Re: [SSSD] [ding-libs] Patches for #2267, build issue and tight loop

2014-03-13 Thread Dmitri Pal
On 03/13/2014 06:57 PM, Yassir Elley wrote: - Original Message - Hello, The following patches address the request to be able to read config data from a memory buffer rather than a file. Ticket: https://fedorahosted.org/sssd/ticket/2267 It also addresses a build problem that I found on

Re: [SSSD] [PATCH] IPA: Remove util/sss_selinux.c

2014-03-13 Thread Dmitri Pal
On 03/13/2014 03:36 PM, Jakub Hrozek wrote: On Thu, Mar 13, 2014 at 03:09:44PM -0400, Simo Sorce wrote: On Thu, 2014-03-13 at 19:54 +0100, Jakub Hrozek wrote: When working on the SELinux code lately, I found out that all the functions from sss_selinux.c are consumed by ipa_selinux.c only. I don

Re: [SSSD] [ding-libs] Patches for #2267, build issue and tight loop

2014-03-13 Thread Yassir Elley
- Original Message - > Hello, > > The following patches address the request to be able to read config data > from a memory buffer rather than a file. > Ticket: https://fedorahosted.org/sssd/ticket/2267 > > It also addresses a build problem that I found on my system and fixes a > tight l

Re: [SSSD] [PATCH] pam_sss: add ignore_unknown_user option

2014-03-13 Thread Pete Fritchman
On Thu, Mar 13, 2014 at 1:28 PM, Jakub Hrozek wrote: > would you like any help amending the patch ? Are you still planning on > re-sending it? Hi Jakub, Sorry - I forgot to follow up to this thread. I attached a new patch to the ticket that includes the case where send_and_receive returns PAM_I

Re: [SSSD] [PATCH] IPA: Remove util/sss_selinux.c

2014-03-13 Thread Jakub Hrozek
On Thu, Mar 13, 2014 at 03:09:44PM -0400, Simo Sorce wrote: > On Thu, 2014-03-13 at 19:54 +0100, Jakub Hrozek wrote: > > When working on the SELinux code lately, I found out that all the > > functions from sss_selinux.c are consumed by ipa_selinux.c only. I > > don't > > think it makes sense to hav

Re: [SSSD] [PATCH] IPA: Remove util/sss_selinux.c

2014-03-13 Thread Simo Sorce
On Thu, 2014-03-13 at 19:54 +0100, Jakub Hrozek wrote: > When working on the SELinux code lately, I found out that all the > functions from sss_selinux.c are consumed by ipa_selinux.c only. I > don't > think it makes sense to have a sss_selinux.c module in the util/ tree, > so I simply merged the f

[SSSD] [PATCH] IPA: Remove util/sss_selinux.c

2014-03-13 Thread Jakub Hrozek
When working on the SELinux code lately, I found out that all the functions from sss_selinux.c are consumed by ipa_selinux.c only. I don't think it makes sense to have a sss_selinux.c module in the util/ tree, so I simply merged the functions into ipa_selinux. >From 74e498ec2cd8f2c9693d61276c67a4a1

Re: [SSSD] [PATCH v2 0/5] NFSv4 rpc.idmapd plugin

2014-03-13 Thread J. Bruce Fields
On Thu, Mar 13, 2014 at 12:58:59PM -0400, Simo Sorce wrote: > On Thu, 2014-03-13 at 11:24 -0400, Steve Dickson wrote: > > > V4 servers now have an option of returning a uid string (aka "3606") > > where the NFS client just converts that into the uid. > > Can the client tell the server *not to do

Re: [SSSD] [PATCH] pam_sss: add ignore_unknown_user option

2014-03-13 Thread Jakub Hrozek
On Wed, Feb 12, 2014 at 11:39:28AM +0100, Jakub Hrozek wrote: > On Tue, Feb 11, 2014 at 11:00:08AM -0500, Pete Fritchman wrote: > > https://fedorahosted.org/sssd/ticket/2232 > > > > FreeBSD's openpam doesn't have a built in way of ignoring an unknown > > user (e.g. treating PAM_USER_UNKNOWN as a p

