[SSSD] [sssd PR#190][opened] Few unit tests for recent contribution from community

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/190 Author: lslebodn Title: #190: Few unit tests for recent contribution from community Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/190/head:pr190 git checkout pr

[SSSD] [sssd PR#190][edited] Few unit tests for recent contributions from community

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/190 Author: lslebodn Title: #190: Few unit tests for recent contributions from community Action: edited Changed field: title Original value: """ Few unit tests for recent contribution from community """ ___ ss

[SSSD] [sssd PR#174][comment] One certificate for multiple users

2017-03-10 Thread sumit-bose
URL: https://github.com/SSSD/sssd/pull/174 Title: #174: One certificate for multiple users sumit-bose commented: """ > Do you think we should be fixing #3321 as part of this patch? If you agree I would prefer to fix this with the next series of patches with I will send for https://pagure.io/S

[SSSD] [sssd PR#186][comment] Subdomain config

2017-03-10 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/186 Title: #186: Subdomain config jhrozek commented: """ Thank you, setting the search bases work in my testing. As far as this first patchset, I only have the questions I asked in the review. But more importantly, what are all the options that will be se

[SSSD] [sssd PR#174][comment] One certificate for multiple users

2017-03-10 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/174 Title: #174: One certificate for multiple users jhrozek commented: """ On Fri, Mar 10, 2017 at 12:34:40AM -0800, sumit-bose wrote: > > Do you think we should be fixing #3321 as part of this patch? > > If you agree I would prefer to fix this with the n

[SSSD] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Sumit Bose
Hi, with the recent addition of PKINIT support there is now a second method available to Smartcard authentication besides local authentication. I was about to add some sssd.conf option which can control the fallback to local authentication if PKINIT fails. Currently there is only a fallback to lo

[SSSD] [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes lslebodn commented: """ NACK to removing non-privileged user from all services. Ticket https://pagure.io/SSSD/sssd/issue/3322 is only about sssd-nss.service We might use numeric values `/bin/chown 0:0` in sssd-n

[SSSD] [sssd PR#182][+Pushed] cache_req: use rctx as memory context during midpoint refresh

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/182 Title: #182: cache_req: use rctx as memory context during midpoint refresh Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists

[SSSD] [sssd PR#153][+Pushed] sss_cache: User/groups invalidation in domain cache

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/153 Title: #153: sss_cache: User/groups invalidation in domain cache Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahos

[SSSD] [sssd PR#127][+Pushed] ssh: use cache_req

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/127 Title: #127: ssh: use cache_req Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Alexander Bokovoy
On pe, 10 maalis 2017, Sumit Bose wrote: Hi, with the recent addition of PKINIT support there is now a second method available to Smartcard authentication besides local authentication. I was about to add some sssd.conf option which can control the fallback to local authentication if PKINIT fail

[SSSD] [sssd PR#190][comment] Few unit tests for recent contributions from community

2017-03-10 Thread pbrezina
URL: https://github.com/SSSD/sssd/pull/190 Title: #190: Few unit tests for recent contributions from community pbrezina commented: """ Ack. """ See the full comment at https://github.com/SSSD/sssd/pull/190#issuecomment-285628965 ___ sssd-devel mailin

[SSSD] [sssd PR#190][+Accepted] Few unit tests for recent contributions from community

2017-03-10 Thread pbrezina
URL: https://github.com/SSSD/sssd/pull/190 Title: #190: Few unit tests for recent contributions from community Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedo

[SSSD] Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Sumit Bose
On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: > On pe, 10 maalis 2017, Sumit Bose wrote: > > Hi, > > > > with the recent addition of PKINIT support there is now a second method > > available to Smartcard authentication besides local authentication. > > > > I was about to add

[SSSD] Re: [PATCH]: test ldap provider with TLS or SSL

2017-03-10 Thread Nikolai Kondrashov
Hi Dan, On 03/09/2017 12:33 PM, Dan Lavu wrote: Thanks for the review, the responses are inline. On Wed, Mar 8, 2017 at 1:59 AM, Nikolai Kondrashov mailto:nikolai.kondras...@redhat.com>> wrote: def _setup_config(self): """Setup the instance initial configuration.""

[SSSD] [sssd PR#186][comment] Subdomain config

2017-03-10 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/186 Title: #186: Subdomain config mzidek-rh commented: """ Hi, I respond to your comments in the review in this comment, so that you get notification :) About the condition with cdb and conf_path being NULL. You are right that this can not happen in the

[SSSD] [sssd PR#186][synchronized] Subdomain config

2017-03-10 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/186 Author: mzidek-rh Title: #186: Subdomain config Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/186/head:pr186 git checkout pr186 From f1ccf068ad7a12ca0e398bc66ab874bb6e4f3ef2

[SSSD] [sssd PR#186][comment] Subdomain config

2017-03-10 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/186 Title: #186: Subdomain config jhrozek commented: """ > On 10 Mar 2017, at 11:47, mzidek-rh wrote: > > Hi, I respond to your comments in the review in this comment, so that you get > notification :) > > About the condition with cdb and conf_path bei

