[SSSD] [PATCH] IPA: Add ipa_parse_search_base()

2012-02-22 Thread Stephen Gallagher
Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA provid

[SSSD] [PATCH] Eliminate build-time requirement for nscd

2012-02-22 Thread Stephen Gallagher
We will now use the autodetected location if available, or else fall back to a value provided by --with-nscd in configure and finally resort to a hard-coded default of /usr/sbin/nscd. Fixes https://fedorahosted.org/sssd/ticket/1129 From 18a4aa272cfd511671a5f171de9939f47fdb49d4 Mon Sep 17 00:00:00

[SSSD] [PATCH] Move sudo_dom_ctx.user to local variable

2012-02-22 Thread Pavel Březina
sudo_dom_ctx.user is used only in one function. I removed it from the structure and made it as local variable in this function. From 3fb1c5a3667b0bfb3893157399bd828c3c611c08 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pavel=20B=C5=99ezina?= Date: Wed, 22 Feb 2012 16:44:42 +0100 Subject: [PATCH] Move

[SSSD] [PATCH] Honor case_sensitive option in sudo responder

2012-02-22 Thread Pavel Březina
https://fedorahosted.org/sssd/ticket/1205 From 165fd4ef52a8de6ce68d5f179b80ad93031ae97e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pavel=20B=C5=99ezina?= Date: Wed, 22 Feb 2012 16:41:45 +0100 Subject: [PATCH] Honor case_sensitive option in sudo responder https://fedorahosted.org/sssd/ticket/1205 -

Re: [SSSD] [PATCH] LDAP: Only use paging control on requests for multiple entries

2012-02-22 Thread Stephen Gallagher
On Wed, 2012-02-22 at 12:22 +0100, Jakub Hrozek wrote: > On Tue, Feb 21, 2012 at 09:31:13PM -0500, Stephen Gallagher wrote: > > The paging control can cause issues on servers that put limits on > > how many paging controls can be active at one time (on some > > servers, it is limited to one per con

Re: [SSSD] [PATCH] Save getgr results if the glibc buffer wouldn't fit

2012-02-22 Thread Simo Sorce
On Wed, 2012-02-22 at 11:42 +0100, Jakub Hrozek wrote: > On Wed, Feb 22, 2012 at 11:20:54AM +0100, Jakub Hrozek wrote: > > On Tue, Feb 21, 2012 at 02:57:25PM -0500, Simo Sorce wrote: > > > On Tue, 2012-02-21 at 15:38 +0100, Jakub Hrozek wrote: > > > > The cleanup is now simplified due to coping the

Re: [SSSD] [PATCH] FEDORA: Change Kerberos credential cache default location

2012-02-22 Thread Simo Sorce
On Wed, 2012-02-22 at 08:19 -0500, Stephen Gallagher wrote: > On Fedora, we need to default to using /run/user/%u for credential > caches for improved security and to simplify rpc.gssd locating the > cache for use with NFS. > > > This patch will not go upstream, but I wanted to submit it for revi

Re: [SSSD] [PATCH] Add tool to convert debug levels

2012-02-22 Thread Stephen Gallagher
On Wed, 2012-02-22 at 11:33 +0100, Jakub Hrozek wrote: > On Tue, Feb 21, 2012 at 03:09:15PM -0500, Stephen Gallagher wrote: > > Older versions of SSSD (1.5 and earlier) would take a debug_level > > value set in the [sssd] section as authoritative for all other > > sections where not explicitly over

[SSSD] [PATCH] FEDORA: Change Kerberos credential cache default location

2012-02-22 Thread Stephen Gallagher
On Fedora, we need to default to using /run/user/%u for credential caches for improved security and to simplify rpc.gssd locating the cache for use with NFS. This patch will not go upstream, but I wanted to submit it for review in order to raise awareness about these changes for any other distrib

