[SSSD] [PATCH] Make RootDSE optional (master and sssd-1-2)

2010-06-24 Thread Stephen Gallagher
In violation of the standard, some LDAP servers control access to the RootDSE, thus preventing us from being able to read it before performing a bind. This patch will allow us to continue on if the RootDSE was inaccessible. All of the places that we use the return value of the RootDSE after this

[SSSD] [PATCHES] Fix libini_config versions

2010-06-24 Thread Stephen Gallagher
I realized today that the RPM packages for SSSD had the wrong version for libini_config. The upstream project revision was 0.4.0, but we were building RPMs that claimed it was 0.5.0. To further confuse things, in the master branch we actually HAD bumped to 0.5.0 (with a soname bump as well).

Re: [SSSD] [PATCH] Resend SIGINT as SIGTERM in services

2010-06-24 Thread Stephen Gallagher
On 06/22/2010 11:51 AM, Jakub Hrozek wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > When SSSD is running in foreground and Ctrl+C is pressed, the shell > sends SIGINT to all processes in the foreground process group, that > means not only monitor receives it. At the same time, the cle

Re: [SSSD] [PATCH] Add dns_discovery_domain option

2010-06-24 Thread Stephen Gallagher
On 06/22/2010 11:46 AM, Jakub Hrozek wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 06/21/2010 03:32 PM, Stephen Gallagher wrote: >> Nack. If you're going to add the option to upgrade_config.py, you also >> need to check for _srv_ in the ldap_uri, ipa_server and krb5_kdcip. >> >> I

[SSSD] [PATCHv3] Add explicit requests for several operational attrs

2010-06-24 Thread Alexander Gordeev
Operational attributes are not returned in searched requests unless explicitly requested according to RFC 4512 section 5.1. Therefore to get several standard attributes of root DSE we have to request for them. The requested attrs are: - altServer - namingContexts - supportedControl - supportedE

Re: [SSSD] [PATCHv2] Add explicit request for supportedSASLMechanisms

2010-06-24 Thread Sumit Bose
On Thu, Jun 24, 2010 at 07:09:37AM -0400, Stephen Gallagher wrote: > On 06/24/2010 04:04 AM, Alexander Gordeev wrote: > > Sumit Bose пишет: > >> thank you for the patch. You are right adding an explicit attribute list > >> here. I have checked the related RFC 4512 and found in section 5.1: > >> >

Re: [SSSD] [PATCHv2] Add explicit request for supportedSASLMechanisms

2010-06-24 Thread Stephen Gallagher
On 06/24/2010 04:04 AM, Alexander Gordeev wrote: > Sumit Bose пишет: >> thank you for the patch. You are right adding an explicit attribute list >> here. I have checked the related RFC 4512 and found in section 5.1: >> >> "It is noted that root DSE attributes are operational and, like other >> ope

Re: [SSSD] can't connect to openldap using GSSAPI

2010-06-24 Thread Alexander Gordeev
В Thu, 24 Jun 2010 09:48:16 +0200 Sumit Bose пишет: > On Thu, Jun 24, 2010 at 02:43:49AM +0400, Alexander Gordeev wrote: > > В Wed, 23 Jun 2010 20:57:10 +0400 > > Alexander Gordeev пишет: > > > > > On Wed, 23 Jun 2010 16:33:17 +0200 > > > Sumit Bose wrote: > > > > > > > This message is genera

Re: [SSSD] [PATCHv2] Add explicit request for supportedSASLMechanisms

2010-06-24 Thread Alexander Gordeev
В Thu, 24 Jun 2010 09:46:10 +0200 Sumit Bose пишет: > Hi, > > On Thu, Jun 24, 2010 at 01:35:09AM +0400, Alexander Gordeev wrote: > > supportedSASLMechanisms is an operational attribute so it's not returned > > by openldap if not told explicitly. This change adds an explicit request > > for this

Re: [SSSD] can't connect to openldap using GSSAPI

2010-06-24 Thread Sumit Bose
On Thu, Jun 24, 2010 at 02:43:49AM +0400, Alexander Gordeev wrote: > В Wed, 23 Jun 2010 20:57:10 +0400 > Alexander Gordeev пишет: > > > On Wed, 23 Jun 2010 16:33:17 +0200 > > Sumit Bose wrote: > > > > > This message is generated if there is not matching SASL mech entry > > > ('gssapi' in your c

Re: [SSSD] [PATCHv2] Add explicit request for supportedSASLMechanisms

2010-06-24 Thread Sumit Bose
Hi, On Thu, Jun 24, 2010 at 01:35:09AM +0400, Alexander Gordeev wrote: > supportedSASLMechanisms is an operational attribute so it's not returned > by openldap if not told explicitly. This change adds an explicit request > for this attribute. > > Signed-off-by: Alexander Gordeev > --- > src/pro