Re: [SSSD] [PATCH] Handle Krb5 password expiration warning

2010-05-05 Thread Sumit Bose
On Tue, May 04, 2010 at 03:16:12PM -0400, Stephen Gallagher wrote: On 05/03/2010 04:44 PM, Sumit Bose wrote: On Mon, May 03, 2010 at 10:39:57PM +0200, Sumit Bose wrote: On Mon, May 03, 2010 at 02:29:39PM -0400, Stephen Gallagher wrote: On 04/30/2010 12:10 PM, Sumit Bose wrote: On Fri, Apr

[SSSD] [PATCH] Add retry option to pam_sss

2010-05-05 Thread Sumit Bose
Hi, this patch should fix #408 by adding and option named retry to pam_sss. bye, Sumit From 123bc673de7f6696882dcc4865589a60e3177b19 Mon Sep 17 00:00:00 2001 From: Sumit Bose sb...@redhat.com Date: Wed, 28 Apr 2010 10:01:06 +0200 Subject: [PATCH] Add retry option to pam_sss ---

Re: [SSSD] [PATCH] Handle Krb5 password expiration warning

2010-05-05 Thread Stephen Gallagher
On 05/05/2010 04:59 AM, Sumit Bose wrote: New version attached. Please note that there is also a rebased version of 'Add support for delayed kinit if offline' that works on to top this patch. bye, Sumit Ack. -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red

Re: [SSSD] [PATCH] Clean up kdcinfo and kpasswdinfo files when exiting

2010-05-05 Thread Stephen Gallagher
On 05/05/2010 03:40 AM, Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/04/2010 11:44 PM, Jakub Hrozek wrote: On 05/04/2010 10:54 PM, Stephen Gallagher wrote: https://fedorahosted.org/sssd/ticket/452 This patch adds a signal handler for SIGTERM that will remove the

Re: [SSSD] [PATCH] Clean up kdcinfo and kpasswdinfo files when exiting

2010-05-05 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/05/2010 02:18 PM, Stephen Gallagher wrote: On 05/05/2010 03:40 AM, Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/04/2010 11:44 PM, Jakub Hrozek wrote: On 05/04/2010 10:54 PM, Stephen Gallagher wrote:

Re: [SSSD] [PATCH] Add support for delayed kinit if offline (sssd-1-2 only)

2010-05-05 Thread Stephen Gallagher
On 05/05/2010 05:02 AM, Sumit Bose wrote rebased version which should work on top of 'Handle Krb5 password expiration warning' is attached. Nack: please update the sssd.spec to BuildRequires: keyutils-libs-devel and Requires: keyutils-libs Please reduce

Re: [SSSD] [PATCH] Use all available servers in LDAP provider

2010-05-05 Thread Stephen Gallagher
On 05/04/2010 02:54 PM, Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/03/2010 08:19 PM, Jakub Hrozek wrote: I forgot to add that this is sssd-1.2 material Rebased on top of Stephen's 1.2 patches - it's way easier to rebase my patch that the other way around. Ack.

Re: [SSSD] [PATCH] Add retry option to pam_sss

2010-05-05 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/05/2010 12:34 PM, Sumit Bose wrote: Hi, this patch should fix #408 by adding and option named retry to pam_sss. bye, Sumit Sumit, can you give me some more information on how to test this? - From what I gathered, you should be asked

Re: [SSSD] [PATCH] Use service discovery in backends (sssd 1.2)

2010-05-05 Thread Stephen Gallagher
On 05/04/2010 01:28 PM, Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/04/2010 06:43 PM, Sumit Bose wrote: ACK, but please add xi:include xmlns:xi=http://www.w3.org/2001/XInclude; href=include/service_discovery.xml / to sssd-ldap.5.xml before committing it. bye,

[SSSD] [PATCH] Make krb5_kpasswd available for any krb5 provider

2010-05-05 Thread Stephen Gallagher
Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=587384 Previously, the option krb5_kpasswd was only available if 'chpass_provider = krb5' was specified explicitly. Now it will be available also if 'auth_provider = krb5'. This option was also missing from the IPA options, so I have added