[SSSD] [PATCH] Bad check for id_provider=local and access_provider=permit

2012-05-09 Thread Ariel Barria
apologize for the patch file name :D https://fedorahosted.org/sssd/ticket/1172 From 6be54f95ba3e20c037a8cdf92e6a68868bd29ae9 Mon Sep 17 00:00:00 2001 From: Ariel Barria Date: Thu, 10 May 2012 00:26:05 -0500 Subject: [PATCH] Bad check for id_provider=loca

Re: [SSSD] [PATCH] Per-domain re_expression and full_name_format

2012-05-09 Thread Stephen Gallagher
On Tue, 2012-05-08 at 07:59 +0200, Stef Walter wrote: > Integrated subdomain support into the patch. > > Along the lines of what Simo said, all subdomains use the regular > expression of the parent domain and we only match the regular expression > once for those cases. > > Thanks for the other re

Re: [SSSD] [PATCH] subdomains: Fix error handling in Data Provider

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 00:13 +0200, Jakub Hrozek wrote: > To test, trigger any NSS operation with SSSD configured with a domain > that can't yield subdomains. The current git HEAD returns an error when > parsing the message returned from the Data Provider. > > The patch also renames the "done" labe

Re: [SSSD] [PATCH] NSS: Add fallback_homedir option

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 22:31 +0200, Jakub Hrozek wrote: > On Wed, May 09, 2012 at 12:02:09PM -0400, Stephen Gallagher wrote: > > On Wed, 2012-05-09 at 12:01 -0400, Stephen Gallagher wrote: > > > This option is similar to override_homedir, except that it will > > > take effect only for users that do

Re: [SSSD] [PATCH] NSS: Add default_shell option

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 22:31 +0200, Jakub Hrozek wrote: > On Wed, May 09, 2012 at 12:45:53PM -0400, Stephen Gallagher wrote: > > On Wed, 2012-05-09 at 12:44 -0400, Stephen Gallagher wrote: > > > This option will allow administrators to set a default shell to be > > > used if a user does not have one

Re: [SSSD] [PATCH] Try all KDCs when getting TGT for LDAP

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 13:42 -0400, Stephen Gallagher wrote: > On Wed, 2012-05-09 at 18:48 +0200, Jakub Hrozek wrote: > > When the ldap child process is killed after a timeout, try the next KDC. > > When none of the ldap child processes succeed, just abort the connection > > because we wouldn't be a

Re: [SSSD] [PATCH] Clearer docs for use_fully_qualified_names

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 08:03 -0400, Stephen Gallagher wrote: > On Wed, 2012-05-09 at 13:31 +0200, Stef Walter wrote: > > Patch adds clearer documentation use_fully_qualified_names. Previously > > only contained warning about side effect. > > Ack Pushed to master. signature.asc Description: This

Re: [SSSD] [PATCHES] Better handling of large Active Directory groups

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 22:20 +0200, Jakub Hrozek wrote: > > Nack, the way ldap_get_dn is used leaks memory: > > +DEBUG(SSSDBG_TRACE_INTERNAL, > + ("Matched objectclass [%s] on DN [%s], will use > associated map\n", > + state->maps[mi].map

Re: [SSSD] [PATCH] NSS: Add fallback_homedir option

2012-05-09 Thread Jakub Hrozek
On Wed, May 09, 2012 at 12:02:09PM -0400, Stephen Gallagher wrote: > On Wed, 2012-05-09 at 12:01 -0400, Stephen Gallagher wrote: > > This option is similar to override_homedir, except that it will > > take effect only for users that do not have an explicit home > > directory specified in LDAP. > >

Re: [SSSD] [PATCH] NSS: Add default_shell option

2012-05-09 Thread Jakub Hrozek
On Wed, May 09, 2012 at 12:45:53PM -0400, Stephen Gallagher wrote: > On Wed, 2012-05-09 at 12:44 -0400, Stephen Gallagher wrote: > > This option will allow administrators to set a default shell to be > > used if a user does not have one set in the identity provider. > > > > Fixes https://fedorahos

Re: [SSSD] [PATCHES] Better handling of large Active Directory groups

2012-05-09 Thread Jakub Hrozek
On Wed, May 09, 2012 at 02:38:26PM -0400, Stephen Gallagher wrote: > On Wed, 2012-05-09 at 20:01 +0200, Jakub Hrozek wrote: > > On Tue, May 08, 2012 at 03:08:45PM -0400, Stephen Gallagher wrote: > > > Fixes https://fedorahosted.org/sssd/ticket/783 > > > > > > Patch 0001: Adds some better debug mes

