Re: [SSSD] Unspecified error loading config db

2012-06-27 Thread Stephen Gallagher
On Thu, 2012-06-28 at 01:01 +0200, Jan Engelhardt wrote: > On Wednesday 2012-06-27 23:59, Stephen Gallagher wrote: > > >SSSD and LDB have a tight dependency (LDB's fault). We need to run > >against the same version of LDB that we were built against. > > What would be the quick and suitable fix?

Re: [SSSD] Unspecified error loading config db

2012-06-27 Thread Jan Engelhardt
On Wednesday 2012-06-27 23:59, Stephen Gallagher wrote: >SSSD and LDB have a tight dependency (LDB's fault). We need to run >against the same version of LDB that we were built against. What would be the quick and suitable fix? I do not feel comfortable using a manual Requires: libldb1 = %(rpm -q

Re: [SSSD] Unspecified error loading config db

2012-06-27 Thread Stephen Gallagher
SSSD and LDB have a tight dependency (LDB's fault). We need to run against the same version of LDB that we were built against. On Jun 27, 2012, at 5:53 PM, Jan Engelhardt wrote: > > Installed sssd-1.8.3 on a fresh openSUSE_Factory, where it happens to > not work. Unfortunately, I just can't m

[SSSD] Unspecified error loading config db

2012-06-27 Thread Jan Engelhardt
Installed sssd-1.8.3 on a fresh openSUSE_Factory, where it happens to not work. Unfortunately, I just can't make anything out from these error message. What's "unavailable" supposed to mean? v-sfac:/var/log # sssd -d 99 -i ldb: module version mismatch in src/ldb_modules/memberof.c : ldb_versio

Re: [SSSD] Online detection issues going forward

2012-06-27 Thread Dmitri Pal
On 06/27/2012 08:14 AM, Stephen Gallagher wrote: > On Wed, 2012-06-27 at 14:01 +0200, Jan Engelhardt wrote: >> On Wednesday 2012-06-27 13:23, Stephen Gallagher wrote: >> >>> SSSD has two mechanisms for detecting a shift in network >>> state in order to determine if it should attempt to go online >>

[SSSD] [PATCH] KRB5: Initialize the credential cache type properly

2012-06-27 Thread Stephen Gallagher
We weren't guaranteeing that the cctype-specific callbacks were initialized before using them. This bug only presented itself for users who were logging in without a ccacheFile attribute in the LDB (for example, first-time logins). I missed this in review because I was testing with users that wer

[SSSD] [PATCH] DEBUG: Log to syslog if we are unable to open a debug fd

2012-06-27 Thread Stephen Gallagher
If for some reason we are unable to open the debug file from a child process (as was the case during some of my testing on the AD provider), we should log a message to the syslog to alert the admin that logs are being dropped. From 6e0993aa1e81f6cce75ebd355ae2f52d16def5b5 Mon Sep 17 00:00:00 2001 F

Re: [SSSD] Very slow listing of files owned by many different users. Any solution?

2012-06-27 Thread Stephen Gallagher
On Wed, 2012-06-27 at 13:18 -0400, Mark London wrote: > Hi - We are running SSSD with LDAP at our site, where we have several > hundred users. LDAP is being served by our Windows domain server. > > With entry_cache_timeout set to a short value, when someone does an > operation that requires inf

[SSSD] Very slow listing of files owned by many different users. Any solution?

2012-06-27 Thread Mark London
Hi - We are running SSSD with LDAP at our site, where we have several hundred users. LDAP is being served by our Windows domain server. With entry_cache_timeout set to a short value, when someone does an operation that requires information for multiple users, i.e. listing the owners of all of

Re: [SSSD] No negative cache with sssd_nss

2012-06-27 Thread Stephen Gallagher
On Wed, 2012-06-27 at 14:53 +0200, Jan Engelhardt wrote: > On Tuesday 2012-06-26 17:43, Stephen Gallagher wrote: > > > >Actually, it most certainly is cached locally. If it was going to LDAP > >50,000 times, it would take you MUCH longer than 8.5s to get results > >back. Naturally, looking up resul

Re: [SSSD] [PATCHES][PRELIMINARY] sudo - new design

2012-06-27 Thread Jan Zelený
> > Ack to patches #0001-#0018. I haven't tested them yet though. > > > > Thanks > > Jan > > I have found an issue in the timer API. I did not clear timeout after > the request has been completed which cause SIGABRT in talloc function. > Patches are attached. Ack to the fix, another part of revi

Re: [SSSD] [PATCH] SELinux user maps: pick just one map

2012-06-27 Thread Rob Crittenden
Jan Zelený wrote: Dne úterý 26 června 2012 09:19:34, Rob Crittenden napsal(a): Jan Zelený wrote: Dne pondělí 25 června 2012 17:35:55, Rob Crittenden napsal(a): Stephen Gallagher wrote: On Fri, 2012-06-22 at 15:49 -0400, Stephen Gallagher wrote: On Fri, 2012-06-22 at 16:12 +0200, Jan Zelený w

Re: [SSSD] No negative cache with sssd_nss

2012-06-27 Thread Jan Engelhardt
On Tuesday 2012-06-26 17:43, Stephen Gallagher wrote: > >Actually, it most certainly is cached locally. If it was going to LDAP >50,000 times, it would take you MUCH longer than 8.5s to get results >back. Naturally, looking up results in a local file is faster than >getting it out of the SSSD's ca

Re: [SSSD] [PATCHES][PRELIMINARY] sudo - new design

2012-06-27 Thread Jan Zelený
Dne středa 27 června 2012 13:31:42, Pavel Březina napsal(a): > On 06/27/2012 11:05 AM, Jan Zelený wrote: > > Dne úterý 26 června 2012 18:22:15, Pavel Březina napsal(a): > >> On 06/26/2012 03:45 PM, Jan Zelený wrote: > >>> Dne úterý 26 června 2012 10:08:15, Pavel Březina napsal(a): > On 06/21/2

Re: [SSSD] Online detection issues going forward

2012-06-27 Thread Stephen Gallagher
On Wed, 2012-06-27 at 14:01 +0200, Jan Engelhardt wrote: > On Wednesday 2012-06-27 13:23, Stephen Gallagher wrote: > > >SSSD has two mechanisms for detecting a shift in network > >state in order to determine if it should attempt to go online > >immediately. [...] > >1) We register with libnl (a li

Re: [SSSD] Online detection issues going forward

2012-06-27 Thread Jan Engelhardt
On Wednesday 2012-06-27 13:23, Stephen Gallagher wrote: >SSSD has two mechanisms for detecting a shift in network >state in order to determine if it should attempt to go online >immediately. [...] >1) We register with libnl (a library providing access to kernel netlink >APIs) to be notified whene

[SSSD] Online detection issues going forward

2012-06-27 Thread Stephen Gallagher
Right now, SSSD has two mechanisms for detecting a shift in network state in order to determine if it should attempt to go online immediately. This is done to ensure that cached entries get updated as quickly as possible and so that if the provider offers online callbacks (such as the deferred kini

Re: [SSSD] [PATCH] SELinux user maps: pick just one map

2012-06-27 Thread Jan Zelený
Dne úterý 26 června 2012 09:19:34, Rob Crittenden napsal(a): > Jan Zelený wrote: > > Dne pondělí 25 června 2012 17:35:55, Rob Crittenden napsal(a): > >> Stephen Gallagher wrote: > >>> On Fri, 2012-06-22 at 15:49 -0400, Stephen Gallagher wrote: > On Fri, 2012-06-22 at 16:12 +0200, Jan Zelený wr

Re: [SSSD] [PATCHES][PRELIMINARY] sudo - new design

2012-06-27 Thread Jan Zelený
Dne úterý 26 června 2012 18:22:15, Pavel Březina napsal(a): > On 06/26/2012 03:45 PM, Jan Zelený wrote: > > Dne úterý 26 června 2012 10:08:15, Pavel Březina napsal(a): > >> On 06/21/2012 05:32 PM, Pavel Březina wrote: > >>> On 3.6.2012 22:17, Pavel Březina wrote: > On 14.5.2012 22:37, Jakub Hr