Re: [SSSD] RFC: A template for design documents

2014-11-18 Thread Jakub Hrozek
> On 12 Nov 2014, at 17:02, Jakub Hrozek wrote: > > Hi, > > I created a proposed template for our design documents: > https://fedorahosted.org/sssd/wiki/PageTemplates/FeatureDesign > > For your convenience, I'll also paste the full page text at the bottom > of the e-mail. > > As you can proba

Re: [SSSD] [PATCH] BE: Become a regular user after initialization

2014-11-18 Thread Jakub Hrozek
On Fri, Nov 14, 2014 at 05:53:33PM +0100, Sumit Bose wrote: > On Fri, Nov 14, 2014 at 02:25:23PM +0100, Jakub Hrozek wrote: > > Hi, > > > > this is the final (for now) patch in my nonroot branch. It allows the > > backend to drop privileges after startup so that the back end works > > unprivileged

Re: [SSSD] [PATCH] Three build-time patches for rootless sssd

2014-11-18 Thread Jakub Hrozek
On Fri, Nov 14, 2014 at 02:52:07PM +0100, Lukas Slebodnik wrote: > On (14/11/14 14:13), Jakub Hrozek wrote: > >Hi, > > > >I found these issues while I was packaging the rootless sssd builds for > >downstream. I hope the commit messages explain well what's going on. > > Tested with sequence of comm

Re: [SSSD] [PATCH] Move ccache operations to krb5_child, allow the krb5_auth code to run unprivileged

2014-11-18 Thread Jakub Hrozek
On Tue, Nov 18, 2014 at 05:43:40PM +0100, Sumit Bose wrote: > On Tue, Nov 18, 2014 at 02:56:35PM +0100, Jakub Hrozek wrote: > > On Mon, Nov 17, 2014 at 06:35:57PM +0100, Sumit Bose wrote: > > > On Fri, Nov 14, 2014 at 01:52:20PM +0100, Jakub Hrozek wrote: > > > > On Thu, Nov 13, 2014 at 07:30:41PM

Re: [SSSD] [PATCH] fill_services(): use talloc_free_children()

2014-11-18 Thread Lukas Slebodnik
On (20/02/14 16:18), Jakub Hrozek wrote: >On Thu, Feb 20, 2014 at 01:56:41PM +0100, Lukas Slebodnik wrote: >> On (20/02/14 13:36), Pavel Březina wrote: >> >Seen this during review... this will save us from creating new >> >temporary context in each iteration. >> >> >From 7b3834b506a362e3b25cf50539

Re: [SSSD] [PATCH] tests: be_ptask

2014-11-18 Thread Lukas Slebodnik
On (18/11/14 18:26), Lukas Slebodnik wrote: >On (10/11/14 14:29), Pavel Březina wrote: >>https://fedorahosted.org/sssd/ticket/1939 > >>From 8eb7a424bccfcbb6140fc2d6eed91759d765c1a4 Mon Sep 17 00:00:00 2001 >>From: =?UTF-8?q?Pavel=20B=C5=99ezina?= >>Date: Mon, 10 Nov 2014 13:30:28 +0100 >>Subject:

Re: [SSSD] [PATCH] tests: be_ptask

2014-11-18 Thread Lukas Slebodnik
On (10/11/14 14:29), Pavel Březina wrote: >https://fedorahosted.org/sssd/ticket/1939 >From 8eb7a424bccfcbb6140fc2d6eed91759d765c1a4 Mon Sep 17 00:00:00 2001 >From: =?UTF-8?q?Pavel=20B=C5=99ezina?= >Date: Mon, 10 Nov 2014 13:30:28 +0100 >Subject: [PATCH 1/4] be_ptask: create a private header file

Re: [SSSD] [PATCH] Move ccache operations to krb5_child, allow the krb5_auth code to run unprivileged

