[SSSD] [PATCH] ipa_server_mode: write capaths to krb5 include file

2013-09-26 Thread Sumit Bose
Hi, the first two attached patches should fix https://fedorahosted.org/sssd/ticket/2093 and make https://fedorahosted.org/sssd/ticket/2080 invalid. The third fixes wrong return code in one of the functions I touched with in the other patches. bye, Sumit From

Re: [SSSD] [PATCH] KRB5: Fix bad comparison

2013-09-26 Thread Jakub Hrozek
On Wed, Sep 25, 2013 at 05:39:29PM -0400, Simo Sorce wrote: On Wed, 2013-09-25 at 23:20 +0200, Jakub Hrozek wrote: Sorry, the attached patch is my fault, I should have reviewed better. I found out when I compiled SSSD on my local laptop (as opposed to VM) with clang and very strict CFLAGS.

[SSSD] [PATCH] Allow using POSIX attributes for AD subdomain users

2013-09-26 Thread Jakub Hrozek
Hi, the attached patches implement ticket #2070 where subdomain users have POSIX attributes and the SSSD honors them. So far I only tested with AD provider, not with trust environment, but I wanted to sent the patches for review anyway. The patches mostly amend the search filters and bases

Re: [SSSD] [PATCH] Allow using POSIX attributes for AD subdomain users

2013-09-26 Thread Jakub Hrozek
On Thu, Sep 26, 2013 at 02:15:42PM +0200, Jakub Hrozek wrote: Hi, the attached patches implement ticket #2070 where subdomain users have POSIX attributes and the SSSD honors them. So far I only tested with AD provider, not with trust environment, but I wanted to sent the patches for

Re: [SSSD] [PATCH] ipa_server_mode: write capaths to krb5 include file

2013-09-26 Thread Jakub Hrozek
On Thu, Sep 26, 2013 at 11:22:06AM +0200, Sumit Bose wrote: Hi, the first two attached patches should fix https://fedorahosted.org/sssd/ticket/2093 and make https://fedorahosted.org/sssd/ticket/2080 invalid. The third fixes wrong return code in one of the functions I touched with in the

Re: [SSSD] [PATCH] IPA: Ignore dns_discovery_domain in server mode

2013-09-26 Thread Jakub Hrozek
On Thu, Sep 26, 2013 at 06:26:54PM +0200, Sumit Bose wrote: On Wed, Sep 25, 2013 at 12:57:01PM +0200, Jakub Hrozek wrote: On Wed, Sep 25, 2013 at 11:53:36AM +0200, Sumit Bose wrote: On Wed, Sep 25, 2013 at 11:12:02AM +0200, Jakub Hrozek wrote: Hi, the attached patch fixes

Re: [SSSD] [PATCH] possible alternative for #2071

2013-09-26 Thread Jakub Hrozek
On Wed, Sep 25, 2013 at 05:50:16PM -0400, Simo Sorce wrote: On Wed, 2013-09-25 at 17:37 -0400, Simo Sorce wrote: On Tue, 2013-09-24 at 12:52 +0200, Jakub Hrozek wrote: On Fri, Sep 20, 2013 at 01:09:34PM -0400, Simo Sorce wrote: On Mon, 2013-09-09 at 11:22 -0400, Simo Sorce wrote: On

Re: [SSSD] [PATCH] ad: store group in correct tree on initgroups via tokenGroups

2013-09-26 Thread Jakub Hrozek
On Wed, Sep 25, 2013 at 05:21:30PM +0200, Jakub Hrozek wrote: On Wed, Sep 25, 2013 at 02:55:22PM +0200, Pavel Březina wrote: On 09/25/2013 01:07 PM, Jakub Hrozek wrote: On Tue, Sep 24, 2013 at 03:14:59PM +0200, Pavel Březina wrote: On 09/21/2013 07:41 PM, Jakub Hrozek wrote: On Fri, Sep

