[SSSD] Re: [PATCH] systemtap-based performance probes

2016-06-07 Thread Jakub Hrozek
On Mon, Jun 06, 2016 at 05:50:03PM +0200, Lukas Slebodnik wrote: > >diff --git a/src/external/systemtap.m4 b/src/external/systemtap.m4 > >new file mode 100644 > >index > >..d1caa2017f0730394339f0a439046df6b56cb2ba > >--- /dev/null > >+++

[SSSD] Re: [PATCHES] ipa: add support for certificate overrides

2016-06-07 Thread Jakub Hrozek
On Tue, Jun 07, 2016 at 02:55:40PM +0200, Sumit Bose wrote: > On Tue, Jun 07, 2016 at 01:56:10PM +0200, Jakub Hrozek wrote: > > On Tue, Jun 07, 2016 at 12:28:22PM +0200, Sumit Bose wrote: > > > sure, here you are. > > > > > > bye, > > > Sumit > > > > Hmm, are these the correct patches? > > > >

[SSSD] Re: [PATCH] ssh: skip invalid certificates

2016-06-07 Thread Sumit Bose
On Tue, Jun 07, 2016 at 03:08:36PM +0200, Jakub Hrozek wrote: > On Fri, Jun 03, 2016 at 08:17:01PM +0200, Sumit Bose wrote: > > Hi, > > > > currently the code which generates ssh key from the public keys in the > > user certificates fails if one certificate cannot be validated and > > terminates

[SSSD] Re: [PATCH] DEBUG: Add `debug` alias for debug_level

2016-06-07 Thread Jakub Hrozek
On Fri, Jun 03, 2016 at 09:34:46AM -0400, Stephen Gallagher wrote: > On 04/28/2016 09:30 AM, Lukas Slebodnik wrote: > > On (27/04/16 15:18), Stephen Gallagher wrote: > >> On 04/27/2016 05:57 AM, Pavel Březina wrote: > >>> On 04/26/2016 05:08 PM, Stephen Gallagher wrote: > Our users constantly

[SSSD] Re: [PATCHES] p11: add no_verification option

2016-06-07 Thread Jakub Hrozek
On Tue, Jun 07, 2016 at 03:11:49PM +0200, Sumit Bose wrote: > On Tue, Jun 07, 2016 at 02:42:56PM +0200, Jakub Hrozek wrote: > > On Mon, May 30, 2016 at 04:32:20PM +0200, Sumit Bose wrote: > > > > oops, yes I guess this would be a good idea. I'll send a new patch. > > > > > > > > > > new version

[SSSD] Re: [PATCH] ssh: skip invalid certificates

2016-06-07 Thread Jakub Hrozek
On Fri, Jun 03, 2016 at 08:17:01PM +0200, Sumit Bose wrote: > Hi, > > currently the code which generates ssh key from the public keys in the > user certificates fails if one certificate cannot be validated and > terminates the whole request. It is of course valid that the user entry > might

[SSSD] Re: [PATCHES] ipa: add support for certificate overrides

2016-06-07 Thread Sumit Bose
On Tue, Jun 07, 2016 at 01:56:10PM +0200, Jakub Hrozek wrote: > On Tue, Jun 07, 2016 at 12:28:22PM +0200, Sumit Bose wrote: > > sure, here you are. > > > > bye, > > Sumit > > Hmm, are these the correct patches? > > /home/remote/jhrozek/devel/sssd/src/db/sysdb_views.c: In function >

[SSSD] Re: [PATCHES] p11: add no_verification option

2016-06-07 Thread Jakub Hrozek
On Mon, May 30, 2016 at 04:32:20PM +0200, Sumit Bose wrote: > > oops, yes I guess this would be a good idea. I'll send a new patch. > > > > new version attached. > > bye, > Sumit One last question, do we want to add the ocsp_default_responder and ocsp_default_responder_signing_cert options to

