Re: [SSSD] [PATCH] AD: LDAP component of GPO-based access control

2014-04-14 Thread Simo Sorce
On Mon, 2014-04-14 at 21:51 -0400, Yassir Elley wrote: > - Original Message - > > > On Mon, 2014-04-14 at 17:01 -0400, Yassir Elley wrote: > > > > > > - Original Message - > > > > On Fri, Apr 11, 2014 at 06:32:05PM -0400, Yassir Elley wrote: > > > > > > > > > > > > > > > - Ori

Re: [SSSD] [PATCH] AD: LDAP component of GPO-based access control

2014-04-14 Thread Yassir Elley
- Original Message - > On Mon, 2014-04-14 at 17:01 -0400, Yassir Elley wrote: > > > > - Original Message - > > > On Fri, Apr 11, 2014 at 06:32:05PM -0400, Yassir Elley wrote: > > > > > > > > > > > > - Original Message - > > > > > On Thu, Apr 03, 2014 at 12:30:17PM -0400, Y

Re: [SSSD] [PATCH] AD: LDAP component of GPO-based access control

2014-04-14 Thread Simo Sorce
On Mon, 2014-04-14 at 17:01 -0400, Yassir Elley wrote: > > - Original Message - > > On Fri, Apr 11, 2014 at 06:32:05PM -0400, Yassir Elley wrote: > > > > > > > > > - Original Message - > > > > On Thu, Apr 03, 2014 at 12:30:17PM -0400, Yassir Elley wrote: > > > > > > > > > > > >

Re: [SSSD] [INI] Ding-libs, controversial points in the design to allow merging configuration snippets

2014-04-14 Thread Dmitri Pal
On 04/14/2014 06:18 AM, Jakub Hrozek wrote: On Tue, Apr 08, 2014 at 10:32:25AM -0400, Simo Sorce wrote: On Tue, 2014-04-08 at 09:54 -0400, Dmitri Pal wrote: On 04/07/2014 10:13 PM, Simo Sorce wrote: On Mon, 2014-04-07 at 19:20 -0400, Dmitri Pal wrote: Hello, This is the continuation of the d

Re: [SSSD] [PATCH] AD: LDAP component of GPO-based access control

2014-04-14 Thread Yassir Elley
- Original Message - > On Fri, Apr 11, 2014 at 06:32:05PM -0400, Yassir Elley wrote: > > > > > > - Original Message - > > > On Thu, Apr 03, 2014 at 12:30:17PM -0400, Yassir Elley wrote: > > > > > > > > > > > > - Original Message - > > > > > > Hi, > > > > > > I've rea

Re: [SSSD] [PATCH] UTIL: Ignore insufficient permission for some proc files

2014-04-14 Thread Jakub Hrozek
On Mon, Apr 14, 2014 at 06:57:17PM +0200, Jakub Hrozek wrote: > On Mon, Mar 17, 2014 at 11:01:03PM +0100, Lukas Slebodnik wrote: > > On (17/03/14 22:47), Jakub Hrozek wrote: > > >On Mon, Mar 17, 2014 at 10:39:07PM +0100, Lukas Slebodnik wrote: > > >> On (17/03/14 22:16), Jakub Hrozek wrote: > > >>

Re: [SSSD] [PATCH] UTIL: Ignore insufficient permission for some proc files

2014-04-14 Thread Jakub Hrozek
On Mon, Mar 17, 2014 at 11:01:03PM +0100, Lukas Slebodnik wrote: > On (17/03/14 22:47), Jakub Hrozek wrote: > >On Mon, Mar 17, 2014 at 10:39:07PM +0100, Lukas Slebodnik wrote: > >> On (17/03/14 22:16), Jakub Hrozek wrote: > >> >On Mon, Mar 17, 2014 at 01:32:39PM +0100, Lukas Slebodnik wrote: > >> >

Re: [SSSD] [PATCHES] Always store home directory expansions to sysdb

2014-04-14 Thread Sumit Bose
On Mon, Apr 14, 2014 at 04:54:51PM +0200, Jakub Hrozek wrote: > On Mon, Apr 07, 2014 at 08:47:25PM +0200, Lukas Slebodnik wrote: > > >This just needs to be documented well in the man pages. We need to say > > >that changing this option mandates invalidating the cache. Many options > > >do, I don't