Re: [SSSD] [PATCH] ad: store group in correct tree on initgroups via tokenGroups

2013-09-26 Thread Jakub Hrozek
On Thu, Sep 26, 2013 at 09:11:24PM +0200, Jakub Hrozek wrote: On Wed, Sep 25, 2013 at 05:21:30PM +0200, Jakub Hrozek wrote: On Wed, Sep 25, 2013 at 02:55:22PM +0200, Pavel Březina wrote: On 09/25/2013 01:07 PM, Jakub Hrozek wrote: On Tue, Sep 24, 2013 at 03:14:59PM +0200, Pavel Březina

Re: [SSSD] [PATCH] IPA: Ignore dns_discovery_domain in server mode

2013-09-26 Thread Sumit Bose
On Thu, Sep 26, 2013 at 07:39:32PM +0200, Jakub Hrozek wrote: On Thu, Sep 26, 2013 at 06:26:54PM +0200, Sumit Bose wrote: On Wed, Sep 25, 2013 at 12:57:01PM +0200, Jakub Hrozek wrote: On Wed, Sep 25, 2013 at 11:53:36AM +0200, Sumit Bose wrote: On Wed, Sep 25, 2013 at 11:12:02AM +0200,

Re: [SSSD] [PATCH] ipa_server_mode: write capaths to krb5 include file

2013-09-26 Thread Sumit Bose
On Thu, Sep 26, 2013 at 07:24:03PM +0200, Jakub Hrozek wrote: On Thu, Sep 26, 2013 at 11:22:06AM +0200, Sumit Bose wrote: Hi, the first two attached patches should fix https://fedorahosted.org/sssd/ticket/2093 and make https://fedorahosted.org/sssd/ticket/2080 invalid. The third fixes

Re: [SSSD] [PATCH] ipa_server_mode: write capaths to krb5 include file

2013-09-26 Thread Jakub Hrozek
On Thu, Sep 26, 2013 at 09:45:12PM +0200, Sumit Bose wrote: On Thu, Sep 26, 2013 at 07:24:03PM +0200, Jakub Hrozek wrote: On Thu, Sep 26, 2013 at 11:22:06AM +0200, Sumit Bose wrote: Hi, the first two attached patches should fix https://fedorahosted.org/sssd/ticket/2093 and make

Re: [SSSD] [PATCH] Allow using POSIX attributes for AD subdomain users

2013-09-26 Thread Jakub Hrozek
On Thu, Sep 26, 2013 at 04:01:17PM +0200, Jakub Hrozek wrote: On Thu, Sep 26, 2013 at 02:15:42PM +0200, Jakub Hrozek wrote: Hi, the attached patches implement ticket #2070 where subdomain users have POSIX attributes and the SSSD honors them. So far I only tested with AD provider,

Re: [SSSD] [PATCH] ipa_server_mode: write capaths to krb5 include file

2013-09-26 Thread Jakub Hrozek
On Thu, Sep 26, 2013 at 10:11:21PM +0200, Jakub Hrozek wrote: On Thu, Sep 26, 2013 at 09:45:12PM +0200, Sumit Bose wrote: On Thu, Sep 26, 2013 at 07:24:03PM +0200, Jakub Hrozek wrote: On Thu, Sep 26, 2013 at 11:22:06AM +0200, Sumit Bose wrote: Hi, the first two attached patches

Re: [SSSD] [PATCH] IPA: Ignore dns_discovery_domain in server mode

2013-09-26 Thread Jakub Hrozek
On Thu, Sep 26, 2013 at 09:40:12PM +0200, Sumit Bose wrote: On Thu, Sep 26, 2013 at 07:39:32PM +0200, Jakub Hrozek wrote: On Thu, Sep 26, 2013 at 06:26:54PM +0200, Sumit Bose wrote: On Wed, Sep 25, 2013 at 12:57:01PM +0200, Jakub Hrozek wrote: On Wed, Sep 25, 2013 at 11:53:36AM +0200,