Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread Lukas Slebodnik
On (11/05/13 00:26), steve wrote: >On 11/05/13 00:05, Lukas Slebodnik wrote: >>On (10/05/13 22:33), steve wrote: >>>On 10/05/13 13:26, Sumit Bose wrote: On Fri, May 10, 2013 at 11:51:44AM +0200, steve wrote: >On 10/05/13 11:23, Sumit Bose wrote: >>On Fri, May 10, 2013 at 11:02:08AM +020

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread steve
On 11/05/13 00:05, Lukas Slebodnik wrote: On (10/05/13 22:33), steve wrote: On 10/05/13 13:26, Sumit Bose wrote: On Fri, May 10, 2013 at 11:51:44AM +0200, steve wrote: On 10/05/13 11:23, Sumit Bose wrote: On Fri, May 10, 2013 at 11:02:08AM +0200, steve wrote: On 10/05/13 10:49, Jakub Hrozek

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread Lukas Slebodnik
On (10/05/13 22:33), steve wrote: >On 10/05/13 13:26, Sumit Bose wrote: >>On Fri, May 10, 2013 at 11:51:44AM +0200, steve wrote: >>>On 10/05/13 11:23, Sumit Bose wrote: On Fri, May 10, 2013 at 11:02:08AM +0200, steve wrote: >On 10/05/13 10:49, Jakub Hrozek wrote: >>On Fri, May 10, 2013

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread steve
On 10/05/13 13:26, Sumit Bose wrote: On Fri, May 10, 2013 at 11:51:44AM +0200, steve wrote: On 10/05/13 11:23, Sumit Bose wrote: On Fri, May 10, 2013 at 11:02:08AM +0200, steve wrote: On 10/05/13 10:49, Jakub Hrozek wrote: On Fri, May 10, 2013 at 10:46:01AM +0200, steve wrote: Hi openSUSE 12

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread John Hodrien
On Fri, 10 May 2013, Joshua Riffle wrote: As pointed out to me in a couple of the other responses TLS and not SSL is probably the better way to go which is surprising to me but admittedly I am new to the LDAP security world and that will give me something to research more deeply. Does SSSD cater

Re: [SSSD] GSoC Application : Implement a battery of unit tests for SSSD

2013-05-10 Thread Jakub Hrozek
On Tue, Apr 30, 2013 at 12:58:09AM +0530, Abhishek Singh wrote: > There is some changes some change in application url as suggested by > Buddhike (Fedora org admin for GSoC 2013). Now wiki page for application > content is > https://fedoraproject.org/wiki/GSOC_2013/Student_Application_abhisheksingh

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 11:17:16AM -0400, Simo Sorce wrote: > On Fri, 2013-05-10 at 10:40 +0200, Jakub Hrozek wrote: > > On Fri, May 10, 2013 at 09:23:33AM +0100, John Hodrien wrote: > > > On Thu, 9 May 2013, Joshua Riffle wrote: > > > > > > >In the case of service discovery there seems to be no w

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Joshua Riffle
This is all great feedback. Thanks everyone. I'm trying to figure out how to grab a copy of the SEGFAULT core for SSSD which I will provide as an attachment back to this conversation when I figure out how to extract it. I noticed that providers/ldap/ldap_common.c:855 automatically uses SSS_LDAP_SR

Re: [SSSD] [PATCHES] Add SID related lookups to the NSS responder - part 2

2013-05-10 Thread Jakub Hrozek
On Fri, May 03, 2013 at 06:39:17PM +0200, Sumit Bose wrote: > I added a 5th patch which adds support for tuples and Unicode to the > python API as inquired by Alexander. I didn't squeezed them because I'm > not sure if Alexander was already able to test them. This way they can > easily be dropped f

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Simo Sorce
On Fri, 2013-05-10 at 10:40 +0200, Jakub Hrozek wrote: > On Fri, May 10, 2013 at 09:23:33AM +0100, John Hodrien wrote: > > On Thu, 9 May 2013, Joshua Riffle wrote: > > > > >In the case of service discovery there seems to be no way of getting LDAP > > >to > > >be treated as LDAPS (secure) and I th

Re: [SSSD] [PATCH] 1.9 only, sudo responder: use fully qualified name for subdomain users

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 04:43:15PM +0200, Jakub Hrozek wrote: > On Tue, May 07, 2013 at 02:19:57PM +0200, Pavel Březina wrote: > > https://fedorahosted.org/sssd/ticket/1912 > > > > Intended for 1.9 branch only. I will prepare a new one for master. > > Ack Pushed to sssd-1-9 _

Re: [SSSD] [PATCH] sudo responder: search rules for subdomains in parent domain subtree

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 04:38:50PM +0200, Jakub Hrozek wrote: > On Tue, May 07, 2013 at 02:34:37PM +0200, Pavel Březina wrote: > > https://fedorahosted.org/sssd/ticket/1912 > > > > This patch is intended for master only. > > Ack Pushed to master. ___ s

Re: [SSSD] I heard you were in a need for a logo?