[SSSD] minimal value expected for ldap_idmap_range_size

2014-03-13 Thread Pavel Reichl
Hello, please see attached patch. Pavel Reichl >From da1e349a53e6f5028586a1500b314399d4d01c4e Mon Sep 17 00:00:00 2001 From: Pavel Reichl Date: Thu, 13 Mar 2014 17:37:17 + Subject: [PATCH] MAN: minimal value expected for ldap_idmap_range_size Resolves: https://fedorahosted.org/sssd/ticket/1

Re: [SSSD] new options section in man page for sssd.conf

2014-03-13 Thread Jakub Hrozek
On Thu, Mar 13, 2014 at 02:57:01PM +0100, Sumit Bose wrote: > > Hi Sumit, > > > > thank you for review. I apologize for such silly mistake. > > > > Fixed patch is attached. > > > > Pavel Reichl > > > > > > ACK > > bye, > Sumit Pushed to master. _

Re: [SSSD] [PATCH v2 0/5] NFSv4 rpc.idmapd plugin

2014-03-13 Thread Simo Sorce
On Thu, 2014-03-13 at 13:25 -0400, J. Bruce Fields wrote: > On Thu, Mar 13, 2014 at 12:58:59PM -0400, Simo Sorce wrote: > > On Thu, 2014-03-13 at 11:24 -0400, Steve Dickson wrote: > > > > > V4 servers now have an option of returning a uid string (aka "3606") > > > where the NFS client just convert

Re: [SSSD] [PATCH] IPA: Write SELinux usernames in the right case

2014-03-13 Thread Jakub Hrozek
On Thu, Mar 13, 2014 at 05:00:44PM +0100, Michal Židek wrote: > On 03/12/2014 03:42 PM, Jakub Hrozek wrote: > >pam_selinux expects the file to be of the same case as getpwnam uses. > >This patch uses the right case for the file instead of the original one. > > > > All login formats work properly w

Re: [SSSD] [PATCH v2 0/5] NFSv4 rpc.idmapd plugin

2014-03-13 Thread Steve Dickson
Hello, On 03/04/2014 02:37 AM, Noam Meltzer wrote: > Hello sssd-devel & linux-nfs, > > This is v2 of the patch set. It is now sent to linux-nfs as weel, following > Steve Dickson request. > > The code in the next 5 patches implements the design document: > https://fedorahosted.org/sssd/wiki/Desi

Re: [SSSD] [PATCH v2 0/5] NFSv4 rpc.idmapd plugin

2014-03-13 Thread Simo Sorce
On Thu, 2014-03-13 at 11:24 -0400, Steve Dickson wrote: > V4 servers now have an option of returning a uid string (aka "3606") > where the NFS client just converts that into the uid. Can the client tell the server *not to do that* ? Simo. -- Simo Sorce * Red Hat, Inc * New York __

Re: [SSSD] [PATCH] IPA: Write SELinux usernames in the right case

2014-03-13 Thread Michal Židek
On 03/12/2014 03:42 PM, Jakub Hrozek wrote: pam_selinux expects the file to be of the same case as getpwnam uses. This patch uses the right case for the file instead of the original one. All login formats work properly with this patch. ACK. Michal ___

Re: [SSSD] Design Discussion: Simple D-Bus API

2014-03-13 Thread Pavel Březina
On 02/25/2014 10:11 AM, Pavel Březina wrote: On 02/24/2014 01:17 PM, Jakub Hrozek wrote: On Mon, Feb 24, 2014 at 12:32:04PM +0100, Pavel Březina wrote: https://fedorahosted.org/sssd/wiki/DesignDocs/DBusResponder Hi, I couldn't find the original thread so I'm starting a new one. The design wa

