[SSSD] Re: fleet commander integration

2019-02-18 Thread Fabiano Fidêncio
On Mon, Feb 18, 2019 at 10:13 AM Levin Stanislav wrote: > > > > 18.02.2019 11:11, Fabiano Fidêncio пишет: > > Levin, > > > > On Tue, Feb 12, 2019 at 8:21 AM Levin Stanislav wrote: > >> Thank you All for the kind support and explanation! > >

[SSSD] Re: fleet commander integration

2019-02-18 Thread Fabiano Fidêncio
; > The only thing I see here is the domain directory it is not needed to be > owned by user/user group, only the user directories need to be owned by the > user (and it is not really needed because > org.freedesktop.FleetCommanderClient is run as root, but it is better to > leave t

[SSSD] Re: fleet commander integration

2019-02-11 Thread Fabiano Fidêncio
On Fri, Feb 8, 2019 at 8:30 AM Alexander Bokovoy wrote: > > On to, 07 helmi 2019, Jakub Hrozek wrote: > >On Thu, Feb 07, 2019 at 05:51:06PM +0300, Levin Stanislav wrote: > >> Hello, > >> > >> I want to ask you about design of fleet commander integration, which I > >> found on > >>

[SSSD] Re: Announcing SSSD 1.16.3

2018-08-12 Thread Fabiano Fidêncio
On Sun, Aug 12, 2018 at 10:15 PM, Fabiano Fidêncio wrote: > > > On Sun, Aug 12, 2018, 15:57 Jakub Hrozek wrote: >> >> SSSD 1.16.3 >> === >> >> The SSSD team is proud to announce the release of version 1.16.3 of the >> System Security Service

[SSSD] Re: Announcing SSSD 1.16.3

2018-08-12 Thread Fabiano Fidêncio
information > regarding priority of lookup of principal in keytab not in man page > * `3291 <https://pagure.io/SSSD/sssd/issue/3291>`_ - RFE: sssd in cross > realm trust configuration should be use AD KDC from a list or site defined > in the config file > > Detailed Changelog &

[SSSD] Re: all tests fail in intgcheck

2018-06-11 Thread Fabiano Fidêncio
Chris, On Mon, Jun 11, 2018 at 1:10 PM, Chris Kowalczyk wrote: > Hello, > > Do you have any idea what could be wrong with my environment? > Please, join #sssd on freenode. I have an opensuse system here, I'll give it a try and get back to you. > Sorry for bothering, but this blocks my PR ..

[SSSD] Re: RFC: 1.16.2 release notes

2018-06-08 Thread Fabiano Fidêncio
Jakub, On Fri, Jun 8, 2018 at 11:02 AM, Jakub Hrozek wrote: > Hi, > > below are the release notes for 1.16.2. Please comment :-) > > SSSD 1.16.2 > === > > Highlights > -- > > New Features > > * The smart card authentication, or in more general certificate >

[SSSD] Re: What's the best way to debug SELinux issues on SSSD?

2018-05-21 Thread Fabiano Fidêncio
On Mon, May 21, 2018 at 10:32 PM, Jakub Hrozek <jhro...@redhat.com> wrote: > > >> On 21 May 2018, at 21:39, Fabiano Fidêncio <fiden...@redhat.com> wrote: >> >> People, >> >> I've been trying to debug a SELinux issue related to the domain

[SSSD] What's the best way to debug SELinux issues on SSSD?

2018-05-21 Thread Fabiano Fidêncio
least, get some directions? Thanks in advance, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.or

[SSSD] Re: [RFC] sbus2 integration

2018-05-21 Thread Fabiano Fidêncio
On Fri, May 18, 2018 at 9:50 PM, Simo Sorce wrote: > On Fri, 2018-05-18 at 16:11 +0200, Sumit Bose wrote: >> On Fri, May 18, 2018 at 02:33:32PM +0200, Pavel Březina wrote: >> > Hi folks, >> > I sent a mail about new sbus implementation (I'll refer to it as sbus2) >> > [1]. > >

[SSSD] Re: Shall we revert test_resp_idle_timeout_shutdown_slow()?