2013-05-10 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/10/2013 10:05 AM, Jakub Hrozek wrote: > On Fri, May 10, 2013 at 07:44:44AM -0400, Tuomas Kuosmanen wrote: >>> Let's keep it simple. The best logos are the simple ones - they >>> are easy to remember and easy to use because they fit >>> everywhere

Re: [SSSD] [PATCH] 1.9 only, sudo responder: use fully qualified name for subdomain users

2013-05-10 Thread Jakub Hrozek
On Tue, May 07, 2013 at 02:19:57PM +0200, Pavel Březina wrote: > https://fedorahosted.org/sssd/ticket/1912 > > Intended for 1.9 branch only. I will prepare a new one for master. Ack ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://l

Re: [SSSD] [PATCH] sudo responder: search rules for subdomains in parent domain subtree

2013-05-10 Thread Jakub Hrozek
On Tue, May 07, 2013 at 02:34:37PM +0200, Pavel Březina wrote: > https://fedorahosted.org/sssd/ticket/1912 > > This patch is intended for master only. Ack ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/mailm

Re: [SSSD] [PATCH] Fix missing initialization in Python bindings for libsss_nss_idmap

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 04:23:15PM +0200, Jakub Hrozek wrote: > On Wed, May 08, 2013 at 10:12:10AM +0200, Sumit Bose wrote: > > Hi, > > > > while testing other siff I came across this issue. It does not affect > > the FreeIPA SID-to-name lookups but should be fixed anyways. > > > > bye, > > Sumit

Re: [SSSD] [PATCH] Fix missing initialization in Python bindings for libsss_nss_idmap

2013-05-10 Thread Jakub Hrozek
On Wed, May 08, 2013 at 10:12:10AM +0200, Sumit Bose wrote: > Hi, > > while testing other siff I came across this issue. It does not affect > the FreeIPA SID-to-name lookups but should be fixed anyways. > > bye, > Sumit Ack. Interesting that Coverity didn't spot the problem.. __

Re: [SSSD] [PATCHES] SUDO: IPA provider

2013-05-10 Thread Jakub Hrozek
On Thu, May 09, 2013 at 10:51:02AM +0200, Pavel Březina wrote: > On 05/07/2013 02:20 PM, Jakub Hrozek wrote: > >On Tue, May 07, 2013 at 02:16:32PM +0200, Pavel Březina wrote: > >>>I used patch from previous mail and it clearly applies to sssd > >>>1.9 branch. I tested sssd 1.9 with patch on RHEL6 a

Re: [SSSD] [PATCH] Add missing \n to debug string

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 11:16:20AM +0200, Lukas Slebodnik wrote: > On (10/05/13 10:49), Sumit Bose wrote: > >Hi, > > > >this is just a simple one-liner I came across. > > > >bye, > >Sumit > > >From 3cf6fa8b17be2dcfbdd9134d415986ba3eb410f8 Mon Sep 17 00:00:00 2001 > >From: Sumit Bose > >Date: Fri,

Re: [SSSD] I heard you were in a need for a logo?

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 07:44:44AM -0400, Tuomas Kuosmanen wrote: > > Let's keep it simple. The best logos are the simple ones - they are easy > > to remember and easy to use because they fit everywhere. > > True :) > > I did one more version and I like this last one best actually - a slightly >

[SSSD] [PATCH] [PRELIMINARY] back end: periodic task API

2013-05-10 Thread Pavel Březina
Here is the API implementing current design document. https://fedorahosted.org/sssd/wiki/DesignDocs/PeriodicTasks be_ptask.h is missing documentation of public interface. I'll amend the patch once the design document is fully acked. I haven't tried it yet, I'll do that when implementing perio

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread steve
On 10/05/13 11:23, Sumit Bose wrote: On Fri, May 10, 2013 at 11:02:08AM +0200, steve wrote: On 10/05/13 10:49, Jakub Hrozek wrote: On Fri, May 10, 2013 at 10:46:01AM +0200, steve wrote: Hi openSUSE 12.3 The build and install goes OK but upon running sssd: sssd -i -d3 ldb: module version mis

Re: [SSSD] I heard you were in a need for a logo?

