[SSSD] [sssd PR#5633][comment] Gentoo/openrc: Add sssd-kcm service script
URL: https://github.com/SSSD/sssd/pull/5633 Title: #5633: Gentoo/openrc: Add sssd-kcm service script joakim-tjernlund commented: """ I am done now, please merge. """ See the full comment at https://github.com/SSSD/sssd/pull/5633#issuecomment-844334755 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5633][synchronized] Gentoo/openrc: Add sssd-kcm service script
URL: https://github.com/SSSD/sssd/pull/5633 Author: joakim-tjernlund Title: #5633: Gentoo/openrc: Add sssd-kcm service script Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5633/head:pr5633 git checkout pr5633 From 6a14b2444e0df7ea9d8e07feaeae23bfa1196fcd Mon Sep 17 00:00:00 2001 From: Joakim Tjernlund Date: Sun, 16 May 2021 17:53:21 +0200 Subject: [PATCH] Gentoo/openrc: Add sssd-kcm service script --- Makefile.am | 3 ++- configure.ac| 2 +- src/sysv/gentoo/sssd-kcm.in | 21 + 3 files changed, 24 insertions(+), 2 deletions(-) create mode 100644 src/sysv/gentoo/sssd-kcm.in diff --git a/Makefile.am b/Makefile.am index 4d9acaef99..12cdfbc606 100644 --- a/Makefile.am +++ b/Makefile.am @@ -5079,7 +5079,8 @@ endif else if HAVE_GENTOO init_SCRIPTS += \ -src/sysv/gentoo/sssd +src/sysv/gentoo/sssd \ +src/sysv/gentoo/sssd-kcm else init_SCRIPTS += \ src/sysv/sssd diff --git a/configure.ac b/configure.ac index 496c558fb8..e98487cae0 100644 --- a/configure.ac +++ b/configure.ac @@ -524,7 +524,7 @@ AC_DEFINE_UNQUOTED([ABS_SRC_DIR], ["$my_srcdir"], [Absolute path to the source d AC_CONFIG_FILES([Makefile contrib/sssd.spec src/examples/rwtab src/doxy.config contrib/sssd-pcsc.rules - src/sysv/sssd src/sysv/gentoo/sssd + src/sysv/sssd src/sysv/gentoo/sssd src/sysv/gentoo/sssd-kcm po/Makefile.in src/man/Makefile src/tests/cwrap/Makefile src/tests/intg/Makefile src/tests/test_CA/Makefile src/tests/test_CA/intermediate_CA/Makefile diff --git a/src/sysv/gentoo/sssd-kcm.in b/src/sysv/gentoo/sssd-kcm.in new file mode 100644 index 00..c9242bf9fb --- /dev/null +++ b/src/sysv/gentoo/sssd-kcm.in @@ -0,0 +1,21 @@ +#!/sbin/openrc-run +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v3 + +description="SSSD Kerberos Cache Manager" +command="@libexecdir@/sssd/sssd_kcm" +command_background="true" +command_args="--uid=0 --gid=0 --logger=files ${SSSD_KCM_OPTIONS}" +pidfile="@pidpath@/sssd_kcm.pid" + +start_pre() +{ +"@sbindir@/sssd" --genconf-section=kcm || return $? +} + +depend() +{ +need localmount clock +use syslog +before sssd +} ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5613][-Ready to push] ipa: read auto_private_groups from id range if available
URL: https://github.com/SSSD/sssd/pull/5613 Title: #5613: ipa: read auto_private_groups from id range if available Label: -Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5613][-Accepted] ipa: read auto_private_groups from id range if available
URL: https://github.com/SSSD/sssd/pull/5613 Title: #5613: ipa: read auto_private_groups from id range if available Label: -Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5613][closed] ipa: read auto_private_groups from id range if available
URL: https://github.com/SSSD/sssd/pull/5613 Author: pbrezina Title: #5613: ipa: read auto_private_groups from id range if available Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5613/head:pr5613 git checkout pr5613 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5613][+Pushed] ipa: read auto_private_groups from id range if available
URL: https://github.com/SSSD/sssd/pull/5613 Title: #5613: ipa: read auto_private_groups from id range if available Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5641][-Ready to push] UTIL/SECRETS: mistype fix
URL: https://github.com/SSSD/sssd/pull/5641 Title: #5641: UTIL/SECRETS: mistype fix Label: -Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5613][comment] ipa: read auto_private_groups from id range if available