2018-05-04 Thread Fabiano Fidêncio
On Fri, May 4, 2018 at 10:20 AM, Sumit Bose <sb...@redhat.com> wrote: > On Fri, May 04, 2018 at 09:57:51AM +0200, Fabiano Fidêncio wrote: >> This test was introduced in >> https://github.com/SSSD/sssd/commit/ac9c3ad8228000140d80f91d4c5492d89d6e79f6 >> and its fail

[SSSD] Shall we revert test_resp_idle_timeout_shutdown_slow()?

2018-05-04 Thread Fabiano Fidêncio
. Any objections? Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: Github labels: Suggestion

2018-03-12 Thread Fabiano Fidêncio
On Thu, Mar 8, 2018 at 12:46 PM, Jakub Hrozek <jhro...@redhat.com> wrote: > > >> On 8 Mar 2018, at 12:34, Pavel Březina <pbrez...@redhat.com> wrote: >> >> On 03/08/2018 12:22 PM, Jakub Hrozek wrote: >>>> On 8 Mar 2018, at 12:13, Fabiano Fidêncio <

[SSSD] Re: Github labels: Suggestion

2018-03-12 Thread Fabiano Fidêncio
On Thu, Mar 8, 2018 at 12:44 PM, Jakub Hrozek <jhro...@redhat.com> wrote: > > >> On 8 Mar 2018, at 12:30, Fabiano Fidêncio <fiden...@redhat.com> wrote: >> >> On Thu, Mar 8, 2018 at 12:22 PM, Jakub Hrozek <jhro...@redhat.com> wrote: >>> >&g

[SSSD] Re: Github labels: Suggestion

2018-03-08 Thread Fabiano Fidêncio
On Thu, Mar 8, 2018 at 12:22 PM, Jakub Hrozek <jhro...@redhat.com> wrote: > > >> On 8 Mar 2018, at 12:13, Fabiano Fidêncio <fiden...@redhat.com> wrote: >> >> On Thu, Mar 8, 2018 at 12:00 PM, Jakub Hrozek <jhro...@redhat.com> wrote: >>> >&g

[SSSD] Re: Github labels: Suggestion

2018-03-08 Thread Fabiano Fidêncio
On Thu, Mar 8, 2018 at 12:00 PM, Jakub Hrozek <jhro...@redhat.com> wrote: > > >> On 8 Mar 2018, at 10:33, Fabiano Fidêncio <fiden...@redhat.com> wrote: >> >> People, >> >> I've noticed that I'm getting a little bit lost with github and the >>

[SSSD] Github labels: Suggestion

2018-03-08 Thread Fabiano Fidêncio
een new PRs and PRs which have been through a review already ... Does the suggestion make sense? In case we have an agreement about this topic, may I re-tag our PRs and start using those new tags from new PRs? Best Regards, -- Fabiano Fidêncio ___ sssd-de

[SSSD] Re: RFC: 1.16.1 release notes

2018-03-07 Thread Fabiano Fidêncio
gt; > * A new option ``--logger`` was added to the ``sssd(8)`` binary. This option >obsoletes old options such as ``--debug-to-files``, although the old > options >are kept for backwards compatibility. > > Documentation Changes > - > There are no no

[SSSD] Re: Fleet Commander: design changes due to the drop of DAC_OVERRIDE capability

2018-02-01 Thread Fabiano Fidêncio
On Thu, Feb 1, 2018 at 11:25 AM, Sumit Bose <sb...@redhat.com> wrote: > On Wed, Jan 31, 2018 at 10:01:15AM -0500, Simo Sorce wrote: > > On Wed, 2018-01-31 at 14:55 +0100, Fabiano Fidêncio wrote: > > > Sumit, > > > > > > On Fri, Jan 26, 2018 at 9:

