Re: [SSSD] [PATCHES] Support GPOs referred from other domains

2015-05-27 Thread Stephen Gallagher
On Wed, 2015-05-27 at 11:15 +0200, Jakub Hrozek wrote: > On Tue, May 26, 2015 at 03:56:35PM -0400, Stephen Gallagher wrote: > > Sorry for the delay; two new patches attached. > > > > This patch fixes the two missing error checks in the AD GPO code as > > well as making several changes to the gener

Re: [SSSD] [PATCH] Add Vagrant configuration for SSSD

2015-05-27 Thread Stephen Gallagher
On Wed, 2015-05-27 at 21:36 +0200, Lukas Slebodnik wrote: > On (27/05/15 15:30), Stephen Gallagher wrote: > > On Wed, 2015-05-27 at 13:31 -0400, Stephen Gallagher wrote: > > > To set up a Vagrant development environment: > > > * Install the Vagrant packages for your development system > > > * On

Re: [SSSD] [PATCH] Add Vagrant configuration for SSSD

2015-05-27 Thread Jakub Hrozek
On Wed, May 27, 2015 at 03:30:36PM -0400, Stephen Gallagher wrote: > On Wed, 2015-05-27 at 13:31 -0400, Stephen Gallagher wrote: > > To set up a Vagrant development environment: > > * Install the Vagrant packages for your development system > > * On Fedora 22 and later: 'dnf install vagrant-libvi

Re: [SSSD] [PATCH] Add Vagrant configuration for SSSD

2015-05-27 Thread Lukas Slebodnik
On (27/05/15 15:30), Stephen Gallagher wrote: >On Wed, 2015-05-27 at 13:31 -0400, Stephen Gallagher wrote: >> To set up a Vagrant development environment: >> * Install the Vagrant packages for your development system >> * On Fedora 22 and later: 'dnf install vagrant-libvirt' >> * Deploy the Vagra

Re: [SSSD] [PATCH] Add Vagrant configuration for SSSD

2015-05-27 Thread Stephen Gallagher
On Wed, 2015-05-27 at 13:31 -0400, Stephen Gallagher wrote: > To set up a Vagrant development environment: > * Install the Vagrant packages for your development system > * On Fedora 22 and later: 'dnf install vagrant-libvirt' > * Deploy the Vagrant box: > * 'vagrant up' > * Build SSSD: > * va

Re: [SSSD] [PATCH] PROXY: proxy_child should work in non-root mode

2015-05-27 Thread Lukas Slebodnik
On (27/05/15 20:20), Michal Židek wrote: >On 05/27/2015 03:06 PM, Lukas Slebodnik wrote: >>ehlo, >> >>BTW crash in sssd_be (#2654) was cased by missing setuid bit in proxy_child. >> >>Attached patch fixes proxy_child in non-root mode >>so now design page and reality are the same in this case. :-) >

Re: [SSSD] [PATCH] PROXY: proxy_child should work in non-root mode

2015-05-27 Thread Michal Židek
On 05/27/2015 03:06 PM, Lukas Slebodnik wrote: ehlo, BTW crash in sssd_be (#2654) was cased by missing setuid bit in proxy_child. Attached patch fixes proxy_child in non-root mode so now design page and reality are the same in this case. :-) LS I tested your patches. It did not work for me

[SSSD] Design document - Do not always override home directory with subdomain_homedir value in server mode

2015-05-27 Thread Pavel Reichl
Hello, please see design page for simple - RFE: Do not always override home directory with subdomain_homedir value in server mode. https://fedorahosted.org/sssd/wiki/DesignDocs/use_AD_homedir ** **

[SSSD] [PATCH] PROXY: proxy_child should work in non-root mode

2015-05-27 Thread Lukas Slebodnik
ehlo, BTW crash in sssd_be (#2654) was cased by missing setuid bit in proxy_child. Attached patch fixes proxy_child in non-root mode so now design page and reality are the same in this case. :-) LS >From 9481f29a264526fc91ae97b99cadc9b11f92afc2 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Dat

[SSSD] [PATCH v5] Add integration tests

2015-05-27 Thread Nikolai Kondrashov
On 05/27/2015 10:52 AM, Lukas Slebodnik wrote: On (27/05/15 10:49), Nikolai Kondrashov wrote: On 05/27/2015 08:55 AM, Lukas Slebodnik wrote: On (26/05/15 20:49), Nikolai Kondrashov wrote: On 05/26/2015 07:56 PM, Lukas Slebodnik wrote: On (26/05/15 13:03), Nikolai Kondrashov wrote: Hmm, you a

Re: [SSSD] [PATCHES] krb5: new option krb5_map_user

2015-05-27 Thread Jakub Hrozek
On Wed, May 27, 2015 at 10:41:14AM +0200, Lukas Slebodnik wrote: > On (27/05/15 10:38), Jakub Hrozek wrote: > >On Wed, May 27, 2015 at 09:52:11AM +0200, Lukas Slebodnik wrote: > >> >+static errno_t > >> >+get_krb_primary(struct map_id_name_to_krb_primary *name_to_primary, > >> >+cha