Re: [SSSD] Design Discussion: Simple D-Bus API

2014-03-13 Thread Dmitri Pal
On 03/13/2014 10:33 AM, Jakub Hrozek wrote: On Thu, Mar 13, 2014 at 03:24:22PM +0100, Pavel Březina wrote: On 03/10/2014 06:14 PM, Sumit Bose wrote: On Fri, Mar 07, 2014 at 03:02:30PM +0100, Jakub Hrozek wrote: Fair enough. I saw both complaints from potential consumers -- some developers were

Re: [SSSD] Design Discussion: Simple D-Bus API

2014-03-13 Thread Pavel Březina
On 03/10/2014 06:14 PM, Sumit Bose wrote: On Fri, Mar 07, 2014 at 03:02:30PM +0100, Jakub Hrozek wrote: Fair enough. I saw both complaints from potential consumers -- some developers were going "omg dbus is such a heavyweight desktop technology, do I really need to use it" ? I realize 'hiding' d

Re: [SSSD] Design Discussion: Simple D-Bus API

2014-03-13 Thread Jakub Hrozek
On Thu, Mar 13, 2014 at 03:24:22PM +0100, Pavel Březina wrote: > On 03/10/2014 06:14 PM, Sumit Bose wrote: > >On Fri, Mar 07, 2014 at 03:02:30PM +0100, Jakub Hrozek wrote: > >>Fair enough. I saw both complaints from potential consumers -- some > >>developers were going "omg dbus is such a heavyweig

Re: [SSSD] [PATCH] krb5: Check return value of sss_krb5_princ_realm

2014-03-13 Thread Lukas Slebodnik
On (13/03/14 14:54), Sumit Bose wrote: >On Thu, Mar 13, 2014 at 01:56:50PM +0100, Lukas Slebodnik wrote: >> On (13/03/14 13:11), Sumit Bose wrote: >> >On Tue, Oct 15, 2013 at 01:59:28PM +0200, Pavel Březina wrote: >> >> On 10/14/2013 11:50 AM, Lukas Slebodnik wrote: >> >> >ehlo, >> >> > >> >> >yet

Re: [SSSD] new options section in man page for sssd.conf

2014-03-13 Thread Sumit Bose
On Thu, Mar 13, 2014 at 01:50:14PM +0100, Pavel Reichl wrote: > On Thu, 2014-03-13 at 12:53 +0100, Sumit Bose wrote: > > On Tue, Mar 11, 2014 at 11:44:02AM +0100, Pavel Reichl wrote: > > > Hello, > > > > > > please see attached patch. > > > > > > > > > there is a minor issue while applying the

Re: [SSSD] [PATCH] krb5: Check return value of sss_krb5_princ_realm

2014-03-13 Thread Sumit Bose
On Thu, Mar 13, 2014 at 01:56:50PM +0100, Lukas Slebodnik wrote: > On (13/03/14 13:11), Sumit Bose wrote: > >On Tue, Oct 15, 2013 at 01:59:28PM +0200, Pavel Březina wrote: > >> On 10/14/2013 11:50 AM, Lukas Slebodnik wrote: > >> >ehlo, > >> > > >> >yet another warning from clang static analyser. >

Re: [SSSD] new options section in man page for sssd.conf

2014-03-13 Thread Pavel Reichl
On Thu, 2014-03-13 at 12:53 +0100, Sumit Bose wrote: > On Tue, Mar 11, 2014 at 11:44:02AM +0100, Pavel Reichl wrote: > > Hello, > > > > please see attached patch. > > > > > there is a minor issue while applying the patch: > > > Pavel Reichl > > > - > > - >

Re: [SSSD] [PATCH] krb5: Check return value of sss_krb5_princ_realm

2014-03-13 Thread Lukas Slebodnik
On (13/03/14 13:11), Sumit Bose wrote: >On Tue, Oct 15, 2013 at 01:59:28PM +0200, Pavel Březina wrote: >> On 10/14/2013 11:50 AM, Lukas Slebodnik wrote: >> >ehlo, >> > >> >yet another warning from clang static analyser. >> > >> >sss_krb5_princ_realm set output parameter realm to NULL and len to 0 >

