[SSSD] Re: sssd behaviour with large nested netgroups.

On (10/05/16 08:52), Jakub Hrozek wrote: >On Mon, May 09, 2016 at 11:04:59PM -0500, Malahal Naineni wrote: >> Hi All, >> >> We have ganesha NFS server that calls innetgr() call to validate >> client request. Noticing that all ganesha threads were making innetgr() >> calls and spending a lot o

[SSSD] Re: sssd behaviour with large nested netgroups.

On Mon, May 09, 2016 at 11:04:59PM -0500, Malahal Naineni wrote: > Hi All, > > We have ganesha NFS server that calls innetgr() call to validate > client request. Noticing that all ganesha threads were making innetgr() > calls and spending a lot of time there, I wrote a small script that just

[SSSD] Re: [PATCH] MAN: Remove references to the obsolete PubkeyAgent ssh option

On (09/05/16 15:45), Jan Cholasta wrote: >Hi, > >On 27.4.2016 12:19, Jakub Hrozek wrote: >> Hi, >> >> please see the attached trivial patch. The issue was reported by adelton >> on IRC. > >LGTM. > LGTM++ => ACK :-) master: * 5f6ed9ee56da19b87270ab5428a5c5fce5aab21e LS ___

[SSSD] sssd behaviour with large nested netgroups.

Hi All, We have ganesha NFS server that calls innetgr() call to validate client request. Noticing that all ganesha threads were making innetgr() calls and spending a lot of time there, I wrote a small script that just repeatedly calls innetgr() with same host name but with two different ne

[SSSD] Re: [PATCH] RESPONDERS: Negative caching of local users

On 05/09/2016 01:15 PM, Petr Cech wrote: On 05/05/2016 05:34 PM, Petr Cech wrote: Hello, this patch resolves [1]. This adds new behaviour of negative caching of locals, so it needs new tests. I will send patch with tests soon, but not today. It is applicable after RESPONDERS: Negcache in resp_

[SSSD] Re: [PATCH] GPO: Add "unity" to ad_gpo_map_interactive

On 05/06/2016 07:05 AM, Lukas Slebodnik wrote: > On (06/05/16 06:58), Stephen Gallagher wrote: >>> On May 6, 2016, at 6:55 AM, Lukas Slebodnik wrote: >>> On (05/05/16 10:46), Stephen Gallagher wrote: Ubuntu systems use "unity" as their screen-locker. Without this in the defaults, >

[SSSD] Re: [PATCH] MAN: Remove references to the obsolete PubkeyAgent ssh option

Hi, On 27.4.2016 12:19, Jakub Hrozek wrote: Hi, please see the attached trivial patch. The issue was reported by adelton on IRC. LGTM. Honza -- Jan Cholasta ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.o

[SSSD] Re: [PATCH] RESPONDERS: Negative caching of local users

On 05/05/2016 05:34 PM, Petr Cech wrote: Hello, this patch resolves [1]. This adds new behaviour of negative caching of locals, so it needs new tests. I will send patch with tests soon, but not today. It is applicable after RESPONDERS: Negcache in resp_ctx [2]. For clarity, there is branch wit

[SSSD] Re: [PATCH] Make sdap_process_group_send() static

On (09/05/16 12:20), Petr Cech wrote: >On 05/09/2016 10:01 AM, Petr Cech wrote: >> On 05/09/2016 09:54 AM, Jakub Hrozek wrote: >> > Hi, >> > >> > a trivial code-hygiene patch is attached. >> > >> > >> > 0001-Make-sdap_process_group_send-static.patch >> > >> > >> > From ac33446aaa78b65c6891f486

[SSSD] Re: [PATCH] Make sdap_process_group_send() static

On 05/09/2016 10:01 AM, Petr Cech wrote: On 05/09/2016 09:54 AM, Jakub Hrozek wrote: Hi, a trivial code-hygiene patch is attached. 0001-Make-sdap_process_group_send-static.patch From ac33446aaa78b65c6891f486e9ad462101f88a79 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 8 Dec 2015

[SSSD] Re: [PATCH] Unit tests for pam_sss using pam_wrapper (need help with CI..)

On Wed, May 04, 2016 at 11:36:57PM +0200, Lukas Slebodnik wrote: > On (27/04/16 10:51), Jakub Hrozek wrote: > >Hi, > > > >the attached patches implement unit tests for the pam_sss module using > >pam_wrapper and libpamtest. In my testing, the coverage is around 75% > >with mostly the parts that req

[SSSD] [PATCH] systemtap-based performance probes

Hi, the attached patches are the first self-contained part of my performance work. Using them, I analyzed the performance of 'id' as the worst-case, then realized most of the issues are around processing and storing large groups. The results gathered using these scripts are in fact the base of the

[SSSD] Re: [PATCH] Make sdap_process_group_send() static

On 05/09/2016 09:54 AM, Jakub Hrozek wrote: Hi, a trivial code-hygiene patch is attached. 0001-Make-sdap_process_group_send-static.patch From ac33446aaa78b65c6891f486e9ad462101f88a79 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 8 Dec 2015 21:10:27 +0100 Subject: [PATCH] Make sdap_

[SSSD] [PATCH] Make sdap_process_group_send() static

Hi, a trivial code-hygiene patch is attached. >From ac33446aaa78b65c6891f486e9ad462101f88a79 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 8 Dec 2015 21:10:27 +0100 Subject: [PATCH] Make sdap_process_group_send() static --- src/providers/ldap/sdap_async_groups.c | 17 +

[SSSD] Re: [DESIGN][PATCH] IPA HBAC Time Rules

On 05/09/2016 09:32 AM, Jakub Hrozek wrote: On Mon, May 09, 2016 at 09:21:53AM +0200, Stanislav Laznicka wrote: From what I've gathered, you would also like to have it ported to FreeBSD and Solaris (correct me if I'm wrong). I already did some research on how to get the Olson name there but it

[SSSD] Re: [DESIGN][PATCH] IPA HBAC Time Rules

On Mon, May 09, 2016 at 09:21:53AM +0200, Stanislav Laznicka wrote: > From what I've gathered, you would also like to have > it ported to FreeBSD and Solaris (correct me if I'm wrong). I already did > some research on how to get the Olson name there but it all seems a bit > messy so if you know of

[SSSD] [DESIGN][PATCH] IPA HBAC Time Rules

Hello, So after quite some time I finally got some HBAC time rules code I am able to present. I forked your sssd Github repository and added the code in my branch, the forked repo can be found on the following link: https://github.com/stlaz/sssd/tree/freeipa-timerules Please note that if the