Re: [SSSD] [PATCHES] Always store home directory expansions to sysdb

2014-04-14 Thread Jakub Hrozek
On Fri, Apr 04, 2014 at 07:39:30PM +0200, Pavel Reichl wrote: > Hello, > > attached patches implement ticket: > > https://fedorahosted.org/sssd/ticket/2205 > > Maybe I split the changes into too many patches, please feel free to > suggest squashing them. No, I actually prefer to receive more sm

Re: [SSSD] [PATCH][ding_libs] Add version symbol files

2014-04-14 Thread Sumit Bose
On Mon, Apr 14, 2014 at 04:25:27PM +0200, Jakub Hrozek wrote: > On Tue, Apr 08, 2014 at 02:56:10PM +0200, Lukas Slebodnik wrote: > > Ignoring error with older automake: > > The only drawback is libraries will not rebuilt on RHEL6 if version symbol > > files are changed. > > > > Next commands will

Re: [SSSD] [PATCHES] Always store home directory expansions to sysdb

2014-04-14 Thread Jakub Hrozek
On Mon, Apr 07, 2014 at 08:47:25PM +0200, Lukas Slebodnik wrote: > >This just needs to be documented well in the man pages. We need to say > >that changing this option mandates invalidating the cache. Many options > >do, I don't think this will be suprising for the users. > yes, it is solution. but

Re: [SSSD] NSS: disable midpoint refresh for netgroups if ptask refresh is enabled

2014-04-14 Thread Jakub Hrozek
On Wed, Apr 09, 2014 at 08:07:25PM +0200, Pavel Reichl wrote: > On Mon, 2014-04-07 at 19:07 +0200, Jakub Hrozek wrote: > > On Thu, Feb 27, 2014 at 05:15:00PM +0100, Pavel Reichl wrote: > > > On Thu, 2014-02-27 at 11:55 +0100, Pavel Březina wrote: > > > [snip] > > > > Nack. > > > > It is still possi

Re: [SSSD] [PATCH][ding_libs] Add version symbol files

2014-04-14 Thread Jakub Hrozek
On Tue, Apr 08, 2014 at 02:56:10PM +0200, Lukas Slebodnik wrote: > Ignoring error with older automake: > The only drawback is libraries will not rebuilt on RHEL6 if version symbol > files are changed. > > Next commands will not have any effect. > touch ini/libini_config.sym > make > > Workaround

Re: [SSSD] [PATCH] SBUS: Generate introspection from the interface meta

2014-04-14 Thread Jakub Hrozek
On Fri, Apr 11, 2014 at 12:53:08PM +0200, Pavel Březina wrote: > On 04/10/2014 11:03 AM, Jakub Hrozek wrote: > >The attached patch implements introspecting the sbus interfaces as > >tracked by #2234. > > > >There is one part of the patch I dislike, but I wanted to get other > >opinions, too -- the

Re: [SSSD] [PATCH] SDAP: augmented logging for group saving

2014-04-14 Thread Jakub Hrozek
On Mon, Apr 14, 2014 at 03:23:10PM +0200, Jakub Hrozek wrote: > On Mon, Apr 14, 2014 at 01:41:48PM +0200, Pavel Reichl wrote: > > On Mon, 2014-04-14 at 12:50 +0200, Jakub Hrozek wrote: > > [snip] > > > ACK > > > > > > Can you also send a version for 1.11 ? > > > > Sure. > > ACK for sssd-1-11 Pu

Re: [SSSD] [PATCH] SDAP: augmented logging for group saving

2014-04-14 Thread Jakub Hrozek
On Mon, Apr 14, 2014 at 01:41:48PM +0200, Pavel Reichl wrote: > On Mon, 2014-04-14 at 12:50 +0200, Jakub Hrozek wrote: > [snip] > > ACK > > > > Can you also send a version for 1.11 ? > > Sure. ACK for sssd-1-11 ___ sssd-devel mailing list sssd-devel@li

Re: [SSSD] Use a shorter retry timeout for failed SRV

2014-04-14 Thread Jakub Hrozek
On Mon, Apr 14, 2014 at 12:44:31PM +0200, Jakub Hrozek wrote: > On Fri, Apr 11, 2014 at 02:49:45PM +0200, Pavel Reichl wrote: > > On Fri, 2014-04-11 at 12:23 +0200, Jakub Hrozek wrote: > > [snip] > > > > @@ -71,6 +71,7 @@ static int be_fo_get_options(struct be_ctx *ctx, > > > >

