[SSSD] [PATCHES] ad srv: prefer servers that are in the same domain as client

2013-08-05 Thread Pavel Březina
https://fedorahosted.org/sssd/ticket/2001 There is a bug in underlying resolv_sort_srv_reply(). It sometimes returns less servers than there is on the input. This seems to be related to configuration when two servers has the same priority and weight (0). I haven't found the root cause yet, I'l

[SSSD] [PATCHES] Remove requests when AD subdomain goes away

2013-08-05 Thread Ondrej Kos
Hi, Attached are three patches, [PATCH 1/3] Make subdomain refresh period configurable * Adds the ad_subdomain_refresh_period and ipa_subdomain_refresh_period configuration options. This isn't needed to be pushed, but I think it can be beneficial. Also, I needed to write this anyway to work wi

Re: [SSSD] [PATCH] fix GSSAPI integrity detection for AD servers

2013-08-05 Thread Jakub Hrozek
On Fri, Aug 02, 2013 at 12:14:56PM -0400, Simo Sorce wrote: > This patch (hopefully) fixes an interop issues with AD servers where > they fail to realize the connection is indeed integrity protected. > > It's a bit of a hack as we need to work around openldap initialization > of cyrus sasl librari

[SSSD] [PATCH] DP: Notify propperly when removing PAC responder

2013-08-05 Thread Ondrej Kos
Hi, During testing, I noticed, that all responders are logged propperly when being shut down: [sssd[be[DOM]]] [be_client_destructor] (0x0400): Removed PAM client [sssd[be[DOM]]] [be_client_destructor] (0x0400): Removed NSS client But not PAC: [sssd[be[DOM]]] [be_client_destructor] (0x0020):

Re: [SSSD] [PATCH] SSH: Ensure that cmd_ctx->name will not be NULL.

2013-08-05 Thread Jakub Hrozek
On Wed, Jul 31, 2013 at 02:31:37PM +0200, Pavel Březina wrote: > On 07/31/2013 02:16 PM, Lukas Slebodnik wrote: > >On (31/07/13 10:57), Pavel Březina wrote: > >>On 07/30/2013 02:42 PM, Lukas Slebodnik wrote: > >>>ehlo, > >>> > >>>Ensure that cmd_ctx->name will not be NULL. > >>> > >>>If cmd_ctx->na

Re: [SSSD] [PATCH] SSH: Ensure that cmd_ctx->name will not be NULL.

2013-08-05 Thread Jakub Hrozek
On Mon, Aug 05, 2013 at 04:50:51PM +0200, Jakub Hrozek wrote: > Pushed to master. Also pushed to sssd-1-10 ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-devel

Re: [SSSD] [PATCH] skip rule on error instead of failing completely

2013-08-05 Thread Jakub Hrozek
On Fri, Jul 26, 2013 at 01:46:04PM +0200, Pavel Březina wrote: > On 07/26/2013 01:31 PM, Jakub Hrozek wrote: > >On Fri, Jul 26, 2013 at 12:34:47PM +0200, Pavel Březina wrote: > >>https://fedorahosted.org/sssd/ticket/2031 > > > >> From fecd2799c21dc78fcb098e786b1c7e879e943c5b Mon Sep 17 00:00:00 200

Re: [SSSD] [PATCH] skip rule on error instead of failing completely

2013-08-05 Thread Jakub Hrozek
On Mon, Aug 05, 2013 at 04:55:39PM +0200, Jakub Hrozek wrote: > On Fri, Jul 26, 2013 at 01:46:04PM +0200, Pavel Březina wrote: > > On 07/26/2013 01:31 PM, Jakub Hrozek wrote: > > >On Fri, Jul 26, 2013 at 12:34:47PM +0200, Pavel Březina wrote: > > >>https://fedorahosted.org/sssd/ticket/2031 > > > >

[SSSD] [PATCH] An idea for a default commit message

2013-08-05 Thread Simo Sorce
This is just an idea, but if people like it and agree with the format it would be nice to have it in tree. Simo. -- Simo Sorce * Red Hat, Inc * New York >From c4d6cf9eb2efa1bf0330639310ee4017bc672fa0 Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Mon, 5 Aug 2013 13:59:33 -0400 Subject: [PATCH]

Re: [SSSD] [PATCH] An idea for a default commit message

2013-08-05 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/05/2013 02:11 PM, Simo Sorce wrote: > This is just an idea, but if people like it and agree with the > format it would be nice to have it in tree. > I like it. Ack from me. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.13 (GNU/Linux) Comme

[SSSD] [PATCH] mmap_cache: Check if slot and name_ptr are not invalid.

2013-08-05 Thread Michal Židek
This is very ugly hotfix for ticket: https://fedorahosted.org/sssd/ticket/2018 So far we were not able to find out why the slot or name_ptr values were corrupted, but this should at least prevent segfaults. Comments are highly appreciated. Thanks Michal >From 6c376710b0dd09fc75d65eba68f22facb31

Re: [SSSD] [PATCH] mmap_cache: Check if slot and name_ptr are not invalid.

2013-08-05 Thread Simo Sorce
On Mon, 2013-08-05 at 21:13 +0200, Michal Židek wrote: > This is very ugly hotfix for ticket: > https://fedorahosted.org/sssd/ticket/2018 > > So far we were not able to find out why the slot or name_ptr > values were corrupted, but this should at least prevent segfaults. NACK, (but close) Please

Re: [SSSD] [PATCH] An idea for a default commit message

2013-08-05 Thread Jakub Hrozek
On Mon, Aug 05, 2013 at 02:17:28PM -0400, Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 08/05/2013 02:11 PM, Simo Sorce wrote: > > This is just an idea, but if people like it and agree with the > > format it would be nice to have it in tree. > > > > I like it.

Re: [SSSD] [PATCH] mmap_cache: Check if slot and name_ptr are not invalid.

2013-08-05 Thread Jakub Hrozek
On Mon, Aug 05, 2013 at 03:30:43PM -0400, Simo Sorce wrote: > Optional (may be should be a separate ticket) > We currently reinit by closing the file and creating a new one. We > should not do that, we should rather reset the header and then just zero > all the data and reinitialize all the various