups from id range if available

pbrezina commented:
"""
Pushed PR: https://github.com/SSSD/sssd/pull/5613

* `master`
* 706627cf72d611155b2bc6d26a631252325c6095 - cache_req: consider mpg_mode 
of each domain
* b099498f5ce26660badef52b822cf07ce1d9f29a - ipa: read auto_private_groups 
from id range if available

"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5613#issuecomment-844312458
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5641][closed] UTIL/SECRETS: mistype fix

2021-05-19 Thread pbrezina
   URL: https://github.com/SSSD/sssd/pull/5641
Author: alexey-tikhonov
 Title: #5641: UTIL/SECRETS: mistype fix
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5641/head:pr5641
git checkout pr5641
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5641][-Accepted] UTIL/SECRETS: mistype fix

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5641
Title: #5641: UTIL/SECRETS: mistype fix

Label: -Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5641][+Pushed] UTIL/SECRETS: mistype fix

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5641
Title: #5641: UTIL/SECRETS: mistype fix

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5641][comment] UTIL/SECRETS: mistype fix

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5641
Title: #5641: UTIL/SECRETS: mistype fix

pbrezina commented:
"""
Pushed PR: https://github.com/SSSD/sssd/pull/5641

* `master`
* 9777427facccbbe45c855b0319258335dffb986a - UTIL/SECRETS: mistype fix

"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5641#issuecomment-844312213
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][closed] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
   URL: https://github.com/SSSD/sssd/pull/5643
Author: justin-stephenson
 Title: #5643: SECRETS: Resolve mkey path correctly
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5643/head:pr5643
git checkout pr5643
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][-Ready to push] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

Label: -Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][-Accepted] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

Label: -Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][+Pushed] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

pbrezina commented:
"""
Pushed PR: https://github.com/SSSD/sssd/pull/5643

* `master`
* dbde4e692e34d3ff8233ac17a5eae5a062637e48 - SECRETS: Resolve mkey path 
correctly

"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5643#issuecomment-844311994
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5613][+Ready to push] ipa: read auto_private_groups from id range if available

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5613
Title: #5613: ipa: read auto_private_groups from id range if available

Label: +Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5641][+Ready to push] UTIL/SECRETS: mistype fix

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5641
Title: #5641: UTIL/SECRETS: mistype fix

Label: +Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5633][comment] Gentoo/openrc: Add sssd-kcm service script

2021-05-19 Thread joakim-tjernlund
  URL: https://github.com/SSSD/sssd/pull/5633
Title: #5633: Gentoo/openrc: Add sssd-kcm service script

joakim-tjernlund commented:
"""
Added missing pre start cmd to generate kcm config
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5633#issuecomment-844310812
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][+Accepted] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

Label: +Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][+Ready to push] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

Label: +Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5633][synchronized] Gentoo/openrc: Add sssd-kcm service script

2021-05-19 Thread joakim-tjernlund
   URL: https://github.com/SSSD/sssd/pull/5633
Author: joakim-tjernlund
 Title: #5633: Gentoo/openrc: Add sssd-kcm service script
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5633/head:pr5633
git checkout pr5633
From 29f59bd19af3f3b09a2b1d9f3e592631d85dce98 Mon Sep 17 00:00:00 2001
From: Joakim Tjernlund 
Date: Sun, 16 May 2021 17:53:21 +0200
Subject: [PATCH] Gentoo/openrc: Add sssd-kcm service script

---
 Makefile.am |  3 ++-
 configure.ac|  2 +-
 src/sysv/gentoo/sssd-kcm.in | 22 ++
 3 files changed, 25 insertions(+), 2 deletions(-)
 create mode 100644 src/sysv/gentoo/sssd-kcm.in

diff --git a/Makefile.am b/Makefile.am
index 4d9acaef99..12cdfbc606 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -5079,7 +5079,8 @@ endif
 else
 if HAVE_GENTOO
 init_SCRIPTS += \
-src/sysv/gentoo/sssd
+src/sysv/gentoo/sssd \
+src/sysv/gentoo/sssd-kcm
 else
 init_SCRIPTS += \
 src/sysv/sssd
diff --git a/configure.ac b/configure.ac
index 496c558fb8..e98487cae0 100644
--- a/configure.ac
+++ b/configure.ac
@@ -524,7 +524,7 @@ AC_DEFINE_UNQUOTED([ABS_SRC_DIR], ["$my_srcdir"], [Absolute path to the source d
 