Re: [SSSD] [PATCHES] Support GPOs referred from other domains

2015-05-27 Thread Jakub Hrozek
On Tue, May 26, 2015 at 03:56:35PM -0400, Stephen Gallagher wrote: > Sorry for the delay; two new patches attached. > > This patch fixes the two missing error checks in the AD GPO code as > well as making several changes to the general LDAP support of > referrals. > > While I was looking through

Re: [SSSD] [PATCHES] krb5: new option krb5_map_user

2015-05-27 Thread Pavel Reichl
On 05/27/2015 10:41 AM, Lukas Slebodnik wrote: On (27/05/15 10:38), Jakub Hrozek wrote: On Wed, May 27, 2015 at 09:52:11AM +0200, Lukas Slebodnik wrote: +static errno_t +get_krb_primary(struct map_id_name_to_krb_primary *name_to_primary, +char *id_prov_name, bool cs, const char

Re: [SSSD] [PATCHES] krb5: new option krb5_map_user

2015-05-27 Thread Lukas Slebodnik
On (27/05/15 10:38), Jakub Hrozek wrote: >On Wed, May 27, 2015 at 09:52:11AM +0200, Lukas Slebodnik wrote: >> >+static errno_t >> >+get_krb_primary(struct map_id_name_to_krb_primary *name_to_primary, >> >+char *id_prov_name, bool cs, const char **_krb_primary) >> >+{ >> >+errno_

Re: [SSSD] [PATCHES] krb5: new option krb5_map_user

2015-05-27 Thread Pavel Reichl
On 05/27/2015 09:40 AM, Jakub Hrozek wrote: On Tue, May 26, 2015 at 04:36:18PM +0200, Pavel Reichl wrote: From 923e68ba56f276db473a38fffe339a0dc9770a4f Mon Sep 17 00:00:00 2001 From: Pavel Reichl Date: Thu, 30 Apr 2015 06:43:05 -0400 Subject: [PATCH] krb5: new option krb5_map_user New optio

Re: [SSSD] [PATCHES] krb5: new option krb5_map_user

2015-05-27 Thread Jakub Hrozek
On Wed, May 27, 2015 at 09:52:11AM +0200, Lukas Slebodnik wrote: > >+static errno_t > >+get_krb_primary(struct map_id_name_to_krb_primary *name_to_primary, > >+char *id_prov_name, bool cs, const char **_krb_primary) > >+{ > >+errno_t ret; > >+int i = 0; > >+ > >+while(na

Re: [SSSD] [PATCH] proxy: Do not crash if proxy_child returns error

2015-05-27 Thread Lukas Slebodnik
On (26/05/15 11:04), Pavel Březina wrote: >On 05/26/2015 10:57 AM, Lukas Slebodnik wrote: >>On (26/05/15 10:44), Pavel Březina wrote: >>>On 05/25/2015 02:58 PM, Lukas Slebodnik wrote: On (22/05/15 11:02), Pavel Březina wrote: >On 05/20/2015 02:20 PM, Lukas Slebodnik wrote: >>ehlo, >

Re: [SSSD] [PATCH v4] Add integration tests

2015-05-27 Thread Lukas Slebodnik
On (27/05/15 10:49), Nikolai Kondrashov wrote: >On 05/27/2015 08:55 AM, Lukas Slebodnik wrote: >>On (26/05/15 20:49), Nikolai Kondrashov wrote: >>>On 05/26/2015 07:56 PM, Lukas Slebodnik wrote: On (26/05/15 13:03), Nikolai Kondrashov wrote: >On 05/26/2015 09:25 AM, Lukas Slebodnik wrote: >>

Re: [SSSD] [PATCHES] krb5: new option krb5_map_user

2015-05-27 Thread Lukas Slebodnik
On (26/05/15 16:36), Pavel Reichl wrote: >On 05/26/2015 04:22 PM, Jakub Hrozek wrote: >>On Tue, May 26, 2015 at 03:39:20PM +0200, Pavel Reichl wrote: >>>On 05/26/2015 03:09 PM, Jakub Hrozek wrote: On Tue, May 26, 2015 at 11:13:38AM +0200, Jakub Hrozek wrote: >I'll test the patch now.. F

Re: [SSSD] [PATCH v4] Add integration tests

2015-05-27 Thread Nikolai Kondrashov
On 05/27/2015 08:55 AM, Lukas Slebodnik wrote: On (26/05/15 20:49), Nikolai Kondrashov wrote: On 05/26/2015 07:56 PM, Lukas Slebodnik wrote: On (26/05/15 13:03), Nikolai Kondrashov wrote: On 05/26/2015 09:25 AM, Lukas Slebodnik wrote: It's better to do not mix utility functions. So feel free

Re: [SSSD] [PATCHES] krb5: new option krb5_map_user

2015-05-27 Thread Jakub Hrozek
On Tue, May 26, 2015 at 04:36:18PM +0200, Pavel Reichl wrote: > From 923e68ba56f276db473a38fffe339a0dc9770a4f Mon Sep 17 00:00:00 2001 > From: Pavel Reichl > Date: Thu, 30 Apr 2015 06:43:05 -0400 > Subject: [PATCH] krb5: new option krb5_map_user > > New option `krb5_map_user` providing mapping of