[SSSD] Re: Session Recording control options

2016-06-07 Thread Nikolai Kondrashov
On 06/07/2016 02:45 PM, Pavel Březina wrote: On 06/07/2016 01:39 PM, Nikolai Kondrashov wrote: On 06/07/2016 02:29 PM, Nikolai Kondrashov wrote: On 06/07/2016 11:16 AM, Pavel Březina wrote: On 06/06/2016 05:24 PM, Nikolai Kondrashov wrote: On 06/06/2016 06:20 PM, Sumit Bose wrote: On Mon,

[SSSD] Re: [PATCHES] ipa: add support for certificate overrides

2016-06-07 Thread Jakub Hrozek
On Tue, Jun 07, 2016 at 12:28:22PM +0200, Sumit Bose wrote: > sure, here you are. > > bye, > Sumit Hmm, are these the correct patches? /home/remote/jhrozek/devel/sssd/src/db/sysdb_views.c: In function 'sysdb_search_override_by_cert': /home/remote/jhrozek/devel/sssd/src/db/sysdb_views.c:880:11:

[SSSD] Re: Session Recording control options

2016-06-07 Thread Pavel Březina
On 06/07/2016 01:39 PM, Nikolai Kondrashov wrote: On 06/07/2016 02:29 PM, Nikolai Kondrashov wrote: On 06/07/2016 11:16 AM, Pavel Březina wrote: On 06/06/2016 05:24 PM, Nikolai Kondrashov wrote: On 06/06/2016 06:20 PM, Sumit Bose wrote: On Mon, Jun 06, 2016 at 04:24:35PM +0300, Nikolai

[SSSD] Re: Session Recording control options

2016-06-07 Thread Nikolai Kondrashov
On 06/07/2016 02:29 PM, Nikolai Kondrashov wrote: On 06/07/2016 11:16 AM, Pavel Březina wrote: On 06/06/2016 05:24 PM, Nikolai Kondrashov wrote: On 06/06/2016 06:20 PM, Sumit Bose wrote: On Mon, Jun 06, 2016 at 04:24:35PM +0300, Nikolai Kondrashov wrote: Hi everyone, After a little

[SSSD] Re: [PATCH] PAM: add pam_sss option allow_missing_name

2016-06-07 Thread Jakub Hrozek
On Tue, Jun 07, 2016 at 12:18:17PM +0200, Jakub Hrozek wrote: > On Mon, Jun 06, 2016 at 10:56:52AM +0200, Sumit Bose wrote: > > On Fri, Jun 03, 2016 at 05:56:45PM +0200, Jakub Hrozek wrote: > > > On Wed, Jun 01, 2016 at 06:31:29PM +0200, Sumit Bose wrote: > > > > Hi, > > > > > > > > that attached

[SSSD] Re: Session Recording control options

2016-06-07 Thread Nikolai Kondrashov
On 06/07/2016 11:16 AM, Pavel Březina wrote: On 06/06/2016 05:24 PM, Nikolai Kondrashov wrote: On 06/06/2016 06:20 PM, Sumit Bose wrote: On Mon, Jun 06, 2016 at 04:24:35PM +0300, Nikolai Kondrashov wrote: Hi everyone, After a little discussion with Dmitri and Sumit we decided that we'll need

[SSSD] Re: [PATCHES] ipa: add support for certificate overrides

2016-06-07 Thread Sumit Bose
On Tue, Jun 07, 2016 at 12:04:12PM +0200, Jakub Hrozek wrote: > On Mon, Jun 06, 2016 at 11:06:06AM +0200, Sumit Bose wrote: > > On Fri, Jun 03, 2016 at 02:56:08PM +0200, Jakub Hrozek wrote: > > > On Fri, May 20, 2016 at 09:13:29PM +0200, Sumit Bose wrote: > > > > Hi, > > > > > > > > this set of

[SSSD] Re: [PATCH] PAM: add pam_sss option allow_missing_name

2016-06-07 Thread Jakub Hrozek
On Mon, Jun 06, 2016 at 10:56:52AM +0200, Sumit Bose wrote: > On Fri, Jun 03, 2016 at 05:56:45PM +0200, Jakub Hrozek wrote: > > On Wed, Jun 01, 2016 at 06:31:29PM +0200, Sumit Bose wrote: > > > Hi, > > > > > > that attached two patches would allow to use the Smartcard support in > > > gdm with