 AC_CONFIG_FILES([Makefile contrib/sssd.spec src/examples/rwtab src/doxy.config
  contrib/sssd-pcsc.rules
- src/sysv/sssd src/sysv/gentoo/sssd
+ src/sysv/sssd src/sysv/gentoo/sssd src/sysv/gentoo/sssd-kcm
  po/Makefile.in src/man/Makefile src/tests/cwrap/Makefile
  src/tests/intg/Makefile src/tests/test_CA/Makefile
  src/tests/test_CA/intermediate_CA/Makefile
diff --git a/src/sysv/gentoo/sssd-kcm.in b/src/sysv/gentoo/sssd-kcm.in
new file mode 100644
index 00..0f0374f909
--- /dev/null
+++ b/src/sysv/gentoo/sssd-kcm.in
@@ -0,0 +1,22 @@
+#!/sbin/openrc-run
+# Copyright 1999-2021 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v3
+
+description="SSSD Kerberos Cache Manager"
+command="@libexecdir@/sssd/sssd_kcm"
+command_background="true"
+command_args="--uid=0 --gid=0 --logger=files ${SSSD_KCM_OPTIONS}"
+description="SSSD Kerberos Cache Manager"
+pidfile="@pidpath@/sssd_kcm.pid"
+
+start_pre()
+{
+"@sbindir@/sssd" --genconf-section=kcm || return $?
+}
+
+depend()
+{
+need localmount clock
+use syslog
+before sssd
+}
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

pbrezina commented:
"""
Ack.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5643#issuecomment-844276325
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][synchronized] SECRETS: Resolve mkey path correctly

2021-05-19 Thread justin-stephenson
   URL: https://github.com/SSSD/sssd/pull/5643
Author: justin-stephenson
 Title: #5643: SECRETS: Resolve mkey path correctly
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5643/head:pr5643
git checkout pr5643
From 39e380a1864f1016e1ac5995ea0b8f11ac86f049 Mon Sep 17 00:00:00 2001
From: Justin Stephenson 
Date: Wed, 19 May 2021 10:54:52 -0400
Subject: [PATCH] SECRETS: Resolve mkey path correctly

Use the correct master key path for the secrets database,
fixing an issue on upgrade.
---
 src/tests/cmocka/test_kcm_renewals.c |  3 ++-
 src/util/secrets/secrets.c   | 10 ++
 src/util/secrets/secrets.h   |  1 +
 3 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/src/tests/cmocka/test_kcm_renewals.c b/src/tests/cmocka/test_kcm_renewals.c
index f508bab005..53ce558be2 100644
--- a/src/tests/cmocka/test_kcm_renewals.c
+++ b/src/tests/cmocka/test_kcm_renewals.c
@@ -37,6 +37,7 @@
 #define TESTS_PATH "tp_" BASE_FILE_STEM
 #define TEST_CONF_DB "test_kcm_renewals_conf.ldb"
 #define TEST_DB_FULL_PATH  TESTS_PATH "/secrets.ldb"
+#define TEST_MKEY_FULL_PATH  TESTS_PATH "/.secrets.mkey"
 
 errno_t kcm_renew_all_tgts(TALLOC_CTX *mem_ctx,
struct kcm_renew_tgt_ctx *renew_tgt_ctx,
@@ -199,7 +200,7 @@ static void test_kcm_renewals_tgt(void **state)
 open(TEST_DB_FULL_PATH, O_CREAT|O_EXCL|O_WRONLY, 0600);
 
 ret = sss_sec_init_with_path(test_ctx->ccdb, NULL, TEST_DB_FULL_PATH,
- >sctx);
+ TEST_MKEY_FULL_PATH, >sctx);
 
