Re: [SSSD] sssd.conf include feature

2012-03-19 Thread Dmitri Pal
On 03/19/2012 07:25 PM, greg.lehm...@csiro.au wrote: > >> -Original Message- >> From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- >> boun...@lists.fedorahosted.org] On Behalf Of Stephen Gallagher >> Sent: Monday, 19 March 2012 9:57 PM >> To: sssd-devel@lists.fedorahosted.o

Re: [SSSD] sssd.conf include feature

2012-03-19 Thread Greg.Lehmann
> -Original Message- > From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- > boun...@lists.fedorahosted.org] On Behalf Of Stephen Gallagher > Sent: Monday, 19 March 2012 9:57 PM > To: sssd-devel@lists.fedorahosted.org > Subject: Re: [SSSD] sssd.conf include feature > > On

Re: [SSSD] [INI] Patches for ding-libs: Merging config sections, handling metadata, remaining Coverity issues...

2012-03-19 Thread Dmitri Pal
On 03/19/2012 04:39 PM, Stephen Gallagher wrote: > Patch 0001: Ack > > Patch 0002: Ack > > Patch 0003: Ack > > Patch 0004: Ack, but it would be more efficient (maintenance-wise) to > just memset() the struct instead of setting the individual elements to > zero. > > Patch 0005: Ack > > Patch 0006: A

Re: [SSSD] [INI] Patches for ding-libs: Merging config sections, handling metadata, remaining Coverity issues...

2012-03-19 Thread Stephen Gallagher
Patch 0001: Ack Patch 0002: Ack Patch 0003: Ack Patch 0004: Ack, but it would be more efficient (maintenance-wise) to just memset() the struct instead of setting the individual elements to zero. Patch 0005: Ack Patch 0006: Ack Patch 0007: Ack Patch 0008: Ack Patch 0009: Ack Patch 0010: Ack

Re: [SSSD] [PATCH 0/4]: Actual memory cache implementation

2012-03-19 Thread Stephen Gallagher
On Mon, 2012-03-19 at 14:40 +0100, Jan Zelený wrote: > > On Mon, 2012-03-19 at 10:21 +0100, Jan Zelený wrote: > > > > > responder/nss/nsssrv_mmap_cache.c:220 > > > > > - this condition is unnecessarry because of the condition on line 208 > > > > > > > > Can you post the actual code snippest, if I

Re: [SSSD] [PATCH 0/4]: Actual memory cache implementation

2012-03-19 Thread Jan Zelený
> On Mon, 2012-03-19 at 10:21 +0100, Jan Zelený wrote: > > > > responder/nss/nsssrv_mmap_cache.c:220 > > > > - this condition is unnecessarry because of the condition on line 208 > > > > > > Can you post the actual code snippest, if I understand what you mean I > > > think I have line numbers off

Re: [SSSD] [PATCH 0/4]: Actual memory cache implementation

2012-03-19 Thread Simo Sorce
On Mon, 2012-03-19 at 10:21 +0100, Jan Zelený wrote: > > > responder/nss/nsssrv_mmap_cache.c:220 > > > - this condition is unnecessarry because of the condition on line 208 > > > > Can you post the actual code snippest, if I understand what you mean I > > think I have line numbers off by 1 ... but

Re: [SSSD] Fwd: [Bug 743133] Performance regression with Kerberos authentication against AD

2012-03-19 Thread Jakub Hrozek
On Mon, Mar 19, 2012 at 07:26:22AM -0400, Stephen Gallagher wrote: > On Sun, 2012-03-18 at 21:31 +0100, Jakub Hrozek wrote: > > On Sun, Mar 18, 2012 at 12:54:35PM -0400, Dmitri Pal wrote: > > > Should we make it a default option? > > > It seems like in most cases it helps a lot. > > Not really in

Re: [SSSD] sssd.conf include feature

2012-03-19 Thread Stephen Gallagher
On Mon, 2012-03-19 at 09:16 +0100, Jakub Hrozek wrote: > On Mon, Mar 19, 2012 at 06:24:53PM +1100, greg.lehm...@csiro.au wrote: > >Wondering about whether this feature exists or is planned to exist? It is > >for use in a shared administration environment. We have central > >administrati

Re: [SSSD] Fwd: [Bug 743133] Performance regression with Kerberos authentication against AD

2012-03-19 Thread Stephen Gallagher
On Sun, 2012-03-18 at 21:31 +0100, Jakub Hrozek wrote: > On Sun, Mar 18, 2012 at 12:54:35PM -0400, Dmitri Pal wrote: > > Should we make it a default option? > > It seems like in most cases it helps a lot. Not really in "most cases". It helps a lot in Active Directory environments because AD is pat

Re: [SSSD] PATCH] NSS: Look for services with correct case when cache is updated

2012-03-19 Thread Jan Zelený
> https://fedorahosted.org/sssd/ticket/1259 Ack, just one question: right now DEBUG won't print message that would distinguish cased vs. non-cased name and proto (they always print lowercase), do we want them to? Thanks Jan signature.asc Description: This is a digitally signed message part. _

Re: [SSSD] [PATCH 0/4]: Actual memory cache implementation

2012-03-19 Thread Jan Zelený
> On Fri, 2012-03-16 at 14:25 +0100, Jan Zelený wrote: > > > On Thu, 2012-01-12 at 11:49 -0500, Simo Sorce wrote: > > > > On Tue, 2012-01-10 at 14:33 -0500, Simo Sorce wrote: > > > > > On Tue, 2012-01-10 at 10:15 -0500, Simo Sorce wrote: > > > > > > > Sure, we can talk about it. I'm looking at it f

Re: [SSSD] sssd.conf include feature

2012-03-19 Thread Jakub Hrozek
On Mon, Mar 19, 2012 at 06:24:53PM +1100, greg.lehm...@csiro.au wrote: >Wondering about whether this feature exists or is planned to exist? It is >for use in a shared administration environment. We have central >administration and local administrators. It would allow a central >conf

[SSSD] [PATCH] Save alias of the service primary name, too

2012-03-19 Thread Jakub Hrozek
After the recent changes to sysdb_attrs_get_aliases() we stopped saving the lowercased alias of the primary name. Services are a different beast than the rest of the entries, because with everything else the nss responder only uses the alias to match the entry. With services, we also need to print

[SSSD] sssd.conf include feature

2012-03-19 Thread Greg.Lehmann
Wondering about whether this feature exists or is planned to exist? It is for use in a shared administration environment. We have central administration and local administrators. It would allow a central configuration for sssd with local changes. Puppet could manage the central main file and inc