[SSSD] [sssd PR#141][comment] PAM: Use cache_req_user_by_name_*()

2017-01-31 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/141 Title: #141: PAM: Use cache_req_user_by_name_*() fidencio commented: """ pam_srv tests also need to be changed. """ See the full comment at https://github.com/SSSD/sssd/pull/141#issuecomment-276496494 ___ ss

[SSSD] [sssd PR#141][+Changes requested] PAM: Use cache_req_user_by_name_*()

2017-01-31 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/141 Title: #141: PAM: Use cache_req_user_by_name_*() Label: +Changes requested ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.o

[SSSD] [sssd PR#140][comment] gcc7 related fixes

2017-01-31 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/140 Title: #140: gcc7 related fixes fidencio commented: """ Okay, go for the patches! """ See the full comment at https://github.com/SSSD/sssd/pull/140#issuecomment-276422869 ___ sssd-devel mailing list -- sssd-

[SSSD] [sssd PR#140][+Accepted] gcc7 related fixes

2017-01-31 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/140 Title: #140: gcc7 related fixes Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: Identification with openLDAP and authorization with MIT KDC

2017-01-31 Thread Michaël Van de Borne
Ok, and I believe I should set "ldap_uri" to target the openLDAP server; and then "ipa_server" to target the IPA server, right? but indeed, you're right, I still would've to sync user. So not an improvement... Thank you, Sumit. cheers, m. Le 31-01-17 à 16:07, Sumit Bose a écrit : On Tue,

[SSSD] [sssd PR#140][-Changes requested] gcc7 related fixes

2017-01-31 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/140 Title: #140: gcc7 related fixes Label: -Changes requested ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: Identification with openLDAP and authorization with MIT KDC

2017-01-31 Thread Sumit Bose
On Tue, Jan 31, 2017 at 03:45:29PM +0100, Michaël Van de Borne wrote: > Hello list, > > I know this is a devel list, but I didn't find a user list. > > Here's my situation: > I'm installing Hadoop for a customer, and the Hadoop cluster is secured with > Kerberos. I used FreeIPA as a KDC. > The cu

[SSSD] [sssd PR#140][comment] gcc7 related fixes

2017-01-31 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/140 Title: #140: gcc7 related fixes lslebodn commented: """ >> >Let me try to re-phrase. Is there any other part of the code where we >> >can be bite by the very same issue? >> > >> >In a lot of places we don't initialize the output vars and may be the >> >

[SSSD] Identification with openLDAP and authorization with MIT KDC

2017-01-31 Thread Michaël Van de Borne
Hello list, I know this is a devel list, but I didn't find a user list. Here's my situation: I'm installing Hadoop for a customer, and the Hadoop cluster is secured with Kerberos. I used FreeIPA as a KDC. The customer uses openLDAP as a directory server. Fo now, our solution is to copy the wh

[SSSD] [sssd PR#127][+Changes requested] ssh: use cache_req

2017-01-31 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/127 Title: #127: ssh: use cache_req Label: +Changes requested ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] [sssd PR#127][comment] ssh: use cache_req

2017-01-31 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/127 Title: #127: ssh: use cache_req jhrozek commented: """ There is a bug when looking up keys for a user from a trusted domain: ``` ==3945== Invalid read of size 8 ==3945==at 0x4100FE: sss_dp_callback_destructor (responder_dp.c:61) ==3945==by 0x901

[SSSD] [sssd PR#140][comment] gcc7 related fixes

2017-01-31 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/140 Title: #140: gcc7 related fixes fidencio commented: """ On Tue, Jan 31, 2017 at 2:25 PM, lslebodn wrote: > On (31/01/17 04:06), fidencio wrote: > >On Tue, Jan 31, 2017 at 10:29 AM, lslebodn > wrote: > >> > >> On (30/01/17 23:52), fidencio wrote: > >>

[SSSD] Re: [RFC] Discussion about enabling socket-activate services to refresh configuration

2017-01-31 Thread Lukas Slebodnik
On (31/01/17 09:57), Jakub Hrozek wrote: >> For the scneario where the monitor is still around Simo suggested to: >> - sssd --genconf may be one way to regenerate the confdb (but in the >> end we won't do that) >> - SSSD will log that the admin must restart SSSD service in order to >> have the conf

[SSSD] [sssd PR#140][comment] gcc7 related fixes

2017-01-31 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/140 Title: #140: gcc7 related fixes lslebodn commented: """ On (31/01/17 04:06), fidencio wrote: >On Tue, Jan 31, 2017 at 10:29 AM, lslebodn wrote: >> >> On (30/01/17 23:52), fidencio wrote: >> >fidencio requested changes on this pull request. >> > >> >Nei

[SSSD] [sssd PR#141][opened] PAM: Use cache_req_user_by_name_*()

2017-01-31 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/141 Author: fidencio Title: #141: PAM: Use cache_req_user_by_name_*() Action: opened PR body: """ PAM responder has been already using a lot from cache_req and one of the missing parts (most likely the only one?) was that pam_check_user_search() has been

[SSSD] [sssd PR#140][comment] gcc7 related fixes

2017-01-31 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/140 Title: #140: gcc7 related fixes fidencio commented: """ On Tue, Jan 31, 2017 at 10:29 AM, lslebodn wrote: > > On (30/01/17 23:52), fidencio wrote: > >fidencio requested changes on this pull request. > > > >Neither the short log or the log are consisten

[SSSD] [sssd PR#140][comment] gcc7 related fixes

2017-01-31 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/140 Title: #140: gcc7 related fixes lslebodn commented: """ On (30/01/17 23:52), fidencio wrote: >fidencio requested changes on this pull request. > >Neither the short log or the log are consistent between the patches. >Please, let's try to follow the git-c

[SSSD] Re: [RFC] Discussion about enabling socket-activate services to refresh configuration

2017-01-31 Thread Jakub Hrozek
Thank you for writing up and sending the notes to the list so that everyone can follow! On Mon, Jan 30, 2017 at 03:31:32PM +0100, Fabiano Fidêncio wrote: > Last Thursday we had a face to face discussion about how > socket-activate services could refresh the confdb before starting. I'm a bit confu

[SSSD] [sssd PR#139][comment] Initial revision of sssd pytest framework

2017-01-31 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/139 Title: #139: Initial revision of sssd pytest framework fidencio commented: """ Looking at the patches I see this can be a completely new library instead of being part of SSSD. Knowing this it does make sense to have it as a submodule or even a complete