[SSSD] [PATCH] LDAP: Always initialize idmap object

2013-05-13 Thread Jakub Hrozek
Please see the attached patch that fixes https://fedorahosted.org/sssd/ticket/1922 From 0c7c7d235297a8c10050e18526d82412349c75bd Mon Sep 17 00:00:00 2001 From: Jakub Hrozek jhro...@redhat.com Date: Mon, 13 May 2013 10:15:09 +0200 Subject: [PATCH] LDAP: Always initialize idmap object

[SSSD] the full_name_format default value

2013-05-13 Thread Jakub Hrozek
Hi Stef and the list, I was about to close SSSD upstream ticket #1917 but I wanted to check if we're all on the same page. Sorry for copying the whole devel list, but I know there's already been quite some discussions about how to handle the fully qualified names properly. Turns out that the

[SSSD] [PATCH] Re-add a useful DEBUG message

2013-05-13 Thread Jakub Hrozek
In commit 46222e5191473f9a46aec581273eb2eef22e23be we removed a very similar DEBUG message while moving the whole piece of code to the idmap library. But it turned out that the DEBUG message was useful while testing the functionality, so this patch adds it back. While I'm not really fond of a

Re: [SSSD] I heard you were in a need for a logo?

2013-05-13 Thread Tuomas Kuosmanen
Do you have any sketches where the key is more explicit? I admit that with the very first rough sketch I wasn't sure if it was a key..this one is much more clear. I like this look a lot as well. Perhaps we could make the long edge of the 'd' longer, so as to fit one more level of

Re: [SSSD] [PATCH] Re-add a useful DEBUG message

2013-05-13 Thread Pavel Březina
On 05/13/2013 10:28 AM, Jakub Hrozek wrote: In commit 46222e5191473f9a46aec581273eb2eef22e23be we removed a very similar DEBUG message while moving the whole piece of code to the idmap library. But it turned out that the DEBUG message was useful while testing the functionality, so this patch

Re: [SSSD] I heard you were in a need for a logo?

2013-05-13 Thread Tuomas Kuosmanen
Oh hey, http://www.tigert.com/designspace/SSSD-logo.png ..is actually the same height as the website's top logo image, if you want to toss it in there? :) Here's a SVG: http://www.tigert.com/designspace/SSSD-logo.svg in case someone wants to do a crop circle or something ;^) Dmitri likely

Re: [SSSD] [PATCHES] Add SID related lookups to the NSS responder - part 2

2013-05-13 Thread Sumit Bose
On Fri, May 10, 2013 at 05:34:27PM +0200, Jakub Hrozek wrote: On Fri, May 03, 2013 at 06:39:17PM +0200, Sumit Bose wrote: I added a 5th patch which adds support for tuples and Unicode to the python API as inquired by Alexander. I didn't squeezed them because I'm not sure if Alexander was

Re: [SSSD] Active Directory Integration test day invitation

2013-05-13 Thread Jakub Hrozek
On Sat, May 11, 2013 at 09:39:02AM +0200, steve wrote: On 09/05/13 19:45, Jakub Hrozek wrote: On Thu, May 09, 2013 at 06:31:03PM +0200, steve wrote: Re: testing dyndns_update Confirmed 1.10.0beta1: dyndns_update is working against a Samba4 AD But there are some TSIG errors as in the

Re: [SSSD] Active Directory Integration test day invitation

2013-05-13 Thread steve
On 13/05/13 11:11, Jakub Hrozek wrote: On Sat, May 11, 2013 at 06:28:13PM +0200, steve wrote: On 09/05/13 19:45, Jakub Hrozek wrote: On Thu, May 09, 2013 at 06:31:03PM +0200, steve wrote: Re: testing dyndns_update Confirmed 1.10.0beta1: dyndns_update is working against a Samba4 AD But

Re: [SSSD] I heard you were in a need for a logo?

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 05:03:11AM -0400, Tuomas Kuosmanen wrote: Oh hey, http://www.tigert.com/designspace/SSSD-logo.png ..is actually the same height as the website's top logo image, if you want to toss it in there? :) I like this logo. I think we could use it along with releasing

Re: [SSSD] [PATCH] LDAP: Always initialize idmap object

2013-05-13 Thread Sumit Bose
On Mon, May 13, 2013 at 10:17:34AM +0200, Jakub Hrozek wrote: Please see the attached patch that fixes https://fedorahosted.org/sssd/ticket/1922 ACK. btw, I will send a similar Patch for the IPA provider soon. bye, Sumit ___ sssd-devel mailing list

Re: [SSSD] I heard you were in a need for a logo?

