[SSSD] Documenting the SSSD local domain, management tools, etc

2010-05-18 Thread David O'Brien
Recently it was recommended that I not include the LOCAL domain, nested groups, and related functionality in the end-user doc (limiting it to the man pages). This raises the following issue: There is a section in the draft doc at present, "Using the SSSD Management Tools", which includes info o

[SSSD] [Transifex] File submitted via email to SSSD | Development Branch (1.2.x)

2010-05-18 Thread admin
Hello sssd, this is Transifex at http://www.transifex.net. The following attached files were submitted to SSSD | Development Branch (1.2.x) by raven Please, visit Transifex at http://www.transifex.net/projects/p/sssd/c/stable12/ in order to see the component page. Thank you, Transifex # tran

[SSSD] [PATCH] Improve debug logs for STARTTLS failures

2010-05-18 Thread Stephen Gallagher
Addresses https://fedorahosted.org/sssd/ticket/482 Turns out there is an openldap way to do this. It's just ugly. -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ From e6834c3db176

Re: [SSSD] [PATCH] SSSDConfigAPI fixes

2010-05-18 Thread Stephen Gallagher
On 05/18/2010 03:05 PM, Jakub Hrozek wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 05/16/2010 09:20 PM, Stephen Gallagher wrote: >> Pushed to master and sssd-1-2 > > This patch needs a rebase in order to be applicable onto the sssd-1-2 > branch. Looks good to me. Ack. -- Steph

Re: [SSSD] [PATCH] SSSDConfigAPI fixes

2010-05-18 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/16/2010 09:20 PM, Stephen Gallagher wrote: > Pushed to master and sssd-1-2 This patch needs a rebase in order to be applicable onto the sssd-1-2 branch. -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with F

[SSSD] Announcing the System Security Services (SSSD) 1.1.92 Release

2010-05-18 Thread Stephen Gallagher
The System Security Services Daemon team is proud to announce the 1.1.92 release. This is our second release candidate for the 1.2.0 release. As usual, it is available for download at https://fedorahosted.org/sssd Unfortunately, we had to break string freeze for the neq ldap_access_filter and l

Re: [SSSD] [PATCH] Add offline callback and fix info file handling

2010-05-18 Thread Stephen Gallagher
On 05/18/2010 11:06 AM, Stephen Gallagher wrote: > On 05/18/2010 06:47 AM, Sumit Bose wrote: >> ok, resetting all the resolver data is not a good idea. Please find >> attached a new series of patches which tries to only do what is really >> needed: >> >> 0001-Revert-Create-kdcinfo-and-kpasswdinfo-f

Re: [SSSD] [Transifex] File submitted via email to SSSD | master

2010-05-18 Thread Stephen Gallagher
On 05/17/2010 03:21 PM, ad...@transifex.net wrote: > Hello sssd, this is Transifex at http://www.transifex.net. > > The following attached files were submitted to SSSD | master by > ruigo > > Please, visit Transifex at http://www.transifex.net/projects/p/sssd/c/master/ > in order to see the compo

Re: [SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Stephen Gallagher
On 05/18/2010 01:03 PM, Jakub Hrozek wrote: > On 05/18/2010 05:36 PM, Stephen Gallagher wrote: >> >> Simo noted off-list that the ldap_search_timeout value also controls the >> timeout for enumerations. The attached patches now sets the timeout to a >> minimum of 30s when enumerate=True is set in t

Re: [SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/18/2010 05:36 PM, Stephen Gallagher wrote: > On 05/18/2010 11:03 AM, Stephen Gallagher wrote: > Patch 0002: The manpage lists five seconds as the default for ldap > searches, but the source was setting the default to 60s. This was > c

Re: [SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/18/2010 05:03 PM, Stephen Gallagher wrote: > On 05/18/2010 10:49 AM, Jakub Hrozek wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> On 05/18/2010 04:29 PM, Stephen Gallagher wrote: >>> On 05/18/2010 10:20 AM, Stephen Gallagher wrot

Re: [SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Stephen Gallagher
On 05/18/2010 12:14 PM, Dmitri Pal wrote: > Stephen Gallagher wrote: >> On 05/18/2010 11:03 AM, Stephen Gallagher wrote: >> Patch 0002: The manpage lists five seconds as the default for ldap >> searches, but the source was setting the default to 60s. This was >> causing long timeouts wa

Re: [SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Dmitri Pal
Stephen Gallagher wrote: > On 05/18/2010 11:03 AM, Stephen Gallagher wrote: > Patch 0002: The manpage lists five seconds as the default for ldap > searches, but the source was setting the default to 60s. This was > causing long timeouts waiting to go offline. > > Simo noted off-list tha

Re: [SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Stephen Gallagher
On 05/18/2010 11:03 AM, Stephen Gallagher wrote: Patch 0002: The manpage lists five seconds as the default for ldap searches, but the source was setting the default to 60s. This was causing long timeouts waiting to go offline. Simo noted off-list that the ldap_search_timeout value also controls

Re: [SSSD] [PATCH] Add offline callback and fix info file handling

2010-05-18 Thread Stephen Gallagher
On 05/18/2010 06:47 AM, Sumit Bose wrote: > ok, resetting all the resolver data is not a good idea. Please find > attached a new series of patches which tries to only do what is really > needed: > > 0001-Revert-Create-kdcinfo-and-kpasswdinfo-file-at-startu.patch Ack > 0002-Refactor-data-provider-

Re: [SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Stephen Gallagher
On 05/18/2010 10:49 AM, Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/18/2010 04:29 PM, Stephen Gallagher wrote: On 05/18/2010 10:20 AM, Stephen Gallagher wrote: Patch 0001: The option ldap_offline_timeout is not used anywhere in the source. This patch removes referen

Re: [SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/18/2010 04:29 PM, Stephen Gallagher wrote: > On 05/18/2010 10:20 AM, Stephen Gallagher wrote: >> Patch 0001: The option ldap_offline_timeout is not used anywhere in the >> source. This patch removes references to it. >> Can we also remove the op

Re: [SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Stephen Gallagher
On 05/18/2010 10:20 AM, Stephen Gallagher wrote: > Patch 0001: The option ldap_offline_timeout is not used anywhere in the > source. This patch removes references to it. > > Patch 0002: The manpage lists five seconds as the default for ldap > searches, but the source was setting the default to 60s.

[SSSD] [PATCHES] Fix LDAP timeout values

2010-05-18 Thread Stephen Gallagher
Patch 0001: The option ldap_offline_timeout is not used anywhere in the source. This patch removes references to it. Patch 0002: The manpage lists five seconds as the default for ldap searches, but the source was setting the default to 60s. This was causing long timeouts waiting to go offline.