[SSSD] Re: [PATCH] AD_PROVIDER: Fix constant char *

2016-06-07 Thread Lukas Slebodnik
On (03/06/16 13:09), Sumit Bose wrote: >On Fri, Jun 03, 2016 at 09:38:43AM +0200, Sumit Bose wrote: >> On Fri, Jun 03, 2016 at 08:22:10AM +0200, Petr Cech wrote: >> > bump >> >> obvious ACK, just waiting for the CI to finish. > >There are 2 failures in

[SSSD] Re: [PATCHES] ipa: add support for certificate overrides

2016-06-07 Thread Jakub Hrozek
On Mon, Jun 06, 2016 at 11:06:06AM +0200, Sumit Bose wrote: > On Fri, Jun 03, 2016 at 02:56:08PM +0200, Jakub Hrozek wrote: > > On Fri, May 20, 2016 at 09:13:29PM +0200, Sumit Bose wrote: > > > Hi, > > > > > > this set of patches should resolve > > > https://fedorahosted.org/sssd/ticket/2897

[SSSD] Re: Design document - sssctl

2016-06-07 Thread Jakub Hrozek
On Tue, Jun 07, 2016 at 11:53:55AM +0200, Pavel Březina wrote: > On 06/07/2016 11:36 AM, Jakub Hrozek wrote: > > On Mon, Jun 06, 2016 at 02:09:57PM +0200, Pavel Březina wrote: > > > On 03/22/2016 12:42 PM, Pavel Reichl wrote: > > > > Hello, > > > > > > > > Pavel Březina and I have prepared the

[SSSD] Re: [PATCH] libwbclient: wbcSidsToUnixIds() don't fail on errors

2016-06-07 Thread Jakub Hrozek
On Mon, Jun 06, 2016 at 03:22:22PM +0300, Alexander Bokovoy wrote: > ACK. master: 52f1093ef3d7c44132ec10c57436865b2cbb19d7 sssd-1-13: 15ad5f603a5797c61a01f67365c2581c7bddcdfa ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org

[SSSD] Re: [PATCH] TOOLS: Prevent dereference of null pointer

2016-06-07 Thread Lukas Slebodnik
On (06/06/16 18:55), Lukas Slebodnik wrote: >On (15/03/16 12:31), Lukas Slebodnik wrote: >>On (15/03/16 11:26), Pavel Březina wrote: >>>On 03/07/2016 01:33 PM, Lukas Slebodnik wrote: On (07/03/16 12:12), Pavel Březina wrote: >On 03/07/2016 10:14 AM, Lukas Slebodnik wrote: >>ehlo,

[SSSD] Re: Design document - sssctl

2016-06-07 Thread Pavel Březina
On 06/07/2016 11:36 AM, Jakub Hrozek wrote: On Mon, Jun 06, 2016 at 02:09:57PM +0200, Pavel Březina wrote: On 03/22/2016 12:42 PM, Pavel Reichl wrote: Hello, Pavel Březina and I have prepared the 1st draft of design document. We mostly focused on summing up its future functionality and its

[SSSD] Re: Session Recording control options

2016-06-07 Thread Pavel Březina
On 06/06/2016 05:24 PM, Nikolai Kondrashov wrote: On 06/06/2016 06:20 PM, Sumit Bose wrote: On Mon, Jun 06, 2016 at 04:24:35PM +0300, Nikolai Kondrashov wrote: Hi everyone, After a little discussion with Dmitri and Sumit we decided that we'll need options for controlling session recording in

[SSSD] Re: Session Recording control options

2016-06-07 Thread Jakub Hrozek
On Mon, Jun 06, 2016 at 06:24:53PM +0300, Nikolai Kondrashov wrote: > On 06/06/2016 06:20 PM, Sumit Bose wrote: > > On Mon, Jun 06, 2016 at 04:24:35PM +0300, Nikolai Kondrashov wrote: > > > Hi everyone, > > > > > > After a little discussion with Dmitri and Sumit we decided that we'll need > > >