2014-11-18 Thread Sumit Bose
On Tue, Nov 18, 2014 at 02:56:35PM +0100, Jakub Hrozek wrote: > On Mon, Nov 17, 2014 at 06:35:57PM +0100, Sumit Bose wrote: > > On Fri, Nov 14, 2014 at 01:52:20PM +0100, Jakub Hrozek wrote: > > > On Thu, Nov 13, 2014 at 07:30:41PM +0100, Jakub Hrozek wrote: > > > > On Wed, Nov 12, 2014 at 05:08:09P

Re: [SSSD] [PATCH] Move ccache operations to krb5_child, allow the krb5_auth code to run unprivileged

2014-11-18 Thread Jakub Hrozek
On Mon, Nov 17, 2014 at 08:45:26PM +0100, Sumit Bose wrote: > On Mon, Nov 17, 2014 at 06:35:57PM +0100, Sumit Bose wrote: > > On Fri, Nov 14, 2014 at 01:52:20PM +0100, Jakub Hrozek wrote: > > > On Thu, Nov 13, 2014 at 07:30:41PM +0100, Jakub Hrozek wrote: > > > > On Wed, Nov 12, 2014 at 05:08:09PM

Re: [SSSD] [PATCH] Move ccache operations to krb5_child, allow the krb5_auth code to run unprivileged

2014-11-18 Thread Jakub Hrozek
On Mon, Nov 17, 2014 at 06:35:57PM +0100, Sumit Bose wrote: > On Fri, Nov 14, 2014 at 01:52:20PM +0100, Jakub Hrozek wrote: > > On Thu, Nov 13, 2014 at 07:30:41PM +0100, Jakub Hrozek wrote: > > > On Wed, Nov 12, 2014 at 05:08:09PM +0100, Lukas Slebodnik wrote: > > > > > ... > > > > Thank you, se

Re: [SSSD] [PATCHES] IPA: check overrrides for IPA users as well

2014-11-18 Thread Jakub Hrozek
On Fri, Nov 14, 2014 at 05:27:29PM +0100, Jakub Hrozek wrote: > On Thu, Nov 13, 2014 at 11:58:13AM +0100, Sumit Bose wrote: > > Hi, > > Coverity run was clean, CI run succeeded and testing against a recent > IPA server went OK. Before I ack, I also want to test against an old > server, but I'm ru

Re: [SSSD] [PATCH] sss_client: Return a different error when sssd is not running

2014-11-18 Thread Lukas Slebodnik
On (18/11/14 12:22), Lukas Slebodnik wrote: >On (13/11/14 10:08), Simo Sorce wrote: >>On Thu, 13 Nov 2014 10:44:45 +0100 >>Jakub Hrozek wrote: >> >>> On Wed, Nov 12, 2014 at 08:04:46PM -0500, Simo Sorce wrote: >>> > On Wed, 12 Nov 2014 16:36:00 +0100 >>> > Lukas Slebodnik wrote: >>> > >>> > > On

Re: [SSSD] [PATCH] sss_client: Return a different error when sssd is not running

2014-11-18 Thread Lukas Slebodnik
On (13/11/14 10:08), Simo Sorce wrote: >On Thu, 13 Nov 2014 10:44:45 +0100 >Jakub Hrozek wrote: > >> On Wed, Nov 12, 2014 at 08:04:46PM -0500, Simo Sorce wrote: >> > On Wed, 12 Nov 2014 16:36:00 +0100 >> > Lukas Slebodnik wrote: >> > >> > > On (12/11/14 10:00), Simo Sorce wrote: >> > > >I would

[SSSD] [PATCH] nss-srv-tests: Add regression test for option re_expression

2014-11-18 Thread Lukas Slebodnik
ehlo, Attached patches are unit test for ticket https://fedorahosted.org/sssd/ticket/2487 The ./nss-srv-tests passed with sssd-1.12.1. LS >From ee8a9a9d65f1ca71d945c95eb664d1ff7f04cfc5 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Date: Tue, 18 Nov 2014 11:09:51 +0100 Subject: [PATCH 1/2] TEST