[SSSD] [sssd PR#174][comment] One certificate for multiple users

2017-03-10 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/174 Title: #174: One certificate for multiple users jhrozek commented: """ > On 10 Mar 2017, at 10:52, Pavel Březina wrote: > > @pbrezina commented on this pull request. > > In src/responder/ifp/ifp_users.c >

[SSSD] Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Alexander Bokovoy
On pe, 10 maalis 2017, Sumit Bose wrote: On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: On pe, 10 maalis 2017, Sumit Bose wrote: > Hi, > > with the recent addition of PKINIT support there is now a second method > available to Smartcard authentication besides local authenticat

[SSSD] Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Sumit Bose
On Fri, Mar 10, 2017 at 01:39:27PM +0200, Alexander Bokovoy wrote: > On pe, 10 maalis 2017, Sumit Bose wrote: > > On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: > > > On pe, 10 maalis 2017, Sumit Bose wrote: > > > > Hi, > > > > > > > > with the recent addition of PKINIT support

[SSSD] [sssd PR#174][comment] One certificate for multiple users

2017-03-10 Thread sumit-bose
URL: https://github.com/SSSD/sssd/pull/174 Title: #174: One certificate for multiple users sumit-bose commented: """ If you agree I would prefer to change this later so I can test the changes carefully. """ See the full comment at https://github.com/SSSD/sssd/pull/174#issuecomment-285654010 _

[SSSD] Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Alexander Bokovoy
On pe, 10 maalis 2017, Sumit Bose wrote: On Fri, Mar 10, 2017 at 01:39:27PM +0200, Alexander Bokovoy wrote: On pe, 10 maalis 2017, Sumit Bose wrote: > On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: > > On pe, 10 maalis 2017, Sumit Bose wrote: > > > Hi, > > > > > > with the re

[SSSD] [sssd PR#191][opened] Few spec file fixes

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/191 Author: lslebodn Title: #191: Few spec file fixes Action: opened PR body: """ Mostly related to https://pagure.io/SSSD/sssd/issue/3327 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/191/head

[SSSD] [sssd PR#191][synchronized] Few spec file fixes

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/191 Author: lslebodn Title: #191: Few spec file fixes Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/191/head:pr191 git checkout pr191 From 781d491d0c65145e6553bcf40c931229de5f28

[SSSD] [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread sgallagher
URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes sgallagher commented: """ @lslebodn > @sgallagher The purpose of calling chown in ExecStartPre is to allow starting > responders as non-privileged from beginning. Systemd drops permissions before > exec. Ye

[SSSD] [sssd PR#174][comment] One certificate for multiple users

2017-03-10 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/174 Title: #174: One certificate for multiple users jhrozek commented: """ On Fri, Mar 10, 2017 at 04:11:29AM -0800, sumit-bose wrote: > If you agree I would prefer to change this later so I can test the changes > carefully. Sure, I also prefer this. I'll

[SSSD] [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes fidencio commented: """ @sgallah, @lslebodn On Fri, Mar 10, 2017 at 2:22 PM, Stephen Gallagher wrote: > @lslebodn > > @sgallagher The purpose of c

[SSSD] [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes fidencio commented: """ @sgallah, @lslebodn On Fri, Mar 10, 2017 at 2:22 PM, Stephen Gallagher wrote: > @lslebodn > > @sgallagher The purpose of c

[SSSD] [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes jhrozek commented: """ On Fri, Mar 10, 2017 at 05:50:58AM -0800, fidencio wrote: > @sgallah, @lslebodn > > On Fri, Mar 10, 2017 at 2:22 PM, Stephen Gallagher > wrote: > > > @lslebodn

[SSSD] [sssd PR#191][synchronized] Few spec file fixes

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/191 Author: lslebodn Title: #191: Few spec file fixes Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/191/head:pr191 git checkout pr191 From 781d491d0c65145e6553bcf40c931229de5f28

[SSSD] [sssd PR#174][+Accepted] One certificate for multiple users

2017-03-10 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/174 Title: #174: One certificate for multiple users Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] [sssd PR#166][comment] NSS: Fix invalidating memory cache for subdomain users

2017-03-10 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/166 Title: #166: NSS: Fix invalidating memory cache for subdomain users mzidek-rh commented: """ Works for me. Waiting for CI to finish. """ See the full comment at https://github.com/SSSD/sssd/pull/166#issuecomment-285712242 _

[SSSD] [sssd PR#166][+Accepted] NSS: Fix invalidating memory cache for subdomain users

2017-03-10 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/166 Title: #166: NSS: Fix invalidating memory cache for subdomain users Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedo

[SSSD] [sssd PR#166][comment] NSS: Fix invalidating memory cache for subdomain users