 /* Create renew ctx */
 renew_tgt_ctx = talloc_zero(test_ctx, struct kcm_renew_tgt_ctx);
diff --git a/src/util/secrets/secrets.c b/src/util/secrets/secrets.c
index 42df14aa9c..2801eb2426 100644
--- a/src/util/secrets/secrets.c
+++ b/src/util/secrets/secrets.c
@@ -634,13 +634,13 @@ static int generate_master_key(const char *filename, size_t size)
 }
 
 static errno_t lcl_read_mkey(TALLOC_CTX *mem_ctx,
- const char *dbpath,
+ const char *mkeypath,
  struct sss_sec_data *master_key)
 {
 int mfd;
 ssize_t size;
 errno_t ret;
-const char *mkey = dbpath;
+const char *mkey = mkeypath;
 
 master_key->data = talloc_size(mem_ctx, MKEY_SIZE);
 if (master_key->data == NULL) {
@@ -703,6 +703,7 @@ static int set_quotas(struct sss_sec_ctx *sec_ctx,
 errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx,
struct sss_sec_hive_config **config_list,
const char *dbpath,
+   const char *mkeypath,
struct sss_sec_ctx **_sec_ctx)
 {
 struct sss_sec_ctx *sec_ctx;
@@ -746,7 +747,7 @@ errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx,
 goto done;
 }
 
-ret = lcl_read_mkey(sec_ctx, dbpath, _ctx->master_key);
+ret = lcl_read_mkey(sec_ctx, mkeypath, _ctx->master_key);
 if (ret != EOK) {
 DEBUG(SSSDBG_OP_FAILURE, "Cannot get the master key\n");
 goto done;
@@ -764,9 +765,10 @@ errno_t sss_sec_init(TALLOC_CTX *mem_ctx,
  struct sss_sec_ctx **_sec_ctx)
 {
 const char *dbpath = SECRETS_DB_PATH"/secrets.ldb";
+const char *mkeypath = SECRETS_DB_PATH"/.secrets.mkey";
 errno_t ret;
 
-ret = sss_sec_init_with_path(mem_ctx, config_list, dbpath, _sec_ctx);
+ret = sss_sec_init_with_path(mem_ctx, config_list, dbpath, mkeypath, _sec_ctx);
 if (ret != EOK) {
 DEBUG(SSSDBG_CRIT_FAILURE, "Failed to initialize secdb [%d]: %s\n",
ret, sss_strerror(ret));
diff --git a/src/util/secrets/secrets.h b/src/util/secrets/secrets.h
index a15b99ffec..958f0824b5 100644
--- a/src/util/secrets/secrets.h
+++ b/src/util/secrets/secrets.h
@@ -83,6 +83,7 @@ errno_t sss_sec_init(TALLOC_CTX *mem_ctx,
 errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx,
struct sss_sec_hive_config **config_list,
const char *dbpath,
+   const char *mkeypath,
struct sss_sec_ctx **_sec_ctx);
 
 errno_t sss_sec_new_req(TALLOC_CTX *mem_ctx,
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