[SSSD] Re: Fleet Commander: design changes due to the drop of DAC_OVERRIDE capability

2018-01-31 Thread Fabiano Fidêncio
Sumit, On Fri, Jan 26, 2018 at 9:01 PM, Sumit Bose <sb...@redhat.com> wrote: > On Fri, Jan 26, 2018 at 03:06:31PM +0100, Fabiano Fidêncio wrote: > > On Mon, Jan 22, 2018 at 3:20 PM, Simo Sorce <s...@redhat.com> wrote: > > > > > On Mon, 2018-01-22 at

[SSSD] Re: Fleet Commander: design changes due to the drop of DAC_OVERRIDE capability

2018-01-26 Thread Fabiano Fidêncio
On Mon, Jan 22, 2018 at 3:20 PM, Simo Sorce <s...@redhat.com> wrote: > On Mon, 2018-01-22 at 15:10 +0100, Fabiano Fidêncio wrote: > > People, > > > > Let's start with the context of this email: > > https://bugzilla.redhat.com/show_bug.cgi?id=1536854 > &

[SSSD] Fleet Commander: design changes due to the drop of DAC_OVERRIDE capability

2018-01-22 Thread Fabiano Fidêncio
o only fchown()/fchmod() the files/dirs *after* all the operations we do are over. Is there any other suggestion? Whatever comes out of this discussion will be used to update the feature's design page accordingly. Best Regards, -- Fabiano Fidêncio ___ sssd

[SSSD] Re: Every PR should come with a test.

2018-01-10 Thread Fabiano Fidêncio
On Wed, Jan 10, 2018 at 2:28 PM, Jakub Hrozek <jhro...@redhat.com> wrote: > On Wed, Jan 10, 2018 at 10:52:56AM +0100, Sumit Bose wrote: > > On Wed, Jan 10, 2018 at 10:04:49AM +0100, Fabiano Fidêncio wrote: > > > People, > > > > > > Ideally every PR

[SSSD] Re: SSSD Virtual Test Suite

2017-11-14 Thread Fabiano Fidêncio
On Tue, Nov 14, 2017 at 11:17 AM, Pavel Březina <pbrez...@redhat.com> wrote: > On 11/13/2017 05:43 PM, Fabiano Fidêncio wrote: >> >> On Mon, Nov 13, 2017 at 11:16 AM, Pavel Březina <pbrez...@redhat.com> >> wrote: >>> >>> Hello, >>> >&g

[SSSD] Re: SSSD Virtual Test Suite

2017-11-13 Thread Fabiano Fidêncio
On Mon, Nov 13, 2017 at 11:16 AM, Pavel Březina wrote: > Hello, > > It took me a lot longer than I expected but here it is at last. This is my > set of scripts that use vagrant and Ansible to automatically provision > virtual environment that I use to develop and test SSSD. >

[SSSD] Re: Which tickets do we need to close before the release of the next upstream version?

2017-10-16 Thread Fabiano Fidêncio
On Thu, Oct 12, 2017 at 4:01 PM, Fabiano Fidêncio <fiden...@redhat.com> wrote: > On Wed, Oct 11, 2017 at 5:29 PM, Jakub Hrozek <jhro...@redhat.com> wrote: >> Hi, >> >> Because of downstream deadline, we need to release the next SSSD tarball >> by th

[SSSD] PRs priorities for this release

2017-09-21 Thread Fabiano Fidêncio
se that is already opened? Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: 1.13.5 release?

2017-09-19 Thread Fabiano Fidêncio
On Tue, Sep 19, 2017 at 8:50 PM, Jakub Hrozek wrote: > Hi, > > Timo mentioned last week on IRC that he would appreciate if we released > 1.13.5. > > Does anyone have some patches to merge in sssd-1-13 or can we release > the tarball? > > I know there are some pending PRs with

[SSSD] CI: CentOS7 issue

2017-09-13 Thread Fabiano Fidêncio
e specfile The full log can be found at: https://ci.centos.org/job/sssd-CentOS7/1025/console Is there some easy way to connect to the machine where it happened and debug it from there? Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list --

[SSSD] Re: Can someone review PR #225 (secrets quotas) ?