2017-03-10 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/166 Title: #166: NSS: Fix invalidating memory cache for subdomain users mzidek-rh commented: """ ACK. CI link: http://sssd-ci.duckdns.org/logs/job/64/39/summary.html """ See the full comment at https://github.com/SSSD/sssd/pull/166#issuecomment-285714087

[SSSD] Re: [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread Lukas Slebodnik
On (10/03/17 14:50), fidencio wrote: > URL: https://github.com/SSSD/sssd/pull/183 >Title: #183: More socket-activation fixes > >fidencio commented: >""" >@sgallah, @lslebodn > >On Fri, Mar 10, 2017 at 2:22 PM, Stephen Gallagher > wrote: > >> @lslebodn >> >> @sgallaghe

[SSSD] Re: [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread Lukas Slebodnik
On (10/03/17 17:50), Lukas Slebodnik wrote: >On (10/03/17 14:50), fidencio wrote: >> URL: https://github.com/SSSD/sssd/pull/183 >>Title: #183: More socket-activation fixes >> >>fidencio commented: >>""" >>@sgallah, @lslebodn >> >>On Fri, Mar 10, 2017 at 2:22 PM, Stephen Gallagher >> wrote: >> >>>

[SSSD] [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes lslebodn commented: """ On (10/03/17 05:50), fidencio wrote: >@sgallah, @lslebodn > >On Fri, Mar 10, 2017 at 2:22 PM, Stephen Gallagher > wrote: > >> @lslebodn >> >> @sgallagher

[SSSD] [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes lslebodn commented: """ On (10/03/17 05:57), Jakub Hrozek wrote: >On Fri, Mar 10, 2017 at 05:50:58AM -0800, fidencio wrote: >> @sgallah, @lslebodn >> >> On Fri, Mar 10, 2017 at 2:22 PM, Stephen Gallagher > > wr

[SSSD] [sssd PR#191][comment] Few spec file fixes

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/191 Title: #191: Few spec file fixes lslebodn commented: """ http://sssd-ci.duckdns.org/logs/job/64/40/summary.html """ See the full comment at https://github.com/SSSD/sssd/pull/191#issuecomment-285725610 ___ ss

[SSSD] [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes fidencio commented: """ On Fri, Mar 10, 2017 at 5:54 PM, lslebodn wrote: > On (10/03/17 05:50), fidencio wrote: > >@sgallah, @lslebodn > > > >On Fri, Mar 10, 2017 at 2:22 PM, Stephen Gallagher < > notificati..

[SSSD] [sssd PR#183][comment] More socket-activation fixes

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes lslebodn commented: """ On (10/03/17 09:45), fidencio wrote: >On Fri, Mar 10, 2017 at 5:54 PM, lslebodn wrote: >> On (10/03/17 05:50), fidencio wrote: >> >@sgallah, @lslebodn >> > >> >On Fri, Mar 10, 2017 at 2:

[SSSD] [sssd PR#166][comment] NSS: Fix invalidating memory cache for subdomain users

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/166 Title: #166: NSS: Fix invalidating memory cache for subdomain users lslebodn commented: """ On (10/03/17 08:24), mzidek-rh wrote: >ACK. >CI link: http://sssd-ci.duckdns.org/logs/job/64/39/summary.html > master: * 43d07601094f869745f2b43529b48e2b63fb07f

[SSSD] [sssd PR#166][+Pushed] NSS: Fix invalidating memory cache for subdomain users

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/166 Title: #166: NSS: Fix invalidating memory cache for subdomain users Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedora

[SSSD] [sssd PR#190][comment] Few unit tests for recent contributions from community

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/190 Title: #190: Few unit tests for recent contributions from community lslebodn commented: """ On (10/03/17 02:06), Pavel Březina wrote: >Ack. > master: * db37eca433a5530975422b985b024a0e6ddbdc17 * f8d34835b4b97cff751677e911f26eae6a6d7381 LS """ See th

[SSSD] [sssd PR#190][+Pushed] Few unit tests for recent contributions from community

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/190 Title: #190: Few unit tests for recent contributions from community Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedora

[SSSD] [sssd PR#190][closed] Few unit tests for recent contributions from community

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/190 Author: lslebodn Title: #190: Few unit tests for recent contributions from community Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/190/head:pr190 git checkout pr190 __

[SSSD] [sssd PR#174][+Pushed] One certificate for multiple users

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/174 Title: #174: One certificate for multiple users Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] [sssd PR#174][closed] One certificate for multiple users

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/174 Author: sumit-bose Title: #174: One certificate for multiple users Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/174/head:pr174 git checkout pr174

[SSSD] [sssd PR#174][comment] One certificate for multiple users

2017-03-10 Thread lslebodn
URL: https://github.com/SSSD/sssd/pull/174 Title: #174: One certificate for multiple users lslebodn commented: """ On (10/03/17 07:16), Jakub Hrozek wrote: >jhrozek approved this pull request. > master: * 3fd8ea55d59f29725ab32bdaf5b98ffaae7fbf9d * 7aadfa5454e436e4c36ede00434ff9687a6c48e2 * 16c9d