URL: https://github.com/SSSD/sssd/pull/5613 Title: #5613: ipa: read auto_private_groups from id range if available pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5613 * `master` * 706627cf72d611155b2bc6d26a631252325c6095 - cache_req: consider mpg_mode of each domain * b099498f5ce26660badef52b822cf07ce1d9f29a - ipa: read auto_private_groups from id range if available """ See the full comment at https://github.com/SSSD/sssd/pull/5613#issuecomment-844312458 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5641][closed] UTIL/SECRETS: mistype fix
URL: https://github.com/SSSD/sssd/pull/5641 Author: alexey-tikhonov Title: #5641: UTIL/SECRETS: mistype fix Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5641/head:pr5641 git checkout pr5641 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5641][-Accepted] UTIL/SECRETS: mistype fix
URL: https://github.com/SSSD/sssd/pull/5641 Title: #5641: UTIL/SECRETS: mistype fix Label: -Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5641][+Pushed] UTIL/SECRETS: mistype fix
URL: https://github.com/SSSD/sssd/pull/5641 Title: #5641: UTIL/SECRETS: mistype fix Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5641][comment] UTIL/SECRETS: mistype fix
URL: https://github.com/SSSD/sssd/pull/5641 Title: #5641: UTIL/SECRETS: mistype fix pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5641 * `master` * 9777427facccbbe45c855b0319258335dffb986a - UTIL/SECRETS: mistype fix """ See the full comment at https://github.com/SSSD/sssd/pull/5641#issuecomment-844312213 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][closed] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Author: justin-stephenson Title: #5643: SECRETS: Resolve mkey path correctly Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5643/head:pr5643 git checkout pr5643 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][-Ready to push] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly Label: -Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][-Accepted] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly Label: -Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][+Pushed] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5643 * `master` * dbde4e692e34d3ff8233ac17a5eae5a062637e48 - SECRETS: Resolve mkey path correctly """ See the full comment at https://github.com/SSSD/sssd/pull/5643#issuecomment-844311994 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5613][+Ready to push] ipa: read auto_private_groups from id range if available
URL: https://github.com/SSSD/sssd/pull/5613 Title: #5613: ipa: read auto_private_groups from id range if available Label: +Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5641][+Ready to push] UTIL/SECRETS: mistype fix
URL: https://github.com/SSSD/sssd/pull/5641 Title: #5641: UTIL/SECRETS: mistype fix Label: +Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5633][comment] Gentoo/openrc: Add sssd-kcm service script
URL: https://github.com/SSSD/sssd/pull/5633 Title: #5633: Gentoo/openrc: Add sssd-kcm service script joakim-tjernlund commented: """ Added missing pre start cmd to generate kcm config """ See the full comment at https://github.com/SSSD/sssd/pull/5633#issuecomment-844310812 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][+Accepted] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][+Ready to push] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly Label: +Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5633][synchronized] Gentoo/openrc: Add sssd-kcm service script
