Re: [SSSD] Data dir and cwrap tests

2014-12-17 Thread Nikolai Kondrashov
On 12/17/2014 08:48 PM, Dmitri Pal wrote: On 12/17/2014 01:37 PM, Nikolai Kondrashov wrote: On 12/17/2014 08:15 PM, Dmitri Pal wrote: If we do something in the area we should consider the config DB and config file refactoring we have on our plate anyways. IMO it would make sense to pass a path

Re: [SSSD] [PATCH] IPA: verify group memberships of trusted domain users

2014-12-17 Thread Sumit Bose
On Wed, Dec 17, 2014 at 04:40:53PM +0100, Sumit Bose wrote: > On Wed, Dec 17, 2014 at 04:07:42PM +0100, Lukas Slebodnik wrote: > > On (16/12/14 10:47), Sumit Bose wrote: > > >On Mon, Dec 15, 2014 at 10:41:25AM +0100, Lukas Slebodnik wrote: > > >> On (12/12/14 11:04), Sumit Bose wrote: > > >> >Hi, >

Re: [SSSD] [PATCHES] IPA: handle GID overrides for MPG domains on clients

2014-12-17 Thread Sumit Bose
On Wed, Dec 17, 2014 at 05:25:14PM +0100, Lukas Slebodnik wrote: > On (11/12/14 11:00), Sumit Bose wrote: > >Hi, > > > >this is the fix for https://fedorahosted.org/sssd/ticket/2514 and has a > >fix for a related issue as well. > > > >bye, > >Sumit > > >From 3496396e440377bca34887c0b271beb67db7c01

Re: [SSSD] Data dir and cwrap tests

2014-12-17 Thread Dmitri Pal
On 12/17/2014 01:37 PM, Nikolai Kondrashov wrote: On 12/17/2014 08:15 PM, Dmitri Pal wrote: On 12/17/2014 01:06 PM, Nikolai Kondrashov wrote: On 12/17/2014 07:37 PM, Lukas Slebodnik wrote: On (17/12/14 19:11), Nikolai Kondrashov wrote: On 12/17/2014 06:44 PM, Lukas Slebodnik wrote: You can u

Re: [SSSD] Data dir and cwrap tests

2014-12-17 Thread Nikolai Kondrashov
On 12/17/2014 08:15 PM, Dmitri Pal wrote: On 12/17/2014 01:06 PM, Nikolai Kondrashov wrote: On 12/17/2014 07:37 PM, Lukas Slebodnik wrote: On (17/12/14 19:11), Nikolai Kondrashov wrote: On 12/17/2014 06:44 PM, Lukas Slebodnik wrote: You can use different prefix even with make check. Sure, b

Re: [SSSD] Data dir and cwrap tests

2014-12-17 Thread Dmitri Pal
On 12/17/2014 01:06 PM, Nikolai Kondrashov wrote: On 12/17/2014 07:37 PM, Lukas Slebodnik wrote: On (17/12/14 19:11), Nikolai Kondrashov wrote: On 12/17/2014 06:44 PM, Lukas Slebodnik wrote: You can use different prefix even with make check. Sure, but then it won't be just any "make check" a

Re: [SSSD] Data dir and cwrap tests

2014-12-17 Thread Nikolai Kondrashov
On 12/17/2014 07:37 PM, Lukas Slebodnik wrote: On (17/12/14 19:11), Nikolai Kondrashov wrote: On 12/17/2014 06:44 PM, Lukas Slebodnik wrote: You can use different prefix even with make check. Sure, but then it won't be just any "make check" anymore. It will require a special "configure" invoc

Re: [SSSD] Data dir and cwrap tests

2014-12-17 Thread Lukas Slebodnik
On (17/12/14 19:11), Nikolai Kondrashov wrote: >On 12/17/2014 06:44 PM, Lukas Slebodnik wrote: >>You can use different prefix even with make check. > >Sure, but then it won't be just any "make check" anymore. It will require a >special "configure" invocation to work. > >>"make distcheck" uses it in

Re: [SSSD] cwrap test roadblock

2014-12-17 Thread Nikolai Kondrashov
On 11/28/2014 02:08 PM, Lukas Slebodnik wrote: On (28/11/14 12:01), Sumit Bose wrote: On Thu, Nov 27, 2014 at 03:09:32PM +0200, Nikolai Kondrashov wrote: Hi everyone, While trying to arrange running sssd under cwrap in "make check" I came upon this roadblock: There doesn't seem to be a way to

Re: [SSSD] Data dir and cwrap tests

2014-12-17 Thread Nikolai Kondrashov
On 12/17/2014 06:44 PM, Lukas Slebodnik wrote: You can use different prefix even with make check. Sure, but then it won't be just any "make check" anymore. It will require a special "configure" invocation to work. "make distcheck" uses it in such way. It doesn't make sense to reinvent wheel.