Re: [SSSD] [PATCHES] Better handling of large Active Directory groups

2012-05-09 Thread Jakub Hrozek
On Tue, May 08, 2012 at 03:08:45PM -0400, Stephen Gallagher wrote: > Fixes https://fedorahosted.org/sssd/ticket/783 > > Patch 0001: Adds some better debug messages to sysdb_set_entry_attr() > that I found useful while debugging my AD patch Ack > > Patch 0002: Modifies build_attrs_from_map() to

Re: [SSSD] [PATCH] Try all KDCs when getting TGT for LDAP

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 18:48 +0200, Jakub Hrozek wrote: > When the ldap child process is killed after a timeout, try the next KDC. > When none of the ldap child processes succeed, just abort the connection > because we wouldn't be able to authenticate to the LDAP server anyway. > > https://fedoraho

[SSSD] [PATCH] Try all KDCs when getting TGT for LDAP

2012-05-09 Thread Jakub Hrozek
When the ldap child process is killed after a timeout, try the next KDC. When none of the ldap child processes succeed, just abort the connection because we wouldn't be able to authenticate to the LDAP server anyway. https://fedorahosted.org/sssd/ticket/1324 From 56d11e38e64c760bcadda8133757eec1b4

Re: [SSSD] [PATCH] NSS: Add default_shell option

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 12:44 -0400, Stephen Gallagher wrote: > This option will allow administrators to set a default shell to be > used if a user does not have one set in the identity provider. > > Fixes https://fedorahosted.org/sssd/ticket/1289 > > This patch was built atop "[PATCH] NSS: Add fal

[SSSD] [PATCH] NSS: Add default_shell option

2012-05-09 Thread Stephen Gallagher
This option will allow administrators to set a default shell to be used if a user does not have one set in the identity provider. Fixes https://fedorahosted.org/sssd/ticket/1289 This patch was built atop "[PATCH] NSS: Add fallback_homedir option". It may not apply cleanly without that patch. si

Re: [SSSD] [PATCH] NSS: Add fallback_homedir option

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 12:01 -0400, Stephen Gallagher wrote: > This option is similar to override_homedir, except that it will > take effect only for users that do not have an explicit home > directory specified in LDAP. > > It also fixes a minor bug in confdb_get_domain_internal() where we were >

[SSSD] [PATCH] NSS: Add fallback_homedir option

2012-05-09 Thread Stephen Gallagher
This option is similar to override_homedir, except that it will take effect only for users that do not have an explicit home directory specified in LDAP. It also fixes a minor bug in confdb_get_domain_internal() where we were not testing the return value of talloc_strdup() for override_homedir pro

Re: [SSSD] [PATCH] Clearer docs for use_fully_qualified_names

2012-05-09 Thread Stephen Gallagher
On Wed, 2012-05-09 at 13:31 +0200, Stef Walter wrote: > Patch adds clearer documentation use_fully_qualified_names. Previously > only contained warning about side effect. Ack signature.asc Description: This is a digitally signed message part ___ sssd-d

[SSSD] [PATCH] Clearer docs for use_fully_qualified_names

2012-05-09 Thread Stef Walter
Patch adds clearer documentation use_fully_qualified_names. Previously only contained warning about side effect. Cheers, Stef >From d4bc714d9857821647b4ef4bd9f2f6da3123d10c Mon Sep 17 00:00:00 2001 From: Stef Walter Date: Wed, 9 May 2012 13:29:14 +0200 Subject: [PATCH] Clearer documentation for

Re: [SSSD] [PATCH] Assorted fixed found by the clang static analyzer

2012-05-09 Thread Jakub Hrozek
On Wed, May 09, 2012 at 11:39:02AM +0200, Jakub Hrozek wrote: > On Thu, Apr 26, 2012 at 01:51:39PM +0200, Jakub Hrozek wrote: > > Developers can also run the clang tool themselves - I'll add info how > > into our Developers page. > > https://fedorahosted.org/sssd/wiki/DevelTips#Usingclangtoperform

Re: [SSSD] [PATCH] Assorted fixed found by the clang static analyzer

2012-05-09 Thread Jakub Hrozek
On Thu, Apr 26, 2012 at 01:51:39PM +0200, Jakub Hrozek wrote: > Developers can also run the clang tool themselves - I'll add info how > into our Developers page. https://fedorahosted.org/sssd/wiki/DevelTips#Usingclangtoperformstaticanalysisofsourcecode _