2017-08-30 Thread Fabiano Fidêncio
On Tue, Aug 29, 2017 at 11:17 AM, Jakub Hrozek wrote: > Hi, > > I've got a PR opened for some time that I would really like to merge for > the next version: > https://github.com/SSSD/sssd/pull/225 - SECRETS: Apply separate > quotas for cn=secrets and cn=kcm > > It's

[SSSD] Re: Shall we freeze the development till #3463 is solved?

2017-08-10 Thread Fabiano Fidêncio
On Thu, Aug 10, 2017 at 10:15 AM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (09/08/17 14:43), Jakub Hrozek wrote: >> >>> On 8 Aug 2017, at 16:51, Fabiano Fidêncio <fiden...@redhat.com> wrote: >>> >>> People, >>> >>

[SSSD] Shall we freeze the development till #3463 is solved?

2017-08-08 Thread Fabiano Fidêncio
lready an open issue for this case: https://pagure.io/SSSD/sssd/issue/3463 in order to track the issue. So, as the subject says, shall we officially stop pushing patches till we have this issue solved? Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailin

[SSSD] Re: [sssd PR#327][comment] RESPONDERS: Fix terminating idle connections

2017-07-19 Thread Fabiano Fidêncio
On Wed, Jul 19, 2017 at 6:56 PM, lslebodn wrote: > URL: https://github.com/SSSD/sssd/pull/327 > Title: #327: RESPONDERS: Fix terminating idle connections > > lslebodn commented: > """ > On (19/07/17 09:28), fidencio wrote: >>fidencio commented on this

[SSSD] Re: RFC: 1.15.2 release notes

2017-03-15 Thread Fabiano Fidêncio
On Wed, Mar 15, 2017 at 4:17 PM, Jakub Hrozek wrote: > Hi, > > I prepared release notes for today's release. They are written in > anticipation that PR#186 with the subdomain config will be merged. > > The RST I pushed to the sssd/docs repo is below: > > SSSD 1.15.2 >

[SSSD] Re: RFC: Migrating SSSD documentation to pagure.io

2017-03-03 Thread Fabiano Fidêncio
to what we had in Fedora host sounds better. But here I'm not sure if it was really better or if it is just something different that we will get used to. Having the docs in a separate git repo makes me think that at least one review will be done for any change in the repo and it's, at least for

[SSSD] Re: Avoid running two instances of the same service (#3300)

2017-02-08 Thread Fabiano Fidêncio
On Wed, Feb 8, 2017 at 1:14 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (08/02/17 12:33), Fabiano Fidêncio wrote: >>On Wed, Feb 8, 2017 at 12:29 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>> On (08/02/17 12:24), Fabiano Fidêncio wrote: >>>

[SSSD] Re: Avoid running two instances of the same service (#3300)

2017-02-08 Thread Fabiano Fidêncio
On Wed, Feb 8, 2017 at 12:29 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (08/02/17 12:24), Fabiano Fidêncio wrote: >>On Wed, Feb 8, 2017 at 12:10 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>> On (05/02/17 23:24), Fabiano Fidêncio wrote: >>>

[SSSD] Re: Avoid running two instances of the same service (#3300)

2017-02-08 Thread Fabiano Fidêncio
On Wed, Feb 8, 2017 at 12:29 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (08/02/17 12:24), Fabiano Fidêncio wrote: >>On Wed, Feb 8, 2017 at 12:10 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>> On (05/02/17 23:24), Fabiano Fidêncio wrote: >>>

[SSSD] Re: Avoid running two instances of the same service (#3300)

2017-02-08 Thread Fabiano Fidêncio
On Wed, Feb 8, 2017 at 12:10 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (05/02/17 23:24), Fabiano Fidêncio wrote: >>I've spent some amount of time trying to properly deal with this issue >>and I really need the opinion/suggestion of more experienced >>