2013-05-13 Thread steve
On 13/05/13 11:19, Jakub Hrozek wrote: On Mon, May 13, 2013 at 05:03:11AM -0400, Tuomas Kuosmanen wrote: Oh hey, http://www.tigert.com/designspace/SSSD-logo.png ..is actually the same height as the website's top logo image, if you want to toss it in there? :) I like this logo. I think we

Re: [SSSD] I heard you were in a need for a logo?

2013-05-13 Thread steve
On 13/05/13 12:02, steve wrote: On 13/05/13 11:19, Jakub Hrozek wrote: On Mon, May 13, 2013 at 05:03:11AM -0400, Tuomas Kuosmanen wrote: Oh hey, http://www.tigert.com/designspace/SSSD-logo.png ..is actually the same height as the website's top logo image, if you want to toss it in there? :)

Re: [SSSD] I heard you were in a need for a logo?

2013-05-13 Thread Tuomas Kuosmanen
Oops, slapped wrists; make that metallic shiny red with the light shining from top left. Oh and the key with little 3d depth? Guys, she's serious. Darn, I should get a makerbot and a cnc mill next ;) -T ___ sssd-devel mailing list

[SSSD] [PATCHES] Add SID related lookups to the NSS responder - part 3

2013-05-13 Thread Sumit Bose
Hi, with these four patches the SID-to-name API can now also be used with the AD provider and for local IPA accounts. Since this goes beyond the functionality needed by the FreeIPA WebUI I send them in a separate series. The patches are also a requirement for using the PAC with the AD provider

Re: [SSSD] [PATCH] Minor AD dyndns fixes

2013-05-13 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/11/2013 03:08 PM, Jakub Hrozek wrote: Hi, the attached small patches fix smallish issues reported by users after 1.10beta1 was released. The biggest change is enabling the updates by default in the AD provider. They were disabled by

Re: [SSSD] [PATCH] tests: Do not set cwd twice

2013-05-13 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/11/2013 03:09 PM, Jakub Hrozek wrote: I noticed that the dyndns test set the cwd twice. It didn't cause any issues, but it's not correct either. Obvious ack. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using

Re: [SSSD] I heard you were in a need for a logo?

2013-05-13 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/13/2013 05:19 AM, Jakub Hrozek wrote: On Mon, May 13, 2013 at 05:03:11AM -0400, Tuomas Kuosmanen wrote: Oh hey, http://www.tigert.com/designspace/SSSD-logo.png ..is actually the same height as the website's top logo image, if you want

[SSSD] [PATCH] Always update cached upn if enterprise principals are used

2013-05-13 Thread Sumit Bose
Hi, this patch should fix https://fedorahosted.org/sssd/ticket/1921 . IF enterprise principals are used the principal returned duing the kinit process will most certainly look different then the one we guess or read from LDAP attributes. This means we should always update our cache with the new

Re: [SSSD] [PATCH] Always update cached upn if enterprise principals are used

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 04:00:55PM +0200, Sumit Bose wrote: Hi, this patch should fix https://fedorahosted.org/sssd/ticket/1921 . IF enterprise principals are used the principal returned duing the kinit process will most certainly look different then the one we guess or read from LDAP

[SSSD] [PATCH] Check NSCD configuration file

2013-05-13 Thread Ondrej Kos
Hi, Attached is patch for the following trac issue https://fedorahosted.org/sssd/ticket/1785 Please feel free to correct my wording of the syslog messages. Ondra -- Ondrej Kos Associate Software Engineer Identity Management Red Hat Czech From d010768a94e39082f75e81efdb3e791843c0ef03 Mon Sep

Re: [SSSD] [PATCH] Minor AD dyndns fixes

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 08:05:00AM -0400, Stephen Gallagher wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/11/2013 03:08 PM, Jakub Hrozek wrote: Hi, the attached small patches fix smallish issues reported by users after 1.10beta1 was released. The biggest change is

Re: [SSSD] [PATCH] tests: Do not set cwd twice

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 08:05:23AM -0400, Stephen Gallagher wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/11/2013 03:09 PM, Jakub Hrozek wrote: I noticed that the dyndns test set the cwd twice. It didn't cause any issues, but it's not correct either. Obvious ack.

Re: [SSSD] [PATCH] Minor AD dyndns fixes

2013-05-13 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/13/2013 11:00 AM, Jakub Hrozek wrote: On Mon, May 13, 2013 at 08:05:00AM -0400, Stephen Gallagher wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/11/2013 03:08 PM, Jakub Hrozek wrote: Hi, the attached small patches fix

[SSSD] [PATCH] Adding option to disable retrieving large AD groups.

