Re: [SSSD] [PATCH] AD GPO: Fix incorrect sAMAccountName selection

2014-09-25 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/25/2014 03:40 PM, Stephen Gallagher wrote: > On 09/25/2014 04:56 AM, Jakub Hrozek wrote: >> On Wed, Sep 24, 2014 at 11:10:00AM -0400, Stephen Gallagher >> wrote: We were assuming that the ad_hostname value would match >> the sAMAccountName attrib

Re: [SSSD] [PATCH] AD GPO: Fix incorrect sAMAccountName selection

2014-09-25 Thread Jakub Hrozek
On Thu, Sep 25, 2014 at 03:40:19PM -0400, Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 09/25/2014 04:56 AM, Jakub Hrozek wrote: > > On Wed, Sep 24, 2014 at 11:10:00AM -0400, Stephen Gallagher wrote: > > We were assuming that the ad_hostname value would match t

Re: [SSSD] [PATCH] AD GPO: Fix incorrect sAMAccountName selection

2014-09-25 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/25/2014 04:56 AM, Jakub Hrozek wrote: > On Wed, Sep 24, 2014 at 11:10:00AM -0400, Stephen Gallagher wrote: > We were assuming that the ad_hostname value would match the > sAMAccountName attribute, but in practice this was almost never > the cas

Re: [SSSD] [PATCHES] AUDIT: Add audit support for SSSD

2014-09-25 Thread Michal Židek
On 08/12/2014 03:13 PM, Michal Židek wrote: These two patches are initial patches for tickets https://fedorahosted.org/sssd/ticket/2373 https://fedorahosted.org/sssd/ticket/2372 I will add wrappers for more libaudit functions as needed in later patches. As for now, the audit support is not bui

Re: [SSSD] [PATCH] IPA: add support for new extdom plugin version

2014-09-25 Thread Sumit Bose
On Wed, Sep 24, 2014 at 12:23:20PM +0200, Jakub Hrozek wrote: > On Tue, Sep 23, 2014 at 02:20:27PM +0200, Sumit Bose wrote: > > Hi, > > > > this patch adds support for the new extdom plugin version as described on > > http://www.freeipa.org/page/V4/Extdom_plugin_enhancement_grouplist . > > > > I

[SSSD] [PATCH] PAM: new option pam_trusted_users

2014-09-25 Thread Pavel Reichl
Hello, please see attached patch which adds first of two options proposed in https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM Thanks! >From e3f64c45ca3a472aecb48400857ae1a1cb60c9f1 Mon Sep 17 00:00:00 2001 From: Pavel Reichl Date: Thu, 25 Sep 2014 14:52:31 +0100 Subject: [PA

Re: [SSSD] [PATCH TRIVIAL] CI: Don't say Valgrind is ignored in README.md

2014-09-25 Thread Jakub Hrozek
On Wed, Sep 24, 2014 at 05:38:38PM +0200, Michal Židek wrote: > On 09/24/2014 05:11 PM, Nikolai Kondrashov wrote: > >Hi everyone, > > > >I forgot to remove the note about Valgrind being ignored from CI's > >README.md > >when enforcing the Valgrind check. The attached patch fixes that. > > > >Nick >

Re: [SSSD] [PATCH] AD GPO: Fix incorrect sAMAccountName selection

2014-09-25 Thread Jakub Hrozek
On Wed, Sep 24, 2014 at 11:10:00AM -0400, Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > We were assuming that the ad_hostname value would match the > sAMAccountName attribute, but in practice this was almost never the > case on a properly-configured system. > > Mi

Re: [SSSD] [PATCH] IPA: Use GC for group lookups in server mode

2014-09-25 Thread Jakub Hrozek
On Tue, Sep 23, 2014 at 04:40:25PM +0200, Pavel Reichl wrote: > > On 09/09/2014 10:41 PM, Jakub Hrozek wrote: > >Hi, > > > >the attached patch enables cross-domain group lookups. > > > >Even though AD trusts often work with POSIX attributes which are > >normally not replicated to GC, our group loo

Re: [SSSD] [PATCH] TESTS: Add a unit test for matching the secondary objectclass

2014-09-25 Thread Jakub Hrozek
On Thu, Sep 25, 2014 at 10:02:52AM +0200, Jakub Hrozek wrote: > On Wed, Sep 24, 2014 at 07:14:16PM +0200, Michal Židek wrote: > > On 09/24/2014 05:31 PM, Jakub Hrozek wrote: > > >I promised Michal to write a unit test for the alternative objectclass > > >matching, because friends don't let friends

Re: [SSSD] [PATCH] TESTS: Add a unit test for matching the secondary objectclass

2014-09-25 Thread Jakub Hrozek
On Wed, Sep 24, 2014 at 07:14:16PM +0200, Michal Židek wrote: > On 09/24/2014 05:31 PM, Jakub Hrozek wrote: > >I promised Michal to write a unit test for the alternative objectclass > >matching, because friends don't let friends commit a feature without > >tests. > > > > I see... subliminal messag