Re: [SSSD] Data dir and cwrap tests

2014-12-17 Thread Lukas Slebodnik
On (17/12/14 18:23), Nikolai Kondrashov wrote: >Hi everyone, > >In order to run integration tests as non-root we would need to have all data >directories and files to reside in a user-writeable (temporary) directory. > >However, it seems that various sssd data directory and file locations are >spre

Re: [SSSD] [PATCHES] IPA: handle GID overrides for MPG domains on clients

2014-12-17 Thread Lukas Slebodnik
On (11/12/14 11:00), Sumit Bose wrote: >Hi, > >this is the fix for https://fedorahosted.org/sssd/ticket/2514 and has a >fix for a related issue as well. > >bye, >Sumit >From 3496396e440377bca34887c0b271beb67db7c01d Mon Sep 17 00:00:00 2001 >From: Sumit Bose >Date: Tue, 2 Dec 2014 21:10:01 +0100 >

[SSSD] Data dir and cwrap tests

2014-12-17 Thread Nikolai Kondrashov
Hi everyone, In order to run integration tests as non-root we would need to have all data directories and files to reside in a user-writeable (temporary) directory. However, it seems that various sssd data directory and file locations are spread over the code as preprocessor macros, resulting in

Re: [SSSD] [PATCH] IPA: verify group memberships of trusted domain users

2014-12-17 Thread Sumit Bose
On Wed, Dec 17, 2014 at 04:07:42PM +0100, Lukas Slebodnik wrote: > On (16/12/14 10:47), Sumit Bose wrote: > >On Mon, Dec 15, 2014 at 10:41:25AM +0100, Lukas Slebodnik wrote: > >> On (12/12/14 11:04), Sumit Bose wrote: > >> >Hi, > >> > > >> >This patch tries to assure on IPA clients that users from

Re: [SSSD] [PATCH] IPA: verify group memberships of trusted domain users

2014-12-17 Thread Lukas Slebodnik
On (16/12/14 10:47), Sumit Bose wrote: >On Mon, Dec 15, 2014 at 10:41:25AM +0100, Lukas Slebodnik wrote: >> On (12/12/14 11:04), Sumit Bose wrote: >> >Hi, >> > >> >This patch tries to assure on IPA clients that users from trusted >> >domains are really belong ot all groups they are member of and sh

Re: [SSSD] [PATCH] krb5: handle KRB5KRB_ERR_GENERIC as unspecific error

2014-12-17 Thread Sumit Bose
On Wed, Dec 17, 2014 at 03:53:47PM +0100, Lukas Slebodnik wrote: > On (17/12/14 09:55), Sumit Bose wrote: > >Hi, > > > >this patch should fix https://fedorahosted.org/sssd/ticket/2535 . > > > >bye, > >Sumit > > >From 4efbcd9970de72e9661971f9eb8d51c1ed43c078 Mon Sep 17 00:00:00 2001 > >From: Sumit

Re: [SSSD] [PATCH] SYSDB: sysdb_search_object_by_sid returns ENOENT

2014-12-17 Thread Sumit Bose
On Wed, Dec 17, 2014 at 03:47:05PM +0100, Lukas Slebodnik wrote: > On (17/12/14 15:27), Pavel Reichl wrote: > > > >On 12/15/2014 12:15 PM, Pavel Reichl wrote: > >> > >>On 12/15/2014 10:12 AM, Lukas Slebodnik wrote: > >>>On (12/12/14 17:10), Pavel Reichl wrote: > On 12/12/2014 04:10 PM, Lukas Sl

Re: [SSSD] [PATCH] krb5: handle KRB5KRB_ERR_GENERIC as unspecific error

2014-12-17 Thread Lukas Slebodnik
On (17/12/14 09:55), Sumit Bose wrote: >Hi, > >this patch should fix https://fedorahosted.org/sssd/ticket/2535 . > >bye, >Sumit >From 4efbcd9970de72e9661971f9eb8d51c1ed43c078 Mon Sep 17 00:00:00 2001 >From: Sumit Bose >Date: Wed, 17 Dec 2014 09:42:57 +0100 >Subject: [PATCH] krb5: handle KRB5KRB_E

Re: [SSSD] [PATCH] SYSDB: sysdb_search_object_by_sid returns ENOENT

2014-12-17 Thread Lukas Slebodnik
On (17/12/14 15:27), Pavel Reichl wrote: > >On 12/15/2014 12:15 PM, Pavel Reichl wrote: >> >>On 12/15/2014 10:12 AM, Lukas Slebodnik wrote: >>>On (12/12/14 17:10), Pavel Reichl wrote: On 12/12/2014 04:10 PM, Lukas Slebodnik wrote: >On (12/12/14 16:04), Pavel Reichl wrote: >>On 12/12/201