URL: https://github.com/SSSD/sssd/pull/5633 Author: joakim-tjernlund Title: #5633: Gentoo/openrc: Add sssd-kcm service script Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5633/head:pr5633 git checkout pr5633 From 29f59bd19af3f3b09a2b1d9f3e592631d85dce98 Mon Sep 17 00:00:00 2001 From: Joakim Tjernlund Date: Sun, 16 May 2021 17:53:21 +0200 Subject: [PATCH] Gentoo/openrc: Add sssd-kcm service script --- Makefile.am | 3 ++- configure.ac| 2 +- src/sysv/gentoo/sssd-kcm.in | 22 ++ 3 files changed, 25 insertions(+), 2 deletions(-) create mode 100644 src/sysv/gentoo/sssd-kcm.in diff --git a/Makefile.am b/Makefile.am index 4d9acaef99..12cdfbc606 100644 --- a/Makefile.am +++ b/Makefile.am @@ -5079,7 +5079,8 @@ endif else if HAVE_GENTOO init_SCRIPTS += \ -src/sysv/gentoo/sssd +src/sysv/gentoo/sssd \ +src/sysv/gentoo/sssd-kcm else init_SCRIPTS += \ src/sysv/sssd diff --git a/configure.ac b/configure.ac index 496c558fb8..e98487cae0 100644 --- a/configure.ac +++ b/configure.ac @@ -524,7 +524,7 @@ AC_DEFINE_UNQUOTED([ABS_SRC_DIR], ["$my_srcdir"], [Absolute path to the source d AC_CONFIG_FILES([Makefile contrib/sssd.spec src/examples/rwtab src/doxy.config contrib/sssd-pcsc.rules - src/sysv/sssd src/sysv/gentoo/sssd + src/sysv/sssd src/sysv/gentoo/sssd src/sysv/gentoo/sssd-kcm po/Makefile.in src/man/Makefile src/tests/cwrap/Makefile src/tests/intg/Makefile src/tests/test_CA/Makefile src/tests/test_CA/intermediate_CA/Makefile diff --git a/src/sysv/gentoo/sssd-kcm.in b/src/sysv/gentoo/sssd-kcm.in new file mode 100644 index 00..0f0374f909 --- /dev/null +++ b/src/sysv/gentoo/sssd-kcm.in @@ -0,0 +1,22 @@ +#!/sbin/openrc-run +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v3 + +description="SSSD Kerberos Cache Manager" +command="@libexecdir@/sssd/sssd_kcm" +command_background="true" +command_args="--uid=0 --gid=0 --logger=files ${SSSD_KCM_OPTIONS}" +description="SSSD Kerberos Cache Manager" +pidfile="@pidpath@/sssd_kcm.pid" + +start_pre() +{ +"@sbindir@/sssd" --genconf-section=kcm || return $? +} + +depend() +{ +need localmount clock +use syslog +before sssd +} ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly pbrezina commented: """ Ack. """ See the full comment at https://github.com/SSSD/sssd/pull/5643#issuecomment-844276325 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][synchronized] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Author: justin-stephenson Title: #5643: SECRETS: Resolve mkey path correctly Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5643/head:pr5643 git checkout pr5643 From 39e380a1864f1016e1ac5995ea0b8f11ac86f049 Mon Sep 17 00:00:00 2001 From: Justin Stephenson Date: Wed, 19 May 2021 10:54:52 -0400 Subject: [PATCH] SECRETS: Resolve mkey path correctly Use the correct master key path for the secrets database, fixing an issue on upgrade. --- src/tests/cmocka/test_kcm_renewals.c | 3 ++- src/util/secrets/secrets.c | 10 ++ src/util/secrets/secrets.h | 1 + 3 files changed, 9 insertions(+), 5 deletions(-) diff --git a/src/tests/cmocka/test_kcm_renewals.c b/src/tests/cmocka/test_kcm_renewals.c index f508bab005..53ce558be2 100644 --- a/src/tests/cmocka/test_kcm_renewals.c +++ b/src/tests/cmocka/test_kcm_renewals.c @@ -37,6 +37,7 @@ #define TESTS_PATH "tp_" BASE_FILE_STEM #define TEST_CONF_DB "test_kcm_renewals_conf.ldb" #define TEST_DB_FULL_PATH TESTS_PATH "/secrets.ldb" +#define TEST_MKEY_FULL_PATH TESTS_PATH "/.secrets.mkey" errno_t kcm_renew_all_tgts(TALLOC_CTX *mem_ctx, struct kcm_renew_tgt_ctx *renew_tgt_ctx, @@ -199,7 +200,7 @@ static void test_kcm_renewals_tgt(void **state) open(TEST_DB_FULL_PATH, O_CREAT|O_EXCL|O_WRONLY, 0600); ret = sss_sec_init_with_path(test_ctx->ccdb, NULL, TEST_DB_FULL_PATH, - >sctx); + TEST_MKEY_FULL_PATH, >sctx); /* Create renew ctx */ renew_tgt_ctx = talloc_zero(test_ctx, struct kcm_renew_tgt_ctx); diff --git a/src/util/secrets/secrets.c b/src/util/secrets/secrets.c index 42df14aa9c..2801eb2426 100644 --- a/src/util/secrets/secrets.c +++ b/src/util/secrets/secrets.c @@ -634,13 +634,13 @@ static int generate_master_key(const char *filename, size_t size) } static errno_t lcl_read_mkey(TALLOC_CTX *mem_ctx, - const char *dbpath, + const char *mkeypath, struct sss_sec_data *master_key) { int mfd; ssize_t size; errno_t ret; -const char *mkey = dbpath; +const char *mkey = mkeypath; master_key->data = talloc_size(mem_ctx, MKEY_SIZE); if (master_key->data == NULL) { @@ -703,6 +703,7 @@ static int set_quotas(struct sss_sec_ctx *sec_ctx, errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx, struct sss_sec_hive_config **config_list, const char *dbpath, + const char *mkeypath, struct sss_sec_ctx **_sec_ctx) { struct sss_sec_ctx *sec_ctx; @@ -746,7 +747,7 @@ errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx, goto done; } -ret = lcl_read_mkey(sec_ctx, dbpath, _ctx->master_key); +ret = lcl_read_mkey(sec_ctx, mkeypath, _ctx->master_key); if (ret != EOK) { DEBUG(SSSDBG_OP_FAILURE, "Cannot get the master key\n"); goto done; @@ -764,9 +765,10 @@ errno_t sss_sec_init(TALLOC_CTX *mem_ctx, struct sss_sec_ctx **_sec_ctx) { const char *dbpath = SECRETS_DB_PATH"/secrets.ldb"; +const char *mkeypath = SECRETS_DB_PATH"/.secrets.mkey"; errno_t ret; -ret = sss_sec_init_with_path(mem_ctx, config_list, dbpath, _sec_ctx); +ret = sss_sec_init_with_path(mem_ctx, config_list, dbpath, mkeypath, _sec_ctx); if (ret != EOK) { DEBUG(SSSDBG_CRIT_FAILURE, "Failed to initialize secdb [%d]: %s\n", ret, sss_strerror(ret)); diff --git a/src/util/secrets/secrets.h b/src/util/secrets/secrets.h index a15b99ffec..958f0824b5 100644 --- a/src/util/secrets/secrets.h +++ b/src/util/secrets/secrets.h @@ -83,6 +83,7 @@ errno_t sss_sec_init(TALLOC_CTX *mem_ctx, errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx, struct sss_sec_hive_config **config_list, const char *dbpath, + const char *mkeypath, struct sss_sec_ctx **_sec_ctx); errno_t sss_sec_new_req(TALLOC_CTX *mem_ctx, ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly pbrezina commented: """ @justin-stephenson Tests fails: ``` /shared/sssd/src/tests/cmocka/test_kcm_renewals.c: In function 'test_kcm_renewals_tgt': /shared/sssd/src/tests/cmocka/test_kcm_renewals.c:202:34: warning: passing argument 4 of 'sss_sec_init_with_path' from incompatible pointer type [-Wincompatible-pointer-types] 202 | >sctx); | ^~~~ | | | struct sss_sec_ctx ** In file included from /shared/sssd/src/responder/kcm/kcmsrv_ccache_secdb.c:28, from /shared/sssd/src/tests/cmocka/test_kcm_renewals.c:35: /shared/sssd/src/util/secrets/secrets.h:86:44: note: expected 'const char *' but argument is of type 'struct sss_sec_ctx **' 86 |const char *mkeypath, |^~~~ /shared/sssd/src/tests/cmocka/test_kcm_renewals.c:201:11: error: too few arguments to function 'sss_sec_init_with_path' 201 | ret = sss_sec_init_with_path(test_ctx->ccdb, NULL, TEST_DB_FULL_PATH, | ^~ In file included from /shared/sssd/src/responder/kcm/kcmsrv_ccache_secdb.c:28, from /shared/sssd/src/tests/cmocka/test_kcm_renewals.c:35: /shared/sssd/src/util/secrets/secrets.h:83:9: note: declared here 83 | errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx, | ^~ make[3]: *** [Makefile:40133: src/tests/cmocka/test_kcm_renewals-test_kcm_renewals.o] Error 1 ``` """ See the full comment at https://github.com/SSSD/sssd/pull/5643#issuecomment-844237509 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly pbrezina commented: """ Code-wise ack as well. """ See the full comment at https://github.com/SSSD/sssd/pull/5643#issuecomment-844223119 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5644][comment] TOOLS: removed unneeded debug message
URL: https://github.com/SSSD/sssd/pull/5644 Title: #5644: TOOLS: removed unneeded debug message alexey-tikhonov commented: """ https://bugzilla.redhat.com/show_bug.cgi?id=1942438 https://bugzilla.redhat.com/show_bug.cgi?id=1942387 https://bugzilla.redhat.com/show_bug.cgi?id=1942277 """ See the full comment at https://github.com/SSSD/sssd/pull/5644#issuecomment-844216785 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5644][+Bugzilla] TOOLS: removed unneeded debug message