[SSSD] Re: Avoid running two instances of the same service (#3300)

2017-02-07 Thread Fabiano Fidêncio
On Tue, Feb 7, 2017 at 12:58 PM, Pavel Březina <pbrez...@redhat.com> wrote: > On 02/07/2017 12:31 PM, Fabiano Fidêncio wrote: >> >> On Tue, Feb 7, 2017 at 12:20 PM, Pavel Březina <pbrez...@redhat.com> >> wrote: >>> >>> On 02/05/2017 11:24 PM, Fab

[SSSD] Re: Avoid running two instances of the same service (#3300)

2017-02-07 Thread Fabiano Fidêncio
On Tue, Feb 7, 2017 at 12:20 PM, Pavel Březina <pbrez...@redhat.com> wrote: > On 02/05/2017 11:24 PM, Fabiano Fidêncio wrote: >> >> I've spent some amount of time trying to properly deal with this issue >> and I really need the opinion/suggestion of more experienced &

[SSSD] Re: Avoid running two instances of the same service (#3300)

2017-02-06 Thread Fabiano Fidêncio
On Sun, Feb 5, 2017 at 11:24 PM, Fabiano Fidêncio <fiden...@redhat.com> wrote: > I've spent some amount of time trying to properly deal with this issue > and I really need the opinion/suggestion of more experienced > developers. > > Basically, as explained in #3300 this situat

[SSSD] Avoid running two instances of the same service (#3300)

2017-02-05 Thread Fabiano Fidêncio
to not be started manually as systemd already provides "RefuseManualStart=" option. I'm really looking forward to hearing your opinion on what would be the best approach to take, new ideas and so on. Best Regards, -- Fabiano Fidêncio ___ sssd-devel ma

[SSSD] Using cache_req code for PAM responder

2017-02-01 Thread Fabiano Fidêncio
thinks we want to keep the pam_initgr_check_timeout() while looping the domains in the cache_req code. So, as I'm not that much familiar with none of those two pieces of code ... I'd like to know what's Pavel Březina opinion on these ideas. Best Regards, -- Fabiano Fidêncio

[SSSD] [RFC] Discussion about enabling socket-activate services to refresh configuration

2017-01-30 Thread Fabiano Fidêncio
ng, please, politely provide some feedback on what I've missed, on what you'd like to expand and so on. Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sss

[SSSD] Re: $ reconfig && chmake failed

2017-01-18 Thread Fabiano Fidêncio
atus: 1) > > > > > -- > Thanks > Amit Kumar > There are three ways to get something done: > (1) Do it yourself. > (2) Hire someone to do it for you. > (3) Forbid your kids to do it. > > > _______ > sssd-devel m

[SSSD] Re: Group renaming issue when "id_provider = ldap" is set.

2017-01-10 Thread Fabiano Fidêncio
On Mon, Jan 9, 2017 at 11:51 AM, Jakub Hrozek <jhro...@redhat.com> wrote: > On Sun, Jan 08, 2017 at 09:58:22PM +0100, Fabiano Fidêncio wrote: >> I've been working on rhbz#1401241 >> (https://bugzilla.redhat.com/show_bug.cgi?id=1401241) and I'd like to >> clarify

[SSSD] Re: [sssd PR#107][comment] WATCHDOG: Avoid non async-signal-safe from the signal_handler

2017-01-10 Thread Fabiano Fidêncio
On Tue, Jan 10, 2017 at 10:13 AM, lslebodn wrote: > URL: https://github.com/SSSD/sssd/pull/107 > Title: #107: WATCHDOG: Avoid non async-signal-safe from the signal_handler > > lslebodn commented: > """ > Are there any objection to the proposed change?

[SSSD] Re: RFC: Socket-activation, some changes in the architecture.