Re: [SSSD] [PATCH] KRB: Prevent dereference of a null pointer

2014-03-13 Thread Jakub Hrozek
On Thu, Mar 13, 2014 at 12:37:12PM +0100, Sumit Bose wrote: > On Thu, Mar 13, 2014 at 09:58:52AM +0100, Lukas Slebodnik wrote: > > ehlo, > > > > Variable 'cc' needn't be initialised if function sss_open_ccache_as_user > > fails. > > > > Patch is attached. > > > > LS > > ACK > > bye, > Sumit P

Re: [SSSD] [PATCH] krb5: Check return value of sss_krb5_princ_realm

2014-03-13 Thread Sumit Bose
On Tue, Oct 15, 2013 at 01:59:28PM +0200, Pavel Březina wrote: > On 10/14/2013 11:50 AM, Lukas Slebodnik wrote: > >ehlo, > > > >yet another warning from clang static analyser. > > > >sss_krb5_princ_realm set output parameter realm to NULL and len to 0 > >in case of failure. Clang static analysers r

Re: [SSSD] new options section in man page for sssd.conf

2014-03-13 Thread Sumit Bose
On Tue, Mar 11, 2014 at 11:44:02AM +0100, Pavel Reichl wrote: > Hello, > > please see attached patch. > there is a minor issue while applying the patch: > Pavel Reichl > - > - > + /home/sbose/sssd/.git/rebase-apply/patch

Re: [SSSD] [PATCH] KRB: Prevent dereference of a null pointer

2014-03-13 Thread Sumit Bose
On Thu, Mar 13, 2014 at 09:58:52AM +0100, Lukas Slebodnik wrote: > ehlo, > > Variable 'cc' needn't be initialised if function sss_open_ccache_as_user > fails. > > Patch is attached. > > LS ACK bye, Sumit ___ sssd-devel mailing list sssd-devel@lists.f

Re: [SSSD] [PATCH] AD: LDAP component of GPO-based access control

2014-03-13 Thread Yassir Elley
- Original Message - > On (12/03/14 18:20), Yassir Elley wrote: > >Hi, > > > >The attached patch implements the LDAP component of the GPO-based access > >control project. For more details on the project, see > >https://fedorahosted.org/sssd/wiki/DesignDocs/ActiveDirectoryGPOIntegration. >

Re: [SSSD] [PATCH] Two minor patches for tokenGroups nested group processing

2014-03-13 Thread Sumit Bose
On Wed, Mar 12, 2014 at 11:20:42PM +0100, Jakub Hrozek wrote: > Hi, > > the attached two patches are not strictly related to tokenGroups > processing, but it's very easy to reproduce the problem that way. The > issue is only confusing DEBUG messages, but it has already cost me > several hours in p

Re: [SSSD] [PATCH] AD: LDAP component of GPO-based access control

2014-03-13 Thread Lukas Slebodnik
On (12/03/14 18:20), Yassir Elley wrote: >Hi, > >The attached patch implements the LDAP component of the GPO-based access >control project. For more details on the project, see >https://fedorahosted.org/sssd/wiki/DesignDocs/ActiveDirectoryGPOIntegration. >The project is not yet complete, since t

[SSSD] [PATCH] KRB: Prevent dereference of a null pointer

2014-03-13 Thread Lukas Slebodnik
ehlo, Variable 'cc' needn't be initialised if function sss_open_ccache_as_user fails. Patch is attached. LS >From 4264f92f6b120cfe67b10913bb4c6cbbe2074d7f Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Date: Wed, 12 Mar 2014 18:03:26 +0100 Subject: [PATCH] KRB: Prevent dereference of a null poi