Re: [SSSD] Behaviour of getgrnam/getgrgid

2010-09-10 Thread Dmitri Pal
[snip] >>> 4) Add marking to the objects. "Complete" mark is put on the user >>> object when all groups he is a member of are fetched. The groups >>> that were fetched and were not in the cache are marked as >>> "incomplete". >>> >> This is only on initgroups calls, and I think the first par

Re: [SSSD] [PATCH] Check for controls before using them

2010-09-10 Thread Sumit Bose
On Fri, Sep 10, 2010 at 05:05:21PM +0200, Jakub Hrozek wrote: > On 09/10/2010 11:16 AM, Sumit Bose wrote: > >rebased versions attached. > > > >bye, > >Sumit > > Ack to both patches, but may I suggest that the attached patch be > squashed in? Perhaps it would make for a little more readable code.

Re: [SSSD] Behaviour of getgrnam/getgrgid

2010-09-10 Thread Ralf Haferkamp
On Friday 10 September 2010 15:34:22 Simo Sorce wrote: > On Fri, 10 Sep 2010 09:06:29 -0400 > > Dmitri Pal wrote: > > Is this the right summary: > > 1a) Initgroups do not fetch groups from LDAP - bug > > I am not sure this is correct. It normally works (we have tests) but > it may not work prope

Re: [SSSD] [PATCH] Check for controls before using them

2010-09-10 Thread Jakub Hrozek
On 09/10/2010 11:16 AM, Sumit Bose wrote: rebased versions attached. bye, Sumit Ack to both patches, but may I suggest that the attached patch be squashed in? Perhaps it would make for a little more readable code. From 0f1ec31ab542f914867da1c3e94dd1e9e4aa7ad9 Mon Sep 17 00:00:00 2001 From: Ja

Re: [SSSD] Netgroups in SSSD

2010-09-10 Thread Dmitri Pal
Stephen Gallagher wrote: > On 09/08/2010 09:04 AM, Stephen Gallagher wrote: > > I've also been thinking about how we're going to handle processing the > > nested groups, and I think what I'm going to do is take advantage of > > some of the nicer features of libcollection. > > > Internal processing

[SSSD] [PATCH] Use new MIT krb5 API for better password expiration warnings

2010-09-10 Thread Sumit Bose
Hi, currently we can only present a warning message which in generated inside the MIT Kerberos library to the user if the password is about to expire. But the developers of MIT Kerberos were so nice to add a new API to retrieve the original timestamps (http://k5wiki.kerberos.org/wiki/Projects/Pass

Re: [SSSD] Behaviour of getgrnam/getgrgid

2010-09-10 Thread Simo Sorce
On Fri, 10 Sep 2010 09:06:29 -0400 Dmitri Pal wrote: > Is this the right summary: > 1a) Initgroups do not fetch groups from LDAP - bug I am not sure this is correct. It normally works (we have tests) but it may not work properly in some conditions. Ralf can you open a bug with logs and all ? >

Re: [SSSD] Behaviour of getgrnam/getgrgid

2010-09-10 Thread Dmitri Pal
Simo Sorce wrote: > On Fri, 10 Sep 2010 11:31:48 +0200 > Ralf Haferkamp wrote: > > >> On Thursday 09 September 2010 17:48:09 Simo Sorce wrote: >> >>> On Thu, 9 Sep 2010 16:46:35 +0200 >>> > > >>> It is true you may not see other members unless they log in, but why >>> would that

Re: [SSSD] Behaviour of getgrnam/getgrgid

2010-09-10 Thread Simo Sorce
On Fri, 10 Sep 2010 11:31:48 +0200 Ralf Haferkamp wrote: > On Thursday 09 September 2010 17:48:09 Simo Sorce wrote: > > On Thu, 9 Sep 2010 16:46:35 +0200 > > It is true you may not see other members unless they log in, but why > > would that be a problem ? If they do not log in they are not > >

Re: [SSSD] Behaviour of getgrnam/getgrgid

2010-09-10 Thread Simo Sorce
On Fri, 10 Sep 2010 12:06:25 +0200 Ralf Haferkamp wrote: > On Thursday 09 September 2010 18:33:26 Simo Sorce wrote: > > So we have the following scenarios: > > > > 1) If we use rfc2307 classic with memberUid attributes, we can just > > create the fake/expired users and be done with it. > Agreed

Re: [SSSD] Behaviour of getgrnam/getgrgid

2010-09-10 Thread Ralf Haferkamp
On Thursday 09 September 2010 18:33:26 Simo Sorce wrote: > On Thu, 9 Sep 2010 08:57:37 -0700 > > Jeff Schroeder wrote: [..] > > Having enumerate = False but still enumerate the members of each > > group (when the group is looked up) would be nice. Some users got > > really confused with the outpu

Re: [SSSD] Behaviour of getgrnam/getgrgid

2010-09-10 Thread Ralf Haferkamp
On Thursday 09 September 2010 17:48:09 Simo Sorce wrote: > On Thu, 9 Sep 2010 16:46:35 +0200 > > Ralf Haferkamp wrote: [..] > > > > Then it should probably be possible to disable that feature > > separately from enumeration. While, turning enumerations off by > > default makes sense to me, I thi

Re: [SSSD] [PATCH] Check for controls before using them

2010-09-10 Thread Sumit Bose
On Thu, Sep 02, 2010 at 09:44:02AM -0400, Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 07/09/2010 05:59 AM, Sumit Bose wrote: > > On Fri, Mar 19, 2010 at 02:15:06PM +0100, Sumit Bose wrote: > >> On Fri, Mar 19, 2010 at 08:48:49AM -0400, Simo Sorce wrote: > >>>