URL: https://github.com/SSSD/sssd/pull/5644 Title: #5644: TOOLS: removed unneeded debug message Label: +Bugzilla ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][comment] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Title: #5643: SECRETS: Resolve mkey path correctly sumit-bose commented: """ Hi, I tested updates from sssd-2.4.0 and kcm is now working as expected, so ACK with respect to functionality. bye, Sumit """ See the full comment at https://github.com/SSSD/sssd/pull/5643#issuecomment-844216166 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5644][opened] TOOLS: removed unneeded debug message
URL: https://github.com/SSSD/sssd/pull/5644 Author: alexey-tikhonov Title: #5644: TOOLS: removed unneeded debug message Action: opened PR body: """ This message was logged before `sss_tool_init()` that sets debug level, thus ignoring configured debug level. Since the same message is printed via `ERROR` on a next line, this log message doesn't add any information and can be simply removed. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5644/head:pr5644 git checkout pr5644 From d908e3a8ac6181be3232a455d27c3032c8513737 Mon Sep 17 00:00:00 2001 From: Alexey Tikhonov Date: Wed, 19 May 2021 17:20:52 +0200 Subject: [PATCH] TOOLS: removed unneeded debug message This message was logged before `sss_tool_init()` that sets debug level, thus ignoring configured debug level. Since the same message is printed via `ERROR` on a next line, this log message doesn't add any information and can be simply removed. --- src/tools/common/sss_tools.c | 1 - 1 file changed, 1 deletion(-) diff --git a/src/tools/common/sss_tools.c b/src/tools/common/sss_tools.c index 637e251f6e..806667f460 100644 --- a/src/tools/common/sss_tools.c +++ b/src/tools/common/sss_tools.c @@ -512,7 +512,6 @@ int sss_tool_main(int argc, const char **argv, uid = getuid(); if (uid != 0) { -DEBUG(SSSDBG_CRIT_FAILURE, "Running under %d, must be root\n", uid); ERROR("%1$s must be run as root\n", argv[0]); return EXIT_FAILURE; } ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5643][opened] SECRETS: Resolve mkey path correctly
URL: https://github.com/SSSD/sssd/pull/5643 Author: justin-stephenson Title: #5643: SECRETS: Resolve mkey path correctly Action: opened PR body: """ Use the correct master key path for the secrets database, fixing an issue on upgrade. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5643/head:pr5643 git checkout pr5643 From 820376e3a54a053b1f98bc67e03b8e282b16ac96 Mon Sep 17 00:00:00 2001 From: Justin Stephenson Date: Wed, 19 May 2021 10:54:52 -0400 Subject: [PATCH] SECRETS: Resolve mkey path correctly Use the correct master key path for the secrets database, fixing an issue on upgrade. --- src/util/secrets/secrets.c | 10 ++ src/util/secrets/secrets.h | 1 + 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/src/util/secrets/secrets.c b/src/util/secrets/secrets.c index 42df14aa9c..2801eb2426 100644 --- a/src/util/secrets/secrets.c +++ b/src/util/secrets/secrets.c @@ -634,13 +634,13 @@ static int generate_master_key(const char *filename, size_t size) } static errno_t lcl_read_mkey(TALLOC_CTX *mem_ctx, - const char *dbpath, + const char *mkeypath, struct sss_sec_data *master_key) { int mfd; ssize_t size; errno_t ret; -const char *mkey = dbpath; +const char *mkey = mkeypath; master_key->data = talloc_size(mem_ctx, MKEY_SIZE); if (master_key->data == NULL) { @@ -703,6 +703,7 @@ static int set_quotas(struct sss_sec_ctx *sec_ctx, errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx, struct sss_sec_hive_config **config_list, const char *dbpath, + const char *mkeypath, struct sss_sec_ctx **_sec_ctx) { struct sss_sec_ctx *sec_ctx; @@ -746,7 +747,7 @@ errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx, goto done; } -ret = lcl_read_mkey(sec_ctx, dbpath, _ctx->master_key); +ret = lcl_read_mkey(sec_ctx, mkeypath, _ctx->master_key); if (ret != EOK) { DEBUG(SSSDBG_OP_FAILURE, "Cannot get the master key\n"); goto done; @@ -764,9 +765,10 @@ errno_t sss_sec_init(TALLOC_CTX *mem_ctx, struct sss_sec_ctx **_sec_ctx) { const char *dbpath = SECRETS_DB_PATH"/secrets.ldb"; +const char *mkeypath = SECRETS_DB_PATH"/.secrets.mkey"; errno_t ret; -ret = sss_sec_init_with_path(mem_ctx, config_list, dbpath, _sec_ctx); +ret = sss_sec_init_with_path(mem_ctx, config_list, dbpath, mkeypath, _sec_ctx); if (ret != EOK) { DEBUG(SSSDBG_CRIT_FAILURE, "Failed to initialize secdb [%d]: %s\n", ret, sss_strerror(ret)); diff --git a/src/util/secrets/secrets.h b/src/util/secrets/secrets.h index a15b99ffec..958f0824b5 100644 --- a/src/util/secrets/secrets.h +++ b/src/util/secrets/secrets.h @@ -83,6 +83,7 @@ errno_t sss_sec_init(TALLOC_CTX *mem_ctx, errno_t sss_sec_init_with_path(TALLOC_CTX *mem_ctx, struct sss_sec_hive_config **config_list, const char *dbpath, + const char *mkeypath, struct sss_sec_ctx **_sec_ctx); errno_t sss_sec_new_req(TALLOC_CTX *mem_ctx, ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5630][+Waiting for review] Tests: Add support to verify authentication indicators in pam_sss_gss
URL: https://github.com/SSSD/sssd/pull/5630 Title: #5630: Tests: Add support to verify authentication indicators in pam_sss_gss Label: +Waiting for review ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5630][+Tests] Tests: Add support to verify authentication indicators in pam_sss_gss
URL: https://github.com/SSSD/sssd/pull/5630 Title: #5630: Tests: Add support to verify authentication indicators in pam_sss_gss Label: +Tests ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5639][+Waiting for review] TEST: Fixes after running new tests downstream
URL: https://github.com/SSSD/sssd/pull/5639 Title: #5639: TEST: Fixes after running new tests downstream Label: +Waiting for review ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5608][comment] nss: fix getsidbyname for IPA user-private-groups
URL: https://github.com/SSSD/sssd/pull/5608 Title: #5608: nss: fix getsidbyname for IPA user-private-groups sumit-bose commented: """ Hi, thank you for your comments, I update the commit message to make it (hopefully) more clear. bye, Sumit """ See the full comment at https://github.com/SSSD/sssd/pull/5608#issuecomment-843989660 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5608][synchronized] nss: fix getsidbyname for IPA user-private-groups
URL: https://github.com/SSSD/sssd/pull/5608 Author: sumit-bose Title: #5608: nss: fix getsidbyname for IPA user-private-groups Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5608/head:pr5608 git checkout pr5608 From f96876738f0a32ce649ac64e9d28d00ce7f7487f Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Tue, 27 Apr 2021 10:48:04 +0200 Subject: [PATCH] nss: fix getsidbyname for IPA user-private-groups Currently the getsidbyname request does not work properly for IPA users due to the way IPA user-private-groups are handled by SSSD. With this patch two different cases are handled. The first is about the default automatic user-private-groups where the group is a managed object. In this case there will be a user and a group object with the same name in the cache which will both be found by the lookup by name. Since only the user object will have a SID we can return this SID for the request. The second case is the manual creation of a user and a groups with UID and GIDs so that the group is a user-private group. Here the user and the group object will both get a different SID assigned since they are independent objects. In this case, both objects have a SID and the UID and GID of the user and the GID of the group all have the same numerical value, the SID of the user is returned. Resolves: https://github.com/SSSD/sssd/issues/5607 :fixes: Fix getsidbyname issues with IPA users with a user-private-group --- src/db/sysdb_ops.c| 2 +- .../plugins/cache_req_object_by_name.c| 2 +- src/responder/nss/nss_cmd.c | 5 +- src/responder/nss/nss_protocol_sid.c | 119 -- src/tests/cmocka/test_nss_srv.c | 101 +++ 5 files changed, 218 insertions(+), 11 deletions(-) diff --git a/src/db/sysdb_ops.c b/src/db/sysdb_ops.c index f2af2f53e6..0785bf8014 100644 --- a/src/db/sysdb_ops.c +++ b/src/db/sysdb_ops.c @@ -5266,7 +5266,7 @@ errno_t sysdb_search_object_by_name(TALLOC_CTX *mem_ctx, goto done; } -ret = sysdb_search_object_attr(mem_ctx, domain, filter, attrs, true, res); +ret = sysdb_search_object_attr(mem_ctx, domain, filter, attrs, false, res); done: talloc_free(tmp_ctx); diff --git a/src/responder/common/cache_req/plugins/cache_req_object_by_name.c b/src/responder/common/cache_req/plugins/cache_req_object_by_name.c index 83d00f7750..907f1f3d50 100644 --- a/src/responder/common/cache_req/plugins/cache_req_object_by_name.c +++ b/src/responder/common/cache_req/plugins/cache_req_object_by_name.c @@ -190,7 +190,7 @@ const struct cache_req_plugin cache_req_object_by_name = { .parse_name = true, .ignore_default_domain = false, .bypass_cache = false, -.only_one_result = true, +.only_one_result = false, .search_all_domains = false, .require_enumeration = false, .allow_missing_fqn = false, diff --git a/src/responder/nss/nss_cmd.c b/src/responder/nss/nss_cmd.c index 4698e751c9..a487e1c248 100644 --- a/src/responder/nss/nss_cmd.c +++ b/src/responder/nss/nss_cmd.c @@ -1121,7 +1121,10 @@ static errno_t nss_cmd_endservent(struct cli_ctx *cli_ctx) static errno_t nss_cmd_getsidbyname(struct cli_ctx *cli_ctx) { -const char *attrs[] = { SYSDB_SID_STR, NULL }; +/* The attributes besides SYSDB_SID_STR are needed to handle some corner + * cases with respect to user-private-groups */ +const char *attrs[] = { SYSDB_SID_STR, SYSDB_UIDNUM, SYSDB_GIDNUM, +SYSDB_OBJECTCATEGORY, NULL }; return nss_getby_name(cli_ctx, false, CACHE_REQ_OBJECT_BY_NAME, attrs, SSS_MC_NONE, nss_protocol_fill_sid); diff --git a/src/responder/nss/nss_protocol_sid.c b/src/responder/nss/nss_protocol_sid.c index 96cb8617bc..0fd8d48dad 100644 --- a/src/responder/nss/nss_protocol_sid.c +++ b/src/responder/nss/nss_protocol_sid.c @@ -87,13 +87,115 @@ nss_get_id_type(struct nss_cmd_ctx *cmd_ctx, return EOK; } +static errno_t +nss_get_sid_id_type(struct nss_cmd_ctx *cmd_ctx, +struct cache_req_result *result, +const char **_sid, +enum sss_id_type *_type) +{ +errno_t ret; +size_t c; +const char *tmp; +const char *user_sid = NULL; +const char *group_sid = NULL; +uint64_t user_uid = 0; +uint64_t user_gid = 0; +uint64_t group_gid = 0; +enum sss_id_type ltype; + +if (result->count == 1) { +*_sid = ldb_msg_find_attr_as_string(result->msgs[0], +SYSDB_SID_STR, NULL); +if (*_sid == NULL) { +DEBUG(SSSDBG_CRIT_FAILURE, "Missing SID.\n"); +return EINVAL; +} +return nss_get_id_type(cmd_ctx, result, _type); +} + +for (c = 0; c < result->count; c++) { +ret = find_sss_id_type(result->msgs[c], + false /* we are
[SSSD] [sssd PR#5633][comment] Gentoo/openrc: Add sssd-kcm service script
URL: https://github.com/SSSD/sssd/pull/5633 Title: #5633: Gentoo/openrc: Add sssd-kcm service script alexey-tikhonov commented: """ Ok, I see. Thanks for the explanations. """ See the full comment at https://github.com/SSSD/sssd/pull/5633#issuecomment-843821207 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5633][comment] Gentoo/openrc: Add sssd-kcm service script
URL: https://github.com/SSSD/sssd/pull/5633 Title: #5633: Gentoo/openrc: Add sssd-kcm service script sumit-bose commented: """ > Not exclusively related to this PR, but rather a question in general: do we > really want to keep (and extend) any distribution specific stuff in upstream > repo? (Besides some stuff for Fedora that can be considered as examples.) Hi, in the given case I do not see it as 'distribution specific' but more as 'init system specific'. We currently have the classical init script (a script for sssd-kcm is missing here), systemd socket and service files and OpenRC, which is currently hardcoded to Gentoo. But if there are other distributions using OpenRC this would be useful for them as well after some fixes for configure to detect this platform as well. bye, Sumit """ See the full comment at https://github.com/SSSD/sssd/pull/5633#issuecomment-843806610 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure