Re: [SSSD] [PATCH] First Boot Seed Tool

2012-07-27 Thread Nick Guay
On 25/07/12 11:01, Pavel Březina wrote: Nack. Things to consider: - support reading password directly from command line - -p 123 | -password 123 - -f file | --password-file file - support reading everything from file that contains users in passwd format Please include the manual page in

Re: [SSSD] [PATCH] document how sudo works with sssd

2012-07-27 Thread Nick Guay
On 26/07/12 08:31, Pavel Březina wrote: On 07/26/2012 02:24 PM, Nick Guay wrote: Two grammar fixes for the rule caching mechanism section: s/kind/kinds s/large/large amounts of Ack otherwise. Thanks. Patch is attached. One last thing I missed. Add the manpage to the spec file so it gets i

Re: [SSSD] Legacy Systems Gateway Scenario

2012-07-27 Thread Simo Sorce
On Thu, 2012-07-26 at 14:47 -0500, George McCollister wrote: > I'd appreciate any feedback/ideas anyone might have on a possible > solution for a scenario I'm finding quite frequently when FreeIPA is > proposed for centralized security. > > In this scenario legacy systems which don't support cen

Re: [SSSD] [PATCH] Write SELinux config files in responder instead of PAM module

2012-07-27 Thread Jakub Hrozek
On Fri, Jul 27, 2012 at 11:19:39AM +0200, Jan Zelený wrote: > Dne pátek 27 července 2012 09:49:57, Jan Zelený napsal(a): > > Without this change, a process linking our PAM module would do the writing. > > That could be potentially problematic because everych such process will > > probably have its

Re: [SSSD] [PATCH] Write SELinux config files in responder instead of PAM module

2012-07-27 Thread Jan Zelený
Dne pátek 27 července 2012 09:49:57, Jan Zelený napsal(a): > Without this change, a process linking our PAM module would do the writing. > That could be potentially problematic because everych such process will > probably have its own selinux context. That would need rule in the policy > for every

Re: [SSSD] Announcing SSSD 1.9.0 beta 4 / AD 2003

2012-07-27 Thread Jakub Hrozek
On Mon, Jul 23, 2012 at 12:06:52AM +0300, Pasi Kärkkäinen wrote: > On Tue, Jul 10, 2012 at 06:22:05PM +0200, Jakub Hrozek wrote: > > The SSSD team is proud to announce the fourth of six preview releases of > > version 1.9 of the System Security Services Daemon. > > > > We added a new Beta release,

Re: [SSSD] [PATCH] debug tests - allow changing cwd

2012-07-27 Thread Jakub Hrozek
On Thu, Jul 26, 2012 at 09:53:56AM +0200, Pavel Březina wrote: > On 07/25/2012 04:36 PM, Jakub Hrozek wrote: > >On Wed, Jul 25, 2012 at 10:06:57AM +0200, Pavel Březina wrote: > >>On 07/23/2012 05:31 PM, Jakub Hrozek wrote: > >>>On Mon, Jul 23, 2012 at 02:32:44PM +0200, Pavel Březina wrote: > De

Re: [SSSD] [PATCH] Remove unused member of be_req

2012-07-27 Thread Jakub Hrozek
On Thu, Jul 26, 2012 at 11:22:22AM +0200, Jan Zelený wrote: > This member doesn't seem to be used any more. Please note that this patch is > build on top of my recent selinux patches. > > Jan Ack, pushed to master. ___ sssd-devel mailing list sssd-deve

Re: [SSSD] [PATCHES][PRELIMINARY] Move SELinux processing to account PAM stack

2012-07-27 Thread Jakub Hrozek
On Thu, Jul 26, 2012 at 01:40:05PM -0400, Simo Sorce wrote: > > > - Original Message - > > Dne středa 25 července 2012 10:19:04, Simo Sorce napsal(a): > > > On Wed, 2012-07-25 at 08:54 +0200, Jan Zelený wrote: > > > > #161 - Rename session provider to selinux provider > > > > #162 - Move

[SSSD] [PATCH] Write SELinux config files in responder instead of PAM module

2012-07-27 Thread Jan Zelený
Without this change, a process linking our PAM module would do the writing. That could be potentially problematic because everych such process will probably have its own selinux context. That would need rule in the policy for every process that is linked with PAM modules. With this change, the