[SSSD] Re: [PATCH] test_ipa_subdom_server: Workaround for slow krb5 + SELinux

2016-04-06 Thread Jakub Hrozek
On Tue, Mar 15, 2016 at 04:47:50PM +0100, Lukas Slebodnik wrote: > ehlo, > > There were failures[1] on rhel6 machine with latest packages. > it took me a while to find out which package cuaed it. > Therefore I downgraded rhel machine to vanilla rhel6.7 > and I was troubleshooting it on different m

[SSSD] [PATCH] memberof: Fix a memory leak when removing ghost users

2016-04-06 Thread Jakub Hrozek
Hi, I'm sorry I didn't catch this when I developed the original patch, but today I was trying to write the leak patches as Lukas suggested the other day..I haven't succeeded at that yet, but I found another leak. A patch is attached. >From 624095b4f8151c51c1383b724a9afb30149a2cae Mon Sep 17 00:00

[SSSD] Re: [PATCH] SPEC: Run extra unit tests with epel

2016-04-06 Thread Jakub Hrozek
On Wed, Apr 06, 2016 at 05:10:02PM +0200, Jakub Hrozek wrote: > On Fri, Apr 01, 2016 at 03:17:00PM +0200, Lukas Slebodnik wrote: > > On (31/03/16 09:46), Lukas Slebodnik wrote: > > >On (18/03/16 17:53), Lukas Slebodnik wrote: > > >>On (17/03/16 23:17), Jakub Hrozek wrote: > > >>>On Mon, Mar 07, 201

[SSSD] Re: Design Document: Data Provider Refactoring

2016-04-06 Thread Jakub Hrozek
On Fri, Apr 01, 2016 at 12:07:04PM +0200, Pavel Březina wrote: > https://fedorahosted.org/sssd/wiki/DesignDocs/DataProvider > > For your convenience, the text is copied below: > > = Data Provider Refactoring = > > Related ticket(s): > * https://fedorahosted.org/sssd/ticket/385 I think you can

[SSSD] Re: [PATCH] SPEC: Run extra unit tests with epel

2016-04-06 Thread Jakub Hrozek
On Fri, Apr 01, 2016 at 03:17:00PM +0200, Lukas Slebodnik wrote: > On (31/03/16 09:46), Lukas Slebodnik wrote: > >On (18/03/16 17:53), Lukas Slebodnik wrote: > >>On (17/03/16 23:17), Jakub Hrozek wrote: > >>>On Mon, Mar 07, 2016 at 04:12:00PM +0100, Lukas Slebodnik wrote: > ehlo, > > >>>

[SSSD] Re: [PATCH SET] TOOL: Invalidation of sudo rules at sss_cache

2016-04-06 Thread Petr Cech
On 03/31/2016 03:29 PM, Pavel Březina wrote: On 03/29/2016 03:17 PM, Petr Cech wrote: Hi, I am going to take three days of PTO. There is my work. Tests don't leak and they really test :-) It is possible to use compact form of them, maybe more help functions... But I hope that main idea is vi

[SSSD] Re: [PATCH] GPO_CHILD: Create directories in gpo_cache with right permissions

2016-04-06 Thread Jakub Hrozek
On Fri, Apr 01, 2016 at 03:18:25PM +0200, Lukas Slebodnik wrote: > On (03/03/16 13:50), Lukas Slebodnik wrote: > >ehlo, > > > >review is appreciated. > Bump > > LS I'm sorry for the late review. The patches seem to work fine, without them, I was seeing: (Wed Apr 6 14:11:20 2016) [[sssd[gpo_child

[SSSD] Re: [PATCH] Netlink: Ignore RTM_NEWADDR signals from link-local

2016-04-06 Thread Jakub Hrozek
On Wed, Apr 06, 2016 at 03:16:20PM +0200, Jakub Hrozek wrote: > On Wed, Apr 06, 2016 at 08:39:39AM -0400, Stephen Gallagher wrote: > > > > > > > On Apr 6, 2016, at 8:37 AM, Jakub Hrozek wrote: > > > > > >> On Tue, Apr 05, 2016 at 02:34:33PM -0400, Stephen Gallagher wrote: > > >> We only need to

[SSSD] [PATCH] AD: Recognize Windows Server 2016

2016-04-06 Thread Jakub Hrozek
Hi, I was doing a smoke-test with Windows Server 2016 after receiving several requests from users (mainly about IDMU deprecation) and find out that WS 2016 reports a higher Domain Compatibility level. Even though that Windows Server release is not officially out yet and the documentation hasn't b

[SSSD] Re: [PATCH] Netlink: Ignore RTM_NEWADDR signals from link-local

2016-04-06 Thread Jakub Hrozek
On Wed, Apr 06, 2016 at 08:39:39AM -0400, Stephen Gallagher wrote: > > > > On Apr 6, 2016, at 8:37 AM, Jakub Hrozek wrote: > > > >> On Tue, Apr 05, 2016 at 02:34:33PM -0400, Stephen Gallagher wrote: > >> We only need to go online if we receive a netlink signal that might > >> indicate that the

[SSSD] Re: [PATCH] Netlink: Ignore RTM_NEWADDR signals from link-local

2016-04-06 Thread Stephen Gallagher
> On Apr 6, 2016, at 8:37 AM, Jakub Hrozek wrote: > >> On Tue, Apr 05, 2016 at 02:34:33PM -0400, Stephen Gallagher wrote: >> We only need to go online if we receive a netlink signal that might >> indicate that the external connection might have become available. This >> will never be true for l

[SSSD] Re: [PATCH] Netlink: Ignore RTM_NEWADDR signals from link-local

2016-04-06 Thread Jakub Hrozek
On Tue, Apr 05, 2016 at 02:34:33PM -0400, Stephen Gallagher wrote: > We only need to go online if we receive a netlink signal that might > indicate that the external connection might have become available. This > will never be true for link-local addresses. > The indentation of DEBUG messages is

[SSSD] Re: [PATCH] MAN: Remove duplicate description of the pam_account_locked_message option

2016-04-06 Thread Jakub Hrozek
On Wed, Apr 06, 2016 at 01:07:09PM +0200, Pavel Reichl wrote: > > > On 04/06/2016 10:39 AM, Pavel Reichl wrote: > > > > > >On 04/06/2016 10:17 AM, Jakub Hrozek wrote: > >>Hi, > >> > >>I found this minor man page bug when I was prepairing the 1.13.4 release > >>notes. > >> > > > >Obvious ACK. > >

[SSSD] Re: [PATCH] MAN: Remove duplicate description of the pam_account_locked_message option

2016-04-06 Thread Pavel Reichl
On 04/06/2016 10:39 AM, Pavel Reichl wrote: On 04/06/2016 10:17 AM, Jakub Hrozek wrote: Hi, I found this minor man page bug when I was prepairing the 1.13.4 release notes. Obvious ACK. I'm waiting for ci results but I don't expect any surprises there :-)

[SSSD] Re: [PATCH] PAM: Export original user shell to tlog-rec

2016-04-06 Thread Sumit Bose
On Wed, Apr 06, 2016 at 12:59:32PM +0300, Nikolai Kondrashov wrote: > On 03/18/2016 07:56 PM, Nikolai Kondrashov wrote: > >The attached patch adds exporting of the original (non-overridden) user shell > >to tlog-rec, during the PAM session opening. The shell is exported via adding > >variable "TLOG

[SSSD] Re: [PATCH] PAM: Export original user shell to tlog-rec

2016-04-06 Thread Nikolai Kondrashov
On 03/18/2016 07:56 PM, Nikolai Kondrashov wrote: The attached patch adds exporting of the original (non-overridden) user shell to tlog-rec, during the PAM session opening. The shell is exported via adding variable "TLOG_REC_SHELL" to the user's environment. Bump, tlog still needs this! Thanks

[SSSD] Re: Design document - sssctl

2016-04-06 Thread Jakub Hrozek
On Tue, Mar 22, 2016 at 12:42:28PM +0100, Pavel Reichl wrote: > Hello, > > Pavel Březina and I have prepared the 1st draft of design document. We mostly > focused on summing up its future functionality and its interface. > > Please comment if you miss some essential functionality or if you would

[SSSD] Re: Design document - sssctl

2016-04-06 Thread Jakub Hrozek
On Tue, Mar 22, 2016 at 04:23:26PM -0400, Justin Stephenson wrote: > This is great and will make our lives much easier in support! Currently we > have autokeyed commands like 'service sssd stop; rm -f /var/lib/sss/db/*; > service sssd stop' Yes in fact, most users expect this to be done by the sss

[SSSD] Re: [PATCH] MAN: Remove duplicate description of the pam_account_locked_message option

2016-04-06 Thread Pavel Reichl
On 04/06/2016 10:17 AM, Jakub Hrozek wrote: Hi, I found this minor man page bug when I was prepairing the 1.13.4 release notes. Obvious ACK. I'm waiting for ci results but I don't expect any surprises there :-) ___ sssd-devel mailing list sssd-de

[SSSD] RFC: release notes for 1.13.4

2016-04-06 Thread Jakub Hrozek
Hi, I would like to release 1.13.4 today. I drafted the release notes on the wiki: https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4 Feel free to comment or edit them.. About the tickets in the 1.13.4 milestone: https://fedorahosted.org/sssd/ticket/2886 - sssd-nss segfault on rest

[SSSD] [PATCH] MAN: Remove duplicate description of the pam_account_locked_message option

2016-04-06 Thread Jakub Hrozek
Hi, I found this minor man page bug when I was prepairing the 1.13.4 release notes. >From 7863d86d3377380e2ce73ea47bc78c787cffbda3 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Wed, 6 Apr 2016 10:09:23 +0200 Subject: [PATCH] MAN: Remove duplicate description of the pam_account_locked_message