Re: [SSSD] [PATCH] SDAP: augmented logging for group saving

2014-04-14 Thread Pavel Reichl
On Mon, 2014-04-14 at 12:50 +0200, Jakub Hrozek wrote: [snip] > ACK > > Can you also send a version for 1.11 ? Sure. >From 127b27aa33b2eaab7f3f856f276d1e8128de7d37 Mon Sep 17 00:00:00 2001 From: Pavel Reichl Date: Wed, 19 Feb 2014 17:34:05 + Subject: [PATCH] SDAP: augmented logging for group

Re: [SSSD] [PATCH] KRB5: Print a verbose error message on failure reading the keytab

2014-04-14 Thread Jakub Hrozek
On Fri, Apr 11, 2014 at 11:34:04AM -0400, Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 04/11/2014 11:02 AM, Jakub Hrozek wrote: > > Hi, > > > > this patch prints an error message in case a keytab is missing > > completely to avoid confusing admins as in the c

Re: [SSSD] [PATCH] SDAP: augmented logging for group saving

2014-04-14 Thread Jakub Hrozek
On Mon, Apr 14, 2014 at 12:50:33PM +0200, Jakub Hrozek wrote: > On Fri, Apr 11, 2014 at 03:28:30PM +0200, Pavel Reichl wrote: > > On Fri, 2014-04-11 at 12:16 +0200, Jakub Hrozek wrote: > > > On Wed, Apr 09, 2014 at 02:29:05PM +0200, Pavel Reichl wrote: > > > > Hello, > > > > > > > > please see at

Re: [SSSD] [PATCH] SDAP: augmented logging for group saving

2014-04-14 Thread Jakub Hrozek
On Fri, Apr 11, 2014 at 03:28:30PM +0200, Pavel Reichl wrote: > On Fri, 2014-04-11 at 12:16 +0200, Jakub Hrozek wrote: > > On Wed, Apr 09, 2014 at 02:29:05PM +0200, Pavel Reichl wrote: > > > Hello, > > > > > > please see attached patch. > > > > > > This patch was previously written for BZ 10594

Re: [SSSD] Use a shorter retry timeout for failed SRV

2014-04-14 Thread Jakub Hrozek
On Fri, Apr 11, 2014 at 02:49:45PM +0200, Pavel Reichl wrote: > On Fri, 2014-04-11 at 12:23 +0200, Jakub Hrozek wrote: > [snip] > > > @@ -71,6 +71,7 @@ static int be_fo_get_options(struct be_ctx *ctx, > > > > > > DP_RES_OPT_RESOLVER_TIMEOUT); > >

Re: [SSSD] [INI] Ding-libs, controversial points in the design to allow merging configuration snippets

2014-04-14 Thread Jakub Hrozek
On Tue, Apr 08, 2014 at 10:32:25AM -0400, Simo Sorce wrote: > On Tue, 2014-04-08 at 09:54 -0400, Dmitri Pal wrote: > > On 04/07/2014 10:13 PM, Simo Sorce wrote: > > > On Mon, 2014-04-07 at 19:20 -0400, Dmitri Pal wrote: > > >> Hello, > > >> > > >> This is the continuation of the discussion of the f

Re: [SSSD] Announcing SSSD 1.11.5.1

2014-04-14 Thread Jakub Hrozek
On Sat, Apr 12, 2014 at 06:54:42PM +0200, steve wrote: > On Fri, 2014-04-11 at 20:20 +0200, Jakub Hrozek wrote: > > On Fri, Apr 11, 2014 at 08:16:21PM +0200, steve wrote: > > > On Fri, 2014-04-11 at 19:26 +0200, Jakub Hrozek wrote: > > > >=== SSSD 1.11.5.1 === > > > > > > >

Re: [SSSD] [PATCH] AD: LDAP component of GPO-based access control

2014-04-14 Thread Sumit Bose
On Fri, Apr 11, 2014 at 06:32:05PM -0400, Yassir Elley wrote: > > > - Original Message - > > On Thu, Apr 03, 2014 at 12:30:17PM -0400, Yassir Elley wrote: > > > > > > > > > - Original Message - > > > > Hi, > > > > I've read the patches and did some basic tests. You can find my