pbrezina commented:
"""
@justin-stephenson Tests fails:

```
/shared/sssd/src/tests/cmocka/test_kcm_renewals.c: In function 
'test_kcm_renewals_tgt':
/shared/sssd/src/tests/cmocka/test_kcm_renewals.c:202:34: warning: passing 
argument 4 of 'sss_sec_init_with_path' from incompatible pointer type 
[-Wincompatible-pointer-types]
  202 |  >sctx);
  |  ^~~~
  |  |
  |  struct sss_sec_ctx **
In file included from /shared/sssd/src/responder/kcm/kcmsrv_ccache_secdb.c:28,
 from /shared/sssd/src/tests/cmocka/test_kcm_renewals.c:35:
/shared/sssd/src/util/secrets/secrets.h:86:44: note: expected 'const char *' 
but argument is of type 'struct sss_sec_ctx **'
   86 |const char *mkeypath,
  |^~~~
/shared/sssd/src/tests/cmocka/test_kcm_renewals.c:201:11: error: too few 
arguments to function 'sss_sec_init_with_path'
  201 | ret = sss_sec_init_with_path(test_ctx->ccdb, NULL, 
TEST_DB_FULL_PATH,
  |   ^~
In file included from /shared/sssd/src/responder/kcm/kcmsrv_ccache_secdb.c:28,
 from /shared/sssd/src/tests/cmocka/test_kcm_renewals.c:35:
/shared/sssd/src/util/secrets/secrets.h:83:9: note: declared here
   83 | errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx,
  | ^~
make[3]: *** [Makefile:40133: 
src/tests/cmocka/test_kcm_renewals-test_kcm_renewals.o] Error 1
```
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5643#issuecomment-844237509
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly

2021-05-19 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

pbrezina commented:
"""
Code-wise ack as well.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5643#issuecomment-844223119
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5644][comment] TOOLS: removed unneeded debug message

2021-05-19 Thread alexey-tikhonov
  URL: https://github.com/SSSD/sssd/pull/5644
Title: #5644: TOOLS: removed unneeded debug message

alexey-tikhonov commented:
"""
https://bugzilla.redhat.com/show_bug.cgi?id=1942438
https://bugzilla.redhat.com/show_bug.cgi?id=1942387
https://bugzilla.redhat.com/show_bug.cgi?id=1942277
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5644#issuecomment-844216785
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5644][+Bugzilla] TOOLS: removed unneeded debug message

2021-05-19 Thread alexey-tikhonov
  URL: https://github.com/SSSD/sssd/pull/5644
Title: #5644: TOOLS: removed unneeded debug message

Label: +Bugzilla
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly

2021-05-19 Thread sumit-bose
  URL: https://github.com/SSSD/sssd/pull/5643
Title: #5643: SECRETS: Resolve mkey path correctly

sumit-bose commented:
"""
Hi,

I tested updates from sssd-2.4.0 and kcm is now working as expected, so ACK 
with respect to functionality.

bye,
Sumit
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5643#issuecomment-844216166
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5644][opened] TOOLS: removed unneeded debug message

2021-05-19 Thread alexey-tikhonov
   URL: https://github.com/SSSD/sssd/pull/5644
Author: alexey-tikhonov
 Title: #5644: TOOLS: removed unneeded debug message
Action: opened

PR body:
"""
This message was logged before `sss_tool_init()` that sets debug level,
thus ignoring configured debug level.

Since the same message is printed via `ERROR` on a next line, this log
message doesn't add any information and can be simply removed.
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5644/head:pr5644
git checkout pr5644
From d908e3a8ac6181be3232a455d27c3032c8513737 Mon Sep 17 00:00:00 2001
From: Alexey Tikhonov 
Date: Wed, 19 May 2021 17:20:52 +0200
Subject: [PATCH] TOOLS: removed unneeded debug message

This message was logged before `sss_tool_init()` that sets debug level,
thus ignoring configured debug level.

Since the same message is printed via `ERROR` on a next line, this log
message doesn't add any information and can be simply removed.
---
 src/tools/common/sss_tools.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/tools/common/sss_tools.c b/src/tools/common/sss_tools.c
index 637e251f6e..806667f460 100644
--- a/src/tools/common/sss_tools.c
+++ b/src/tools/common/sss_tools.c
@@ -512,7 +512,6 @@ int sss_tool_main(int argc, const char **argv,
 
 uid = getuid();
 if (uid != 0) {
-DEBUG(SSSDBG_CRIT_FAILURE, "Running under %d, must be root\n", uid);
 ERROR("%1$s must be run as root\n", argv[0]);
 return EXIT_FAILURE;
 }
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5643][opened] SECRETS: Resolve mkey path correctly

2021-05-19 Thread justin-stephenson
   URL: https://github.com/SSSD/sssd/pull/5643
Author: justin-stephenson
 Title: #5643: SECRETS: Resolve mkey path correctly
Action: opened

PR body:
"""
Use the correct master key path for the secrets database,
fixing an issue on upgrade.
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5643/head:pr5643
git checkout pr5643
From 820376e3a54a053b1f98bc67e03b8e282b16ac96 Mon Sep 17 00:00:00 2001
From: Justin Stephenson 
Date: Wed, 19 May 2021 10:54:52 -0400
Subject: [PATCH] SECRETS: Resolve mkey path correctly

Use the correct master key path for the secrets database,
fixing an issue on upgrade.
---
 src/util/secrets/secrets.c | 10 ++
 src/util/secrets/secrets.h |  1 +
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/src/util/secrets/secrets.c b/src/util/secrets/secrets.c
index 42df14aa9c..2801eb2426 100644
--- a/src/util/secrets/secrets.c
+++ b/src/util/secrets/secrets.c
@@ -634,13 +634,13 @@ static int generate_master_key(const char *filename, size_t size)
 }
 
 static errno_t lcl_read_mkey(TALLOC_CTX *mem_ctx,
- const char *dbpath,
+ const char *mkeypath,
  struct sss_sec_data *master_key)
 {
 int mfd;
 ssize_t size;
 errno_t ret;
-const char *mkey = dbpath;
+const char *mkey = mkeypath;
 
 master_key->data = talloc_size(mem_ctx, MKEY_SIZE);
 if (master_key->data == NULL) {
@@ -703,6 +703,7 @@ static int set_quotas(struct sss_sec_ctx *sec_ctx,
 errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx,
struct sss_sec_hive_config **config_list,
const char *dbpath,
+   const char *mkeypath,
struct sss_sec_ctx **_sec_ctx)
 {
 struct sss_sec_ctx *sec_ctx;
@@ -746,7 +747,7 @@ errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx,
 goto done;
 }
 
-ret = lcl_read_mkey(sec_ctx, dbpath, _ctx->master_key);
+ret = lcl_read_mkey(sec_ctx, mkeypath, _ctx->master_key);
 if (ret != EOK) {
 DEBUG(SSSDBG_OP_FAILURE, "Cannot get the master key\n");
 goto done;
@@ -764,9 +765,10 @@ errno_t sss_sec_init(TALLOC_CTX *mem_ctx,
  struct sss_sec_ctx **_sec_ctx)
 {
 const char *dbpath = SECRETS_DB_PATH"/secrets.ldb";
+const char *mkeypath = SECRETS_DB_PATH"/.secrets.mkey";
 errno_t ret;
 
-ret = sss_sec_init_with_path(mem_ctx, config_list, dbpath, _sec_ctx);
+ret = sss_sec_init_with_path(mem_ctx, config_list, dbpath, mkeypath, _sec_ctx);
 if (ret != EOK) {
 DEBUG(SSSDBG_CRIT_FAILURE, "Failed to initialize secdb [%d]: %s\n",
ret, sss_strerror(ret));
diff --git a/src/util/secrets/secrets.h b/src/util/secrets/secrets.h
index a15b99ffec..958f0824b5 100644
--- a/src/util/secrets/secrets.h
+++ b/src/util/secrets/secrets.h
@@ -83,6 +83,7 @@ errno_t sss_sec_init(TALLOC_CTX *mem_ctx,
 errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx,
struct sss_sec_hive_config **config_list,
const char *dbpath,
+   const char *mkeypath,
struct sss_sec_ctx **_sec_ctx);
 
 errno_t sss_sec_new_req(TALLOC_CTX *mem_ctx,
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5630][+Waiting for review] Tests: Add support to verify authentication indicators in pam_sss_gss

2021-05-19 Thread sgoveas
  URL: https://github.com/SSSD/sssd/pull/5630
Title: #5630: Tests: Add support to verify authentication indicators in 
pam_sss_gss