2017-01-09 Thread Fabiano Fidêncio
On Mon, Jan 9, 2017 at 1:35 PM, Jakub Hrozek <jhro...@redhat.com> wrote: > On Mon, Jan 09, 2017 at 01:25:48PM +0100, Pavel Březina wrote: >> On 01/08/2017 09:44 PM, Fabiano Fidêncio wrote: >> > People, >> > >> > Recently I've faced some issues when

[SSSD] Re: RFC: Socket-activation, some changes in the architecture.

2017-01-09 Thread Fabiano Fidêncio
On Mon, Jan 9, 2017 at 11:23 AM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (08/01/17 21:44), Fabiano Fidêncio wrote: >>diff --git a/src/util/server.c b/src/util/server.c >>index c9a2726..d9da803 100644 >>--- a/src/util/server.c >>+++ b/src/util/server.c &

[SSSD] Re: RFC: Socket-activation, some changes in the architecture.

2017-01-09 Thread Fabiano Fidêncio
On Mon, Jan 9, 2017 at 10:27 AM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (08/01/17 21:44), Fabiano Fidêncio wrote: >>People, >> >>Recently I've faced some issues when testing the socket-activation >>working running as sssd-user, which will force me to

[SSSD] Group renaming issue when "id_provider = ldap" is set.

2017-01-08 Thread Fabiano Fidêncio
hall we update the entry that contains its name (and then all memberOf that contains the old name?)? - In case not, following what "id_provider = ad" does would be a good fix for the issue? Looking forward to hearing your opinion! Best Regards, -- Fabiano Fidêncio ___

[SSSD] RFC: Socket-activation, some changes in the architecture.

2017-01-08 Thread Fabiano Fidêncio
I get rid of the "--uid and --gid" options in order to only use the new added "--sssd-user" one? - Shall I add a new "--socket-activated" option for starting the responders or just abuse the "--sssd-user" one? Looking forward to hearing your opinions! Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: Design discussion: Fleet Commander integration

2016-12-22 Thread Fabiano Fidêncio
d upstream and then discuss whether it makes sense or not (and here is a question for Martin Košek) to have it for 7.4, but that's something that shouldn't be discussed here (on this ML) yet. [snip] Best Regards, -- Fabiano Fidêncio ___ sssd-devel

[SSSD] Re: Design document - Socket-activatable responders

2016-12-01 Thread Fabiano Fidêncio
On Thu, Dec 1, 2016 at 3:46 PM, Simo Sorce <s...@redhat.com> wrote: > On Thu, 2016-12-01 at 15:22 +0100, Pavel Březina wrote: >> On 12/01/2016 02:56 PM, Simo Sorce wrote: >> > On Thu, 2016-12-01 at 14:44 +0100, Pavel Březina wrote: >> >> On 11/24/2

[SSSD] Re: Design document - Socket-activatable responders

2016-12-01 Thread Fabiano Fidêncio
On Thu, Dec 1, 2016 at 2:44 PM, Pavel Březina <pbrez...@redhat.com> wrote: > On 11/24/2016 02:33 PM, Fabiano Fidêncio wrote: >> >> The design page is done [0] and it's based on this discussion [1] we >> had on this very same mailing list. A pull-request with the >>

[SSSD] Re: Design document - Socket-activatable responders

2016-11-29 Thread Fabiano Fidêncio
On Tue, Nov 29, 2016 at 10:24 AM, Fabiano Fidêncio <fiden...@redhat.com> wrote: > On Tue, Nov 29, 2016 at 10:01 AM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >> On (28/11/16 11:27), Jakub Hrozek wrote: >>>On Mon, Nov 28, 2016 at 10:57:44AM +0100, Pavel Březina wrot

[SSSD] Re: Design document - Socket-activatable responders

2016-11-29 Thread Fabiano Fidêncio
On Tue, Nov 29, 2016 at 11:28 AM, Sumit Bose <sb...@redhat.com> wrote: > On Thu, Nov 24, 2016 at 02:33:04PM +0100, Fabiano Fidêncio wrote: >> The design page is done [0] and it's based on this discussion [1] we >> had on this very same mailing list. A pull-request with