[SSSD] [PATCH] libnl: fix the path to phy80211 subdirectory

2012-02-22 Thread Jakub Hrozek
I found this bug when I was looking at the libnl intergration code to triage a different issue. From 30d198a4fcc824884698432e6358fe897f6898f5 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 21 Feb 2012 19:43:35 +0100 Subject: [PATCH] libnl: fix the path to phy80211 subdirectory --- src/mo

Re: [SSSD] [PATCH] Fixed updating LDAP netgroups in cache

2012-02-22 Thread Jan Zelený
> On Tue, Feb 21, 2012 at 01:34:08PM +0100, Jan Zelený wrote: > > > On Thu, Feb 09, 2012 at 06:24:33PM +0100, Jan Zelený wrote: > > > > > On Tue, Feb 07, 2012 at 04:35:21PM +0100, Jan Zelený wrote: > > > > > > If all triplets of a netgroup are removed from LDAP server > > > > > > record, this chang

Re: [SSSD] [PATCH] LDAP: Only use paging control on requests for multiple entries

2012-02-22 Thread Jakub Hrozek
On Tue, Feb 21, 2012 at 09:31:13PM -0500, Stephen Gallagher wrote: > The paging control can cause issues on servers that put limits on > how many paging controls can be active at one time (on some > servers, it is limited to one per connection). We need to reduce > our usage so that we only activat

Re: [SSSD] [PATCH] Fixed updating LDAP netgroups in cache

2012-02-22 Thread Jakub Hrozek
On Tue, Feb 21, 2012 at 01:34:08PM +0100, Jan Zelený wrote: > > On Thu, Feb 09, 2012 at 06:24:33PM +0100, Jan Zelený wrote: > > > > On Tue, Feb 07, 2012 at 04:35:21PM +0100, Jan Zelený wrote: > > > > > If all triplets of a netgroup are removed from LDAP server record, > > > > > this change won't be

Re: [SSSD] [PATCH] Save getgr results if the glibc buffer wouldn't fit

2012-02-22 Thread Jakub Hrozek
On Wed, Feb 22, 2012 at 11:20:54AM +0100, Jakub Hrozek wrote: > On Tue, Feb 21, 2012 at 02:57:25PM -0500, Simo Sorce wrote: > > On Tue, 2012-02-21 at 15:38 +0100, Jakub Hrozek wrote: > > > The cleanup is now simplified due to coping the buffer. There's only > > > one > > > exit from the function wh

Re: [SSSD] [PATCH] Add tool to convert debug levels

2012-02-22 Thread Jakub Hrozek
On Tue, Feb 21, 2012 at 03:09:15PM -0500, Stephen Gallagher wrote: > Older versions of SSSD (1.5 and earlier) would take a debug_level > value set in the [sssd] section as authoritative for all other > sections where not explicitly overridden. We changed this so that > all sections need to set it i

Re: [SSSD] [PATCH] Save getgr results if the glibc buffer wouldn't fit

2012-02-22 Thread Jakub Hrozek
On Tue, Feb 21, 2012 at 02:57:25PM -0500, Simo Sorce wrote: > On Tue, 2012-02-21 at 15:38 +0100, Jakub Hrozek wrote: > > The cleanup is now simplified due to coping the buffer. There's only > > one > > exit from the function which is after the out: label, so unlocking is > > performed there. > > >

Re: [SSSD] [PATCH] IPA hosts - refactoring of the code

2012-02-22 Thread Jan Zelený
> On Tue, 2012-02-21 at 16:48 +0100, Jakub Hrozek wrote: > > On Tue, Feb 21, 2012 at 10:49:54AM +0100, Jan Zelený wrote: > > > > On Thu, Feb 09, 2012 at 06:05:30PM +0100, Jan Zelený wrote: > > > > > > > On Thu, 2012-02-09 at 13:46 +0100, Jakub Hrozek wrote: > > > > > > > > On Tue, Feb 07, 2012 at 0