Label: +Waiting for review
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5630][+Tests] Tests: Add support to verify authentication indicators in pam_sss_gss

2021-05-19 Thread sgoveas
  URL: https://github.com/SSSD/sssd/pull/5630
Title: #5630: Tests: Add support to verify authentication indicators in 
pam_sss_gss

Label: +Tests
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5639][+Waiting for review] TEST: Fixes after running new tests downstream

2021-05-19 Thread sgoveas
  URL: https://github.com/SSSD/sssd/pull/5639
Title: #5639: TEST: Fixes after running new tests downstream

Label: +Waiting for review
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5608][comment] nss: fix getsidbyname for IPA user-private-groups

2021-05-19 Thread sumit-bose
  URL: https://github.com/SSSD/sssd/pull/5608
Title: #5608: nss: fix getsidbyname for IPA user-private-groups

sumit-bose commented:
"""
Hi,

thank you for your comments, I update the commit message to make it (hopefully) 
more clear.

bye,
Sumit
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5608#issuecomment-843989660
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5608][synchronized] nss: fix getsidbyname for IPA user-private-groups

2021-05-19 Thread sumit-bose
   URL: https://github.com/SSSD/sssd/pull/5608
Author: sumit-bose
 Title: #5608: nss: fix getsidbyname for IPA user-private-groups
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5608/head:pr5608
git checkout pr5608
From f96876738f0a32ce649ac64e9d28d00ce7f7487f Mon Sep 17 00:00:00 2001
From: Sumit Bose 
Date: Tue, 27 Apr 2021 10:48:04 +0200
Subject: [PATCH] nss: fix getsidbyname for IPA user-private-groups

Currently the getsidbyname request does not work properly for IPA users
due to the way IPA user-private-groups are handled by SSSD. With this
patch two different cases are handled.

The first is about the default automatic user-private-groups
where the group is a managed object. In this case there will be a user
and a group object with the same name in the cache which will both be
found by the lookup by name. Since only the user object will have a SID
we can return this SID for the request.

The second case is the manual creation of a user and a groups with UID
and GIDs so that the group is a user-private group. Here the user and
the group object will both get a different SID assigned since they are
independent objects. In this case, both objects have a SID and the UID
and GID of the user and the GID of the group all have the same numerical
value, the SID of the user is returned.

Resolves: https://github.com/SSSD/sssd/issues/5607

:fixes: Fix getsidbyname issues with IPA users with a user-private-group
---
 src/db/sysdb_ops.c|   2 +-
 .../plugins/cache_req_object_by_name.c|   2 +-
 src/responder/nss/nss_cmd.c   |   5 +-
 src/responder/nss/nss_protocol_sid.c  | 119 --
 src/tests/cmocka/test_nss_srv.c   | 101 +++
 5 files changed, 218 insertions(+), 11 deletions(-)

diff --git a/src/db/sysdb_ops.c b/src/db/sysdb_ops.c
index f2af2f53e6..0785bf8014 100644
--- a/src/db/sysdb_ops.c
+++ b/src/db/sysdb_ops.c
@@ -5266,7 +5266,7 @@ errno_t sysdb_search_object_by_name(TALLOC_CTX *mem_ctx,
 goto done;
 }
 
-ret = sysdb_search_object_attr(mem_ctx, domain, filter, attrs, true, res);
+ret = sysdb_search_object_attr(mem_ctx, domain, filter, attrs, false, res);
 
 done:
 talloc_free(tmp_ctx);
diff --git a/src/responder/common/cache_req/plugins/cache_req_object_by_name.c b/src/responder/common/cache_req/plugins/cache_req_object_by_name.c
index 83d00f7750..907f1f3d50 100644
--- a/src/responder/common/cache_req/plugins/cache_req_object_by_name.c
+++ b/src/responder/common/cache_req/plugins/cache_req_object_by_name.c
@@ -190,7 +190,7 @@ const struct cache_req_plugin cache_req_object_by_name = {
 .parse_name = true,
 .ignore_default_domain = false,
 .bypass_cache = false,
-.only_one_result = true,
+.only_one_result = false,
 .search_all_domains = false,
 .require_enumeration = false,
 .allow_missing_fqn = false,
diff --git a/src/responder/nss/nss_cmd.c b/src/responder/nss/nss_cmd.c
index 4698e751c9..a487e1c248 100644
--- a/src/responder/nss/nss_cmd.c
+++ b/src/responder/nss/nss_cmd.c
@@ -1121,7 +1121,10 @@ static errno_t nss_cmd_endservent(struct cli_ctx *cli_ctx)
 