2013-05-10 Thread Tuomas Kuosmanen
> Let's keep it simple. The best logos are the simple ones - they are easy > to remember and easy to use because they fit everywhere. True :) I did one more version and I like this last one best actually - a slightly different twist on the key idea: http://www.tigert.com/designspace/SSSD-logo.p

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread Sumit Bose
On Fri, May 10, 2013 at 11:51:44AM +0200, steve wrote: > On 10/05/13 11:23, Sumit Bose wrote: > >On Fri, May 10, 2013 at 11:02:08AM +0200, steve wrote: > >>On 10/05/13 10:49, Jakub Hrozek wrote: > >>>On Fri, May 10, 2013 at 10:46:01AM +0200, steve wrote: > Hi > openSUSE 12.3 > The build

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread steve
On 10/05/13 11:23, Sumit Bose wrote: On Fri, May 10, 2013 at 11:02:08AM +0200, steve wrote: On 10/05/13 10:49, Jakub Hrozek wrote: On Fri, May 10, 2013 at 10:46:01AM +0200, steve wrote: Hi openSUSE 12.3 The build and install goes OK but upon running sssd: sssd -i -d3 ldb: module version mis

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread Sumit Bose
On Fri, May 10, 2013 at 11:02:08AM +0200, steve wrote: > On 10/05/13 10:49, Jakub Hrozek wrote: > >On Fri, May 10, 2013 at 10:46:01AM +0200, steve wrote: > >>Hi > >>openSUSE 12.3 > >>The build and install goes OK but upon running sssd: > >> > >> sssd -i -d3 > >>ldb: module version mismatch in > >>

Re: [SSSD] [PATCH] Add missing \n to debug string

2013-05-10 Thread Lukas Slebodnik
On (10/05/13 10:49), Sumit Bose wrote: >Hi, > >this is just a simple one-liner I came across. > >bye, >Sumit >From 3cf6fa8b17be2dcfbdd9134d415986ba3eb410f8 Mon Sep 17 00:00:00 2001 >From: Sumit Bose >Date: Fri, 10 May 2013 10:46:43 +0200 >Subject: [PATCH] Add missing \n to debug string > >--- > s

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread Lukas Slebodnik
On (10/05/13 10:46), steve wrote: >Hi >openSUSE 12.3 >The build and install goes OK but upon running sssd: > > sssd -i -d3 >ldb: module version mismatch in >../source4/dsdb/samdb/ldb_modules/acl.c : ldb_version=1.1.14 >module_version=1.1.15 >ldb: failed to initialise module /usr/lib/ldb/acl.so : Un

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread Sumit Bose
On Fri, May 10, 2013 at 10:49:08AM +0200, Jakub Hrozek wrote: > On Fri, May 10, 2013 at 10:46:01AM +0200, steve wrote: > > Hi > > openSUSE 12.3 > > The build and install goes OK but upon running sssd: > > > > sssd -i -d3 > > ldb: module version mismatch in > > ../source4/dsdb/samdb/ldb_modules/ac

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread steve
On 10/05/13 10:49, Jakub Hrozek wrote: On Fri, May 10, 2013 at 10:46:01AM +0200, steve wrote: Hi openSUSE 12.3 The build and install goes OK but upon running sssd: sssd -i -d3 ldb: module version mismatch in ../source4/dsdb/samdb/ldb_modules/acl.c : ldb_version=1.1.14 module_version=1.1.15 ld

[SSSD] [PATCH] Add missing \n to debug string

2013-05-10 Thread Sumit Bose
Hi, this is just a simple one-liner I came across. bye, Sumit From 3cf6fa8b17be2dcfbdd9134d415986ba3eb410f8 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Fri, 10 May 2013 10:46:43 +0200 Subject: [PATCH] Add missing \n to debug string --- src/responder/pac/pacsrv_utils.c |2 +- 1 files ch

Re: [SSSD] beta1 runtime error acl.c

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 10:46:01AM +0200, steve wrote: > Hi > openSUSE 12.3 > The build and install goes OK but upon running sssd: > > sssd -i -d3 > ldb: module version mismatch in > ../source4/dsdb/samdb/ldb_modules/acl.c : ldb_version=1.1.14 > module_version=1.1.15 > ldb: failed to initialise m

[SSSD] beta1 runtime error acl.c

2013-05-10 Thread steve
Hi openSUSE 12.3 The build and install goes OK but upon running sssd: sssd -i -d3 ldb: module version mismatch in ../source4/dsdb/samdb/ldb_modules/acl.c : ldb_version=1.1.14 module_version=1.1.15 ldb: failed to initialise module /usr/lib/ldb/acl.so : Unavailable (Fri May 10 09:56:58:975063 20

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 09:23:33AM +0100, John Hodrien wrote: > On Thu, 9 May 2013, Joshua Riffle wrote: > > >In the case of service discovery there seems to be no way of getting LDAP to > >be treated as LDAPS (secure) and I think this may be leading to a > >segmentation fault in the sss_ldap libr

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread John Hodrien
On Thu, 9 May 2013, Joshua Riffle wrote: In the case of service discovery there seems to be no way of getting LDAP to be treated as LDAPS (secure) and I think this may be leading to a segmentation fault in the sss_ldap library. _ldap._tcp              SRV  0 0 636 ldap ldaps (which is corr

[SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Joshua Riffle
I was unable to find a way of searching the current SSSD archives in development but I found the following issue in an attempt to combine SASL (Kerberos) and LDAP service discovery. In the case of service discovery there seems to be no way of getting LDAP to be treated as LDAPS (secure) and I thin