Re: [SSSD] SSSD - Configuration w/ 2008 R2

2011-05-03 Thread Sumit Bose
On Mon, May 02, 2011 at 09:56:18PM -0700, Ben Kevan wrote: I'm wondering what the heck I'm doing wrong. I'm working on getting SSSD + KRB5 working against 2008 R2 AD. It's working fine in RHEL5 w/ the standard LDAP.conf configuration. I'm working on sssd, but am not getting a binddn connection

Re: [SSSD] [PATCH] Cache cleaning utility

2011-05-03 Thread Jan Zelený
Ok, this is corrected set of patches. All your comments were taken into account. Also please note that jzeleny-015-2-minor-fixes-in-sysdb.patch which was acked before has been updated. On Wed, 2011-04-20 at 14:24 +0200, Jan Zeleny wrote: Here is a complete set of patches which are needed

Re: [SSSD] [PATCH] Override config file debug_level with command-line

2011-05-03 Thread Jakub Hrozek
On 04/27/2011 09:35 PM, Stephen Gallagher wrote: Running the SSSD from the command-line with -d N would not override a value set in the sssd.conf. This was due to a few bad architecture decisions around how to handle the debug_level. This patch also makes the following changes: 1) The

[SSSD] [PATCH] Added a kerberos wrapper for building compatibility

2011-05-03 Thread Jan Zelený
Function sss_krb5_unparse_name_flags and some of its supporting functions have been added in order to ensure compilation on systems having kerberos 1.8. Currently I don't have any machine with RHEL5, so please be sure to test the patch on it. Thanks Jan From

Re: [SSSD] SSSD - Configuration w/ 2008 R2

2011-05-03 Thread Stephen Gallagher
On Mon, 2011-05-02 at 21:56 -0700, Ben Kevan wrote: I'm wondering what the heck I'm doing wrong. I'm working on getting SSSD + KRB5 working against 2008 R2 AD. It's working fine in RHEL5 w/ the standard LDAP.conf configuration. I'm working on sssd, but am not getting a binddn connection to AD.

Re: [SSSD] SSSD - Configuration w/ 2008 R2

2011-05-03 Thread Stephen Gallagher
On Tue, 2011-05-03 at 06:51 -0700, Ben Kevan wrote: On Tue, May 3, 2011 at 4:47 AM, Stephen Gallagher sgall...@redhat.com wrote: On Mon, 2011-05-02 at 21:56 -0700, Ben Kevan wrote: I'm wondering what the heck I'm doing wrong. I'm working on getting SSSD +

Re: [SSSD] SSSD - Configuration w/ 2008 R2

2011-05-03 Thread Ben Kevan
On Tue, May 3, 2011 at 7:39 AM, Stephen Gallagher sgall...@redhat.comwrote: On Tue, 2011-05-03 at 06:51 -0700, Ben Kevan wrote: On Tue, May 3, 2011 at 4:47 AM, Stephen Gallagher sgall...@redhat.com wrote: On Mon, 2011-05-02 at 21:56 -0700, Ben Kevan wrote: I'm wondering

Re: [SSSD] SSSD - Configuration w/ 2008 R2

2011-05-03 Thread Stephen Gallagher
On Tue, 2011-05-03 at 08:35 -0700, Ben Kevan wrote: On Tue, May 3, 2011 at 7:39 AM, Stephen Gallagher sgall...@redhat.com wrote: On Tue, 2011-05-03 at 06:51 -0700, Ben Kevan wrote: On Tue, May 3, 2011 at 4:47 AM, Stephen Gallagher sgall...@redhat.com wrote:

Re: [SSSD] SSSD - Configuration w/ 2008 R2

2011-05-03 Thread Stephen Gallagher
On Tue, 2011-05-03 at 09:11 -0700, Ben Kevan wrote: On Tue, May 3, 2011 at 8:48 AM, Stephen Gallagher sgall...@redhat.com wrote: On Tue, 2011-05-03 at 08:35 -0700, Ben Kevan wrote: On Tue, May 3, 2011 at 7:39 AM, Stephen Gallagher sgall...@redhat.com wrote:

[SSSD] [PATCH] Fixes #861 remove select()

2011-05-03 Thread Simo Sorce
We were erroneously using select() in the client code. This code can run in arbitrary apps and using select() means we can cause memory corruption in the calling application. Use poll() instead. Simo. -- Simo Sorce * Red Hat, Inc * New York From 4cb12eda3231807efdc6aaa678b0734b18dc7763 Mon Sep

Re: [SSSD] [PATCH] Fixes #861 remove select()

2011-05-03 Thread Stephen Gallagher
On Tue, 2011-05-03 at 16:19 +, Simo Sorce wrote: We were erroneously using select() in the client code. This code can run in arbitrary apps and using select() means we can cause memory corruption in the calling application. Use poll() instead. Ack and pushed to master and sssd-1-5.

Re: [SSSD] SSSD - Configuration w/ 2008 R2

2011-05-03 Thread Stephen Gallagher
On Tue, 2011-05-03 at 11:35 -0700, Ben Kevan wrote: My only issue now with the exception of the forced lowercase lookups (SLES 11 does this by default for sAMAccount etc). Now I just need to find out why id doesn't show that users are part of groups that are posix compliant.