 static errno_t nss_cmd_getsidbyname(struct cli_ctx *cli_ctx)
 {
-const char *attrs[] = { SYSDB_SID_STR, NULL };
+/* The attributes besides SYSDB_SID_STR are needed to handle some corner
+ * cases with respect to user-private-groups */
+const char *attrs[] = { SYSDB_SID_STR, SYSDB_UIDNUM, SYSDB_GIDNUM,
+SYSDB_OBJECTCATEGORY, NULL };
 
 return nss_getby_name(cli_ctx, false, CACHE_REQ_OBJECT_BY_NAME, attrs,
   SSS_MC_NONE, nss_protocol_fill_sid);
diff --git a/src/responder/nss/nss_protocol_sid.c b/src/responder/nss/nss_protocol_sid.c
index 96cb8617bc..0fd8d48dad 100644
--- a/src/responder/nss/nss_protocol_sid.c
+++ b/src/responder/nss/nss_protocol_sid.c
@@ -87,13 +87,115 @@ nss_get_id_type(struct nss_cmd_ctx *cmd_ctx,
 return EOK;
 }
 
+static errno_t
+nss_get_sid_id_type(struct nss_cmd_ctx *cmd_ctx,
+struct cache_req_result *result,
+const char **_sid,
+enum sss_id_type *_type)
+{
+errno_t ret;
+size_t c;
+const char *tmp;
+const char *user_sid = NULL;
+const char *group_sid = NULL;
+uint64_t user_uid = 0;
+uint64_t user_gid = 0;
+uint64_t group_gid = 0;
+enum sss_id_type ltype;
+
+if (result->count == 1) {
+*_sid = ldb_msg_find_attr_as_string(result->msgs[0],
+SYSDB_SID_STR, NULL);
+if (*_sid == NULL) {
+DEBUG(SSSDBG_CRIT_FAILURE, "Missing SID.\n");
+return EINVAL;
+}
+return nss_get_id_type(cmd_ctx, result, _type);
+}
+
+for (c = 0; c < result->count; c++) {
+ret = find_sss_id_type(result->msgs[c],
+   false /* we are 

[SSSD] [sssd PR#5633][comment] Gentoo/openrc: Add sssd-kcm service script

2021-05-19 Thread alexey-tikhonov
  URL: https://github.com/SSSD/sssd/pull/5633
Title: #5633: Gentoo/openrc: Add sssd-kcm service script

alexey-tikhonov commented:
"""
Ok, I see. Thanks for the explanations.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5633#issuecomment-843821207
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5633][comment] Gentoo/openrc: Add sssd-kcm service script

2021-05-19 Thread sumit-bose
  URL: https://github.com/SSSD/sssd/pull/5633
Title: #5633: Gentoo/openrc: Add sssd-kcm service script

sumit-bose commented:
"""
> Not exclusively related to this PR, but rather a question in general: do we 
> really want to keep (and extend) any distribution specific stuff in upstream 
> repo? (Besides some stuff for Fedora that can be considered as examples.)

Hi,

in the given case I do not see it as 'distribution specific' but more as 'init 
system specific'. We currently have the  classical init script (a script for 
sssd-kcm is missing here), systemd socket and service files and OpenRC, which 
is currently hardcoded to Gentoo. But if there are other distributions using 
OpenRC this would be useful for them as well after some fixes for configure to 
detect this platform as well.

bye,
Sumit 
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5633#issuecomment-843806610
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure