Re: [SSSD] [PATCH] Test NULL server hostname in fail over tests

2011-06-16 Thread Jan Zelený
I created a semi-manual test case for QA to exercise this issue a while ago and thought it would be nice to have it upstream, too. This patch depends on the resolver TTL patches. Ack Jan signature.asc Description: This is a digitally signed message part.

[SSSD] supportedControl and OpenLDAP

2011-06-16 Thread Sumit Bose
Hi, by chance I realized that an OpenLDAP server does not list all controls it can handle in the rootDSE attribute supportedControl. Especially LDAP_CONTROL_PASSWORDPOLICY is not listed. According to the OpenLDAP developers this is because the related spec

[SSSD] [PATCH] Do not check pwdAttribute

2011-06-16 Thread Sumit Bose
Hi, this patch should fix https://fedorahosted.org/sssd/ticket/896 . Currently we expect that server side password policies are available if the user object has a pwdAttribute set. But recently we introduced a patch which let sssd only use LDAP controls which are listed in the supportedControl

Re: [SSSD] supportedControl and OpenLDAP

2011-06-16 Thread Simo Sorce
On Thu, 2011-06-16 at 11:32 +0200, Sumit Bose wrote: Hi, by chance I realized that an OpenLDAP server does not list all controls it can handle in the rootDSE attribute supportedControl. Especially LDAP_CONTROL_PASSWORDPOLICY is not listed. According to the OpenLDAP developers this is

[SSSD] [PATCH] Provide TTL structure names for c-ares 1.7

2011-06-16 Thread Jakub Hrozek
In c-ares 1.7, the upstream renamed the addrttl/addr6ttl structures to ares_addrttl/ares_addr6ttl so they are in the ares_ namespace. Because they are committed to stable ABI, the contents are the same, just the name changed -- so it is safe to just #define the new name for older c-ares version.

Re: [SSSD] [PATCH] Provide TTL structure names for c-ares 1.7

2011-06-16 Thread Stephen Gallagher
On Thu, 2011-06-16 at 17:45 +0200, Jakub Hrozek wrote: In c-ares 1.7, the upstream renamed the addrttl/addr6ttl structures to ares_addrttl/ares_addr6ttl so they are in the ares_ namespace. Because they are committed to stable ABI, the contents are the same, just the name changed -- so it is

Re: [SSSD] [PATCH] Do not check pwdAttribute

2011-06-16 Thread Stephen Gallagher
On Thu, 2011-06-16 at 12:55 +0200, Sumit Bose wrote: Hi, this patch should fix https://fedorahosted.org/sssd/ticket/896 . Currently we expect that server side password policies are available if the user object has a pwdAttribute set. But recently we introduced a patch which let sssd only

Re: [SSSD] supportedControl and OpenLDAP

2011-06-16 Thread Sumit Bose
On Thu, Jun 16, 2011 at 11:20:06AM -0400, Dmitri Pal wrote: On 06/16/2011 08:09 AM, Simo Sorce wrote: On Thu, 2011-06-16 at 11:32 +0200, Sumit Bose wrote: Hi, by chance I realized that an OpenLDAP server does not list all controls it can handle in the rootDSE attribute supportedControl.

Re: [SSSD] [PATCH] Provide TTL structure names for c-ares 1.7

2011-06-16 Thread Jakub Hrozek
On 06/16/2011 06:29 PM, Stephen Gallagher wrote: On Thu, 2011-06-16 at 17:45 +0200, Jakub Hrozek wrote: In c-ares 1.7, the upstream renamed the addrttl/addr6ttl structures to ares_addrttl/ares_addr6ttl so they are in the ares_ namespace. Because they are committed to stable ABI, the contents

Re: [SSSD] [PATCH] Do not check pwdAttribute

2011-06-16 Thread Stephen Gallagher
On Thu, 2011-06-16 at 12:30 -0400, Stephen Gallagher wrote: On Thu, 2011-06-16 at 12:55 +0200, Sumit Bose wrote: Hi, this patch should fix https://fedorahosted.org/sssd/ticket/896 . Currently we expect that server side password policies are available if the user object has a

Re: [SSSD] [PATCH] Test NULL server hostname in fail over tests

2011-06-16 Thread Stephen Gallagher
On Thu, 2011-06-16 at 08:45 +0200, Jan Zelený wrote: I created a semi-manual test case for QA to exercise this issue a while ago and thought it would be nice to have it upstream, too. This patch depends on the resolver TTL patches. Ack Pushed to master signature.asc Description:

Re: [SSSD] [PATCH] Provide TTL structure names for c-ares 1.7

2011-06-16 Thread Stephen Gallagher
On Thu, 2011-06-16 at 23:32 +0200, Jakub Hrozek wrote: On 06/16/2011 06:29 PM, Stephen Gallagher wrote: On Thu, 2011-06-16 at 17:45 +0200, Jakub Hrozek wrote: In c-ares 1.7, the upstream renamed the addrttl/addr6ttl structures to ares_addrttl/ares_addr6ttl so they are in the ares_