[SSSD] Re: Design document - Socket-activatable responders

2016-11-29 Thread Fabiano Fidêncio
g. > ExecStartPre=/usr/bin/chown sssd:sssd /var/log/sssd/sssd_nss.log > ExecStart=/usr/libexec/sssd/sssd_nss --debug-to-files > User=sssd > Group=sssd > PermissionsStartOnly=true > > @see the explanation of PermissionsStartOnly in man 5 systemd.service I like the suggestion. But I also would like to ask which are the responders that have to executed as root? Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: Design document - Socket-activatable responders

2016-11-24 Thread Fabiano Fidêncio
On Thu, Nov 24, 2016 at 2:33 PM, Fabiano Fidêncio <fiden...@redhat.com> wrote: > The design page is done [0] and it's based on this discussion [1] we > had on this very same mailing list. A pull-request with the > implementation is already opened [2]. > > [0]: https://fedor

[SSSD] Design document - Socket-activatable responders

2016-11-24 Thread Fabiano Fidêncio
istration code. Is worth to mention that disabling the systemd's services/sockets will prevent the responders' services to be started. === Authors === Fabiano Fidêncio <fiden...@redhat.com> Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list

[SSSD] Re: [RFC] Socket-activate responders

2016-11-16 Thread Fabiano Fidêncio
On Wed, Nov 16, 2016 at 11:20 AM, Jakub Hrozek <jhro...@redhat.com> wrote: > On Wed, Nov 16, 2016 at 10:03:36AM +0100, Fabiano Fidêncio wrote: >> People, >> >> I've spent some time looking at the code and trying to understand what >> are the needed changes in o

[SSSD] [RFC] Socket-activate responders

2016-11-16 Thread Fabiano Fidêncio
en they're listed in the sssd.conf. I'm not comfortable on giving any estimation about when we will have it done, mainly because I'd like to hear the feedback about this from others in the team. Looking forward for your reading back from you! Best Regards, -- Fabiano Fidêncio __

[SSSD] Re: Design discussion: Fleet Commander integration

2016-11-08 Thread Fabiano Fidêncio
ood idea. I changed the wiki page: > > https://fedorahosted.org/sssd/wiki/DesignDocs/FleetCommanderIntegration?action=diff=3_version=1 Since I started working on this a few changes have been done in the Design (and I've talked to Jakub on IRC about those all the time). In case anyone is interested, here are the changes: https://fedorahosted.org/sssd/wiki/DesignDocs/FleetCommanderIntegration?action=diff=7_version=3 Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: Should we use VMs or containers for (some) tests?

2016-11-01 Thread Fabiano Fidêncio
On Tue, Nov 1, 2016 at 10:36 AM, Jakub Hrozek wrote: > On Tue, Nov 01, 2016 at 10:31:20AM +0200, Nikolai Kondrashov wrote: >> Hi Jakub, >> >> On 10/27/2016 05:20 PM, Jakub Hrozek wrote: >> > I'm currently working on integration tests for the 'files' provider and >> > during

[SSSD] Re: Help : Tickets suitable for newcomers

2016-10-26 Thread Fabiano Fidêncio
ou can use.. And here is a link explaining the best way to contribute to SSSD, which includes the bash helper mentioned by Jakub: https://fedorahosted.org/sssd/wiki/Contribute If you find something that's inconsistent there, feel free to propose a change and we will happily apply. Best Regards, --

[SSSD] Re: Help : Tickets suitable for newcomers

2016-10-26 Thread Fabiano Fidêncio
fix=id=summary=type=status=priority=milestone=component=priority=34 Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: [sssd PR#33][synchronized] SECRETS: Some small misc fixes + fixing #3168

2016-10-17 Thread Fabiano Fidêncio
Lukaš, On Mon, Oct 17, 2016 at 4:59 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (17/10/16 14:35), Fabiano Fidêncio wrote: >>On Mon, Oct 17, 2016 at 11:46 AM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>> On (30/09/16 16:55), fidencio wrote: >>&g

