[SSSD] [sssd PR#578][opened] proxy: proxy_child hardening

2018-05-22 Thread amitkumar50
URL: https://github.com/SSSD/sssd/pull/578 Author: amitkumar50 Title: #578: proxy: proxy_child hardening Action: opened PR body: """ proxy_child will call chdir("/"), umask(022) and reset the environment with clearenv(). The --domain argument to be sanitized. Resolves: https://pagure.io/SSSD

[SSSD] [sssd PR#578][comment] proxy: proxy_child hardening

2018-05-22 Thread centos-ci
URL: https://github.com/SSSD/sssd/pull/578 Title: #578: proxy: proxy_child hardening centos-ci commented: """ Can one of the admins verify this patch? """ See the full comment at https://github.com/SSSD/sssd/pull/578#issuecomment-391241246 ___ sssd-d

[SSSD] [sssd PR#578][comment] proxy: proxy_child hardening

2018-05-22 Thread centos-ci
URL: https://github.com/SSSD/sssd/pull/578 Title: #578: proxy: proxy_child hardening centos-ci commented: """ Can one of the admins verify this patch? """ See the full comment at https://github.com/SSSD/sssd/pull/578#issuecomment-391241247 ___ sssd-d

[SSSD] [sssd PR#577][comment] ipa: Use fqname on selinux_child_setup

2018-05-22 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/577 Title: #577: ipa: Use fqname on selinux_child_setup fidencio commented: """ CI: http://vm-031.${abc}/logs/job/89/36/summary.html """ See the full comment at https://github.com/SSSD/sssd/pull/577#issuecomment-391008923 _

[SSSD] [sssd PR#577][comment] ipa: Use fqname on selinux_child_setup

2018-05-22 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/577 Title: #577: ipa: Use fqname on selinux_child_setup fidencio commented: """ With the patch: J:2496100 Without the patch: J:2495991 At least according to those tests no regression has been introduced. And, considering they're reliable, I've gotten e

[SSSD] [sssd PR#577][opened] ipa: Use fqname on selinux_child_setup

2018-05-22 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/577 Author: fidencio Title: #577: ipa: Use fqname on selinux_child_setup Action: opened PR body: """ Although there was a comment saying that pam_selinux needs the username in the same format getpwnam() would return it, it doesn't seem to be the case anym

[SSSD] Re: how to run intgcheck?

2018-05-22 Thread Pavel Březina
On 05/22/2018 11:35 AM, Chris Kowalczyk wrote: On 05/22/2018 10:56 AM, Jakub Hrozek wrote: On 22 May 2018, at 10:24, Chris Kowalczyk wrote: Hello All, I have been trying to run sssd intgcheck, but to not success. Could you help me with it? Generally, I've been performing the following steps

[SSSD] Re: how to run intgcheck?

2018-05-22 Thread Chris Kowalczyk
On 05/22/2018 10:56 AM, Jakub Hrozek wrote: On 22 May 2018, at 10:24, Chris Kowalczyk wrote: Hello All, I have been trying to run sssd intgcheck, but to not success. Could you help me with it? Generally, I've been performing the following steps: autoreconf -if ./configure --disable-cifs-idma

[SSSD] [sssd PR#576][+Accepted] MAN: Fix the title of the session recording man page

2018-05-22 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/576 Title: #576: MAN: Fix the title of the session recording man page Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedora

[SSSD] [sssd PR#576][comment] MAN: Fix the title of the session recording man page

2018-05-22 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/576 Title: #576: MAN: Fix the title of the session recording man page fidencio commented: """ Acked by Amit! I'm adding the Accepted label as per his Ack! """ See the full comment at https://github.com/SSSD/sssd/pull/576#issuecomment-390917244 ___

[SSSD] [sssd PR#574][comment] cache_req: Don't force a fqname for files provider output

2018-05-22 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/574 Title: #574: cache_req: Don't force a fqname for files provider output fidencio commented: """ I have updated the commit message based on the discussion I had with @pbrezina and @jhrozek. From the updated commit message: " As the most common scena

[SSSD] Re: how to run intgcheck?

2018-05-22 Thread Jakub Hrozek
> On 22 May 2018, at 10:24, Chris Kowalczyk wrote: > > Hello All, > > I have been trying to run sssd intgcheck, but to not success. Could you help > me with it? > Generally, I've been performing the following steps: > > autoreconf -if > ./configure --disable-cifs-idmap-plugin --without-samba

[SSSD] [sssd PR#574][synchronized] cache_req: Don't force a fqname for files provider output

2018-05-22 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/574 Author: fidencio Title: #574: cache_req: Don't force a fqname for files provider output Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/574/head:pr574 git checkout pr574 From

[SSSD] [sssd PR#576][opened] MAN: Fix the title of the session recording man page

2018-05-22 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/576 Author: jhrozek Title: #576: MAN: Fix the title of the session recording man page Action: opened PR body: """ s/sudo/session-recording/ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/576/hea

[SSSD] Re: What's the best way to debug SELinux issues on SSSD?

2018-05-22 Thread Jakub Hrozek
> On 21 May 2018, at 23:58, Fabiano Fidêncio wrote: > > On Mon, May 21, 2018 at 10:32 PM, Jakub Hrozek wrote: >> >> >>> On 21 May 2018, at 21:39, Fabiano Fidêncio wrote: >>> >>> People, >>> >>> I've been trying to debug a SELinux issue related to the domain >>> resolution order. >>> >>>

[SSSD] how to run intgcheck?

2018-05-22 Thread Chris Kowalczyk
Hello All, I have been trying to run sssd intgcheck, but to not success. Could you help me with it? Generally, I've been performing the following steps: autoreconf -if ./configure --disable-cifs-idmap-plugin --without-samba \ --without-nfsv4-idmapd-plugin --without-secrets \

[SSSD] [sssd PR#575][opened] DP/LDAP: Only increase the initgrTimestamp when the full initgroups DP request finishes

2018-05-22 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/575 Author: jhrozek Title: #575: DP/LDAP: Only increase the initgrTimestamp when the full initgroups DP request finishes Action: opened PR body: """ An initgroups request for an AD user consists of two parts - resolving the AD user, which internally call

[SSSD] Re: [RFC] sbus2 integration

2018-05-22 Thread Pavel Březina
On 05/21/2018 03:51 PM, Simo Sorce wrote: On Mon, 2018-05-21 at 11:52 +0200, Pavel Březina wrote: On 05/18/2018 09:50 PM, Simo Sorce wrote: On Fri, 2018-05-18 at 16:11 +0200, Sumit Bose wrote: On Fri, May 18, 2018 at 02:33:32PM +0200, Pavel Březina wrote: Hi folks, I sent a mail about new sbu