2013-05-13 Thread Lukas Slebodnik
ehlo, Jakub, Pavel and me disscus about ticket https://fedorahosted.org/sssd/ticket/1823 getgrnam / getgrgid for large user groups is too slow due to range retrieval functionality We decided to add new option to turn the range retrieval with AD. Another solution could be to add new option to

Re: [SSSD] [PATCH] LDAP: Always initialize idmap object

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 11:25:23AM +0200, Sumit Bose wrote: On Mon, May 13, 2013 at 10:17:34AM +0200, Jakub Hrozek wrote: Please see the attached patch that fixes https://fedorahosted.org/sssd/ticket/1922 ACK. btw, I will send a similar Patch for the IPA provider soon. bye, Sumit

Re: [SSSD] [PATCH] Fixes compilation without selinux.

2013-05-13 Thread Ondrej Kos
On 05/09/2013 03:29 PM, Lukas Slebodnik wrote: ehlo, Compilation fail if ./configure is called with arguments --with-selinux --with-semanage and selinux header files are not installed. We didn't not catch this in fedora, because krb5-devel depends on libselinux-devel, but other distribution can

Re: [SSSD] [PATCHES] Add SID related lookups to the NSS responder - part 2

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 05:30:03PM +0200, Jakub Hrozek wrote: On Mon, May 13, 2013 at 11:03:31AM +0200, Sumit Bose wrote: On Fri, May 10, 2013 at 05:34:27PM +0200, Jakub Hrozek wrote: On Fri, May 03, 2013 at 06:39:17PM +0200, Sumit Bose wrote: I added a 5th patch which adds support for

Re: [SSSD] [PATCH] INI: Bump version-info

2013-05-13 Thread Lukas Slebodnik
On (07/05/13 10:34), Ondrej Kos wrote: On 05/06/2013 01:58 PM, Lukas Slebodnik wrote: On (06/05/13 11:44), Ondrej Kos wrote: Hi, https://fedorahosted.org/sssd/ticket/1908 Patch is attached. Ondra -- Ondrej Kos Associate Software Engineer Identity Management Red Hat Czech From

Re: [SSSD] [PATCH] Fixes compilation without selinux.

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 05:16:43PM +0200, Ondrej Kos wrote: On 05/09/2013 03:29 PM, Lukas Slebodnik wrote: ehlo, Compilation fail if ./configure is called with arguments --with-selinux --with-semanage and selinux header files are not installed. We didn't not catch this in fedora, because

Re: [SSSD] [PATCH] Re-add a useful DEBUG message

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 10:56:05AM +0200, Pavel Březina wrote: On 05/13/2013 10:28 AM, Jakub Hrozek wrote: In commit 46222e5191473f9a46aec581273eb2eef22e23be we removed a very similar DEBUG message while moving the whole piece of code to the idmap library. But it turned out that the DEBUG

Re: [SSSD] [PATCH] INI: Bump version-info

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 05:43:34PM +0200, Lukas Slebodnik wrote: On (07/05/13 10:34), Ondrej Kos wrote: On 05/06/2013 01:58 PM, Lukas Slebodnik wrote: On (06/05/13 11:44), Ondrej Kos wrote: Hi, https://fedorahosted.org/sssd/ticket/1908 Patch is attached. Ondra -- Ondrej Kos Associate

Re: [SSSD] [PATCHES] Add SID related lookups to the NSS responder - part 2

2013-05-13 Thread Jakub Hrozek
On Mon, May 13, 2013 at 11:03:31AM +0200, Sumit Bose wrote: On Fri, May 10, 2013 at 05:34:27PM +0200, Jakub Hrozek wrote: On Fri, May 03, 2013 at 06:39:17PM +0200, Sumit Bose wrote: I added a 5th patch which adds support for tuples and Unicode to the python API as inquired by Alexander. I

Re: [SSSD] the full_name_format default value

2013-05-13 Thread Stef Walter
On 13.05.2013 10:19, Jakub Hrozek wrote: Hi Stef and the list, I was about to close SSSD upstream ticket #1917 but I wanted to check if we're all on the same page. Sorry for copying the whole devel list, but I know there's already been quite some discussions about how to handle the fully

Re: [SSSD] [PATCH] Fixes compilation without selinux.

2013-05-13 Thread Ariel Barria
Hi. only as information. after cloning the repository get this error CC src/providers/ipa/libsss_ipa_la-ipa_hbac_users.lo CC src/providers/ipa/libsss_ipa_la-ipa_hbac_common.lo CC src/providers/ipa/libsss_ipa_la-ipa_selinux.lo ../src/providers/ipa/ipa_selinux.c: In function

Re: [SSSD] [PATCH] #570-fall back to defaults from krb5.conf if the realm is not specified explicitly in sssd.conf

2013-05-13 Thread Ariel Barria
thank you very much, your comments were very helpful. I send patch for review. Date: Fri, 11 Jan 2013 11:43:12 +0100 From: pbrez...@redhat.com To: sssd-devel@lists.fedorahosted.org Subject: Re: [SSSD] #570-fall back to defaults from krb5.conf if the realm is not specified explicitly in