Re: [SSSD] [PATCH] SYSDB: sysdb_search_object_by_sid returns ENOENT

2014-12-17 Thread Pavel Reichl
On 12/15/2014 12:15 PM, Pavel Reichl wrote: On 12/15/2014 10:12 AM, Lukas Slebodnik wrote: On (12/12/14 17:10), Pavel Reichl wrote: On 12/12/2014 04:10 PM, Lukas Slebodnik wrote: On (12/12/14 16:04), Pavel Reichl wrote: On 12/12/2014 03:52 PM, Lukas Slebodnik wrote: On (12/12/14 15:25), Pa

Re: [SSSD] [PATCH] krb5_child: Initialize REALM earlier

2014-12-17 Thread Sumit Bose
On Wed, Dec 17, 2014 at 10:55:14AM +0100, Sumit Bose wrote: > On Wed, Dec 17, 2014 at 09:25:18AM +0100, Lukas Slebodnik wrote: > > ehlo, > > > > Attached patch fixes regression https://fedorahosted.org/sssd/ticket/2526 > > > > I hope there isn't problem with initialisation of REALM in privileged

Re: [SSSD] [PATCHES] Various view related improvements

2014-12-17 Thread Sumit Bose
On Wed, Dec 17, 2014 at 09:33:32AM +0100, Lukas Slebodnik wrote: > On (17/12/14 09:31), Lukas Slebodnik wrote: > >On (11/12/14 11:10), Sumit Bose wrote: > >>Hi, > >> > >>this patch set contains some improvements for the view related code on > >>IPA client. Most of them are performance related, patc

Re: [SSSD] IPA: resolve ghost members if a non-default view is applied

2014-12-17 Thread Sumit Bose
On Wed, Dec 17, 2014 at 09:32:55AM +0100, Lukas Slebodnik wrote: > On (11/12/14 11:21), Sumit Bose wrote: > >Hi, > > > >these two patches add a missing part to > >https://fedorahosted.org/sssd/ticket/2481 (ID Views implementation does > >not support IPA user&group overrides). Since it is not allowe

Re: [SSSD] [PATCH] krb5_child: Initialize REALM earlier

2014-12-17 Thread Sumit Bose
On Wed, Dec 17, 2014 at 09:25:18AM +0100, Lukas Slebodnik wrote: > ehlo, > > Attached patch fixes regression https://fedorahosted.org/sssd/ticket/2526 > > I hope there isn't problem with initialisation of REALM in privileged code. > > LS Thank you for the patch. ACK bye, Sumit

[SSSD] [PATCHES] sbus: move some general code from ifp to sbus

2014-12-17 Thread Pavel Březina
Hi, Patch 0001: Moves few object path functions from IFP to sbus. Patch 0002: Adds a new function that retrieves unescaped object name. Patch 0003: Fixes a potential memory leak. From 4d43661b4fb65e61407f370a44d7ce3d1d922da0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pavel=20B=C5=99ezina?= Date:

[SSSD] [PATCH] krb5: handle KRB5KRB_ERR_GENERIC as unspecific error

2014-12-17 Thread Sumit Bose
Hi, this patch should fix https://fedorahosted.org/sssd/ticket/2535 . bye, Sumit From 4efbcd9970de72e9661971f9eb8d51c1ed43c078 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Wed, 17 Dec 2014 09:42:57 +0100 Subject: [PATCH] krb5: handle KRB5KRB_ERR_GENERIC as unspecific error KRB5KRB_ERR_GENERI

Re: [SSSD] [PATCHES] Various view related improvements

2014-12-17 Thread Lukas Slebodnik
On (17/12/14 09:31), Lukas Slebodnik wrote: >On (11/12/14 11:10), Sumit Bose wrote: >>Hi, >> >>this patch set contains some improvements for the view related code on >>IPA client. Most of them are performance related, patches 4,5 and 6 make >>sure that during group requests all members are properly

Re: [SSSD] IPA: resolve ghost members if a non-default view is applied

2014-12-17 Thread Lukas Slebodnik
On (11/12/14 11:21), Sumit Bose wrote: >Hi, > >these two patches add a missing part to >https://fedorahosted.org/sssd/ticket/2481 (ID Views implementation does >not support IPA user&group overrides). Since it is not allowed to have >ghost members if a non-default view is applied because otherwise u

Re: [SSSD] [PATCHES] Various view related improvements

2014-12-17 Thread Lukas Slebodnik
On (11/12/14 11:10), Sumit Bose wrote: >Hi, > >this patch set contains some improvements for the view related code on >IPA client. Most of them are performance related, patches 4,5 and 6 make >sure that during group requests all members are properly resovled if a >non-default view is applied to be

[SSSD] [PATCH] krb5_child: Initialize REALM earlier

2014-12-17 Thread Lukas Slebodnik
ehlo, Attached patch fixes regression https://fedorahosted.org/sssd/ticket/2526 I hope there isn't problem with initialisation of REALM in privileged code. LS >From 4466974b11a44d0a50cdc90d8ed778697d56d577 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Date: Wed, 17 Dec 2014 09:10:33 +0100 Subj