Re: [SSSD] [PATCHES] SDAP: Lock out ssh keys when account naturally expires

2015-03-04 Thread Jakub Hrozek
On Wed, Mar 04, 2015 at 09:45:19PM +0100, Pavel Reichl wrote: > > > On 03/04/2015 04:37 PM, Jakub Hrozek wrote: > >On Wed, Mar 04, 2015 at 12:02:03PM +0100, Pavel Reichl wrote: > >>Patches needed to be rebased. > >here are the fixups I mentioned in the other mail > Thanks, new patch set attached.

Re: [SSSD] [PATCHES] SDAP: Lock out ssh keys when account naturally expires

2015-03-04 Thread Pavel Reichl
On 03/04/2015 04:37 PM, Jakub Hrozek wrote: On Wed, Mar 04, 2015 at 12:02:03PM +0100, Pavel Reichl wrote: Patches needed to be rebased. here are the fixups I mentioned in the other mail Thanks, new patch set attached. >From a8826633a944e92b7248e446fd37c349c1c72292 Mon Sep 17 00:00:00 2001 Fr

Re: [SSSD] [PATCH] selinux: Delete existing user mapping on empty default

2015-03-04 Thread Jakub Hrozek
On Tue, Mar 03, 2015 at 10:46:29PM +0100, Michal Židek wrote: > On 03/03/2015 11:32 AM, Jakub Hrozek wrote: > >Hi, > > > >I'm still working on the SELinux provider unit tests, but mocking the > >interfaces it uses turned out to be more work than I anticipated, so I'm > >sending the patch without a

Re: [SSSD] [PATCH] LDAP: unlink ccname_file_dummy if there is an error

2015-03-04 Thread Jakub Hrozek
On Wed, Mar 04, 2015 at 02:25:54PM +0100, Jakub Hrozek wrote: > On Fri, Feb 27, 2015 at 12:04:59PM -0700, Daniel Hjorth wrote: > > On Fri, Feb 27, 2015 at 10:13:28AM +0100, Jakub Hrozek wrote: > > > On Fri, Feb 27, 2015 at 09:59:57AM +0100, Sumit Bose wrote: > > > > > done: > > > > > -talloc_f

Re: [SSSD] [PATCHES] SDAP: Lock out ssh keys when account naturally expires

2015-03-04 Thread Jakub Hrozek
On Wed, Mar 04, 2015 at 12:02:03PM +0100, Pavel Reichl wrote: > Patches needed to be rebased. here are the fixups I mentioned in the other mail >From a2fa74d8cf2b3da2c2e113fb1ff7e4b60d0ce6c2 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Wed, 4 Mar 2015 16:16:22 +0100 Subject: [PATCH] Fixup of

Re: [SSSD] [PATCHES] SDAP: Lock out ssh keys when account naturally expires

2015-03-04 Thread Jakub Hrozek
On Wed, Mar 04, 2015 at 12:02:03PM +0100, Pavel Reichl wrote: > Patches needed to be rebased. > > ci passed: > > http://sssd-ci.duckdns.org/logs/job/8/74/summary.html > > > > From f2801324e2d184e1bf7092f22e8509ffc78a5bfc Mon Sep 17 00:00:00 2001 > From: Pavel Reichl > Date: Tue, 20 Jan 2015

Re: [SSSD] [PATCH] LDAP: unlink ccname_file_dummy if there is an error

2015-03-04 Thread Jakub Hrozek
On Fri, Feb 27, 2015 at 12:04:59PM -0700, Daniel Hjorth wrote: > On Fri, Feb 27, 2015 at 10:13:28AM +0100, Jakub Hrozek wrote: > > On Fri, Feb 27, 2015 at 09:59:57AM +0100, Sumit Bose wrote: > > > > done: > > > > -talloc_free(tmp_ctx); > > > > if (krberr != 0) KRB5_SYSLOG(krberr); > > > >

Re: [SSSD] [PATCHES] SDAP: Lock out ssh keys when account naturally expires

2015-03-04 Thread Pavel Reichl
On 03/03/2015 09:57 PM, Pavel Reichl wrote: On 03/03/2015 03:28 PM, Jakub Hrozek wrote: On Mon, Mar 02, 2015 at 11:42:06PM +0100, Lukas Slebodnik wrote: On (22/01/15 17:06), Pavel Reichl wrote: Second patch now contains unit test. >From f8686fbb988d29309a41064a678c0daf4aa40b6b Mon Sep 17 00

Re: [SSSD] [PATCHES] SDAP: enable change phase of pw expire policy check

2015-03-04 Thread Pavel Reichl
On 03/03/2015 06:27 PM, Sumit Bose wrote: Thank you for your patience. Patches are looking good, working as expected and pass CI (http://sssd-ci.duckdns.org/logs/job/8/63/summary.html) so ACK. Nevertheless I can imagine that there will be request for a 'Password is expired' warning for the pwd

Re: [SSSD] [PATCHES] be_refresh: support users and groups

2015-03-04 Thread Pavel Březina
On 03/03/2015 01:03 PM, Jakub Hrozek wrote: On Thu, Feb 19, 2015 at 12:18:13PM +0100, Pavel Březina wrote: https://fedorahosted.org/sssd/ticket/2346 Hi, the first patch add support for subdomains, which was missing in current implementation. It probably wasn't a big deal with netgroups but I th