[SSSD] Re: [sssd PR#33][synchronized] SECRETS: Some small misc fixes + fixing #3168

2016-10-17 Thread Fabiano Fidêncio
t; >>The regular expression used is quite specific for the two cases we >>support: >>- [secrets] >>- [secrets/users/$uid] >> >>It could be done a bit more generic, but the way it's right now it can >>easily catch errors like: [secrets/usrs/$uid] or [secrets/]. >

[SSSD] Re: Monotonic clock for timed events

2016-10-10 Thread Fabiano Fidêncio
he > wait time to login is noticeable. How feasible would it be to use a > monotonic clock for this kind of timed events? Are you running git master? This issue is supposed to be already solved by https://github.com/SSSD/sssd/commit/b8ceaeb80cffb00c26390913ea95

[SSSD] Re: Refactoring work for the next couple of weeks

2016-10-03 Thread Fabiano Fidêncio
s and Failover refactoring. How the SBUS Improvements are linked with the (possible) idea to make SBUS a library and then we can link easier against it? Asking because I had some issues trying to link against SBUS when playing with IFP responder and then that's what you suggested me. Be

[SSSD] Re: [sssd PR#32][comment] Requesting a pull to SSSD:master from fidencio:wip/#3138

2016-09-28 Thread Fabiano Fidêncio
__ > sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org > To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org > Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: [sssd PR#34][opened] cache_req: move from switch to plugins

2016-09-27 Thread Fabiano Fidêncio
upn is > implemented as a proof of concept. If you like it, I will > finish the rest, it won't take much time. > """ > +1 for the idea. Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: [RFC] Use GNULIB's compiler warning code

2016-09-26 Thread Fabiano Fidêncio
On Mon, Sep 26, 2016 at 9:58 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (26/09/16 21:47), Fabiano Fidêncio wrote: >>On Mon, Sep 26, 2016 at 9:26 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>> On (26/09/16 12:14), Fabiano Fidêncio wrote: >>&g

[SSSD] Re: [RFC] Use GNULIB's compiler warning code

2016-09-26 Thread Fabiano Fidêncio
On Mon, Sep 26, 2016 at 9:26 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (26/09/16 12:14), Fabiano Fidêncio wrote: >>Jakub, >> >>On Mon, Sep 26, 2016 at 11:35 AM, Jakub Hrozek <jhro...@redhat.com> wrote: >>> On Mon, Sep 05, 2016 at 03:39:19PM

[SSSD] Re: [RFC] Use GNULIB's compiler warning code

2016-09-26 Thread Fabiano Fidêncio
Jakub, On Mon, Sep 26, 2016 at 11:35 AM, Jakub Hrozek <jhro...@redhat.com> wrote: > On Mon, Sep 05, 2016 at 03:39:19PM +0200, Fabiano Fidêncio wrote: >> On Thu, Aug 11, 2016 at 2:33 PM, Fabiano Fidêncio <fiden...@redhat.com> >> wrote: >> > Howdy! >&

[SSSD] Re: [PATCH] BUILD: intgcheck need to fail if pytest fails

2016-09-26 Thread Fabiano Fidêncio
of review. > > Simple patch is attached. Looks good to me! Acked-by: Fabiano Fidêncio <fiden...@redhat.com> Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscri

[SSSD] Re: fedorahosted.org sunset

2016-09-16 Thread Fabiano Fidêncio
"issues" system and, AFAIR, it doesn't fit as well. Considering Pavel's suggestion (something self-hosted), why not Phabricator? Phabricator's trac seems to fit pretty much what we need. Best Regards, -- Fabiano Fidêncio ___ sssd-devel mai

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

2016-09-13 Thread Fabiano Fidêncio
vel@lists.fedorahosted.org Patch looks good and all the requested changed were done. I haven't done any tests with the patch, but the changes themselves look good to me. Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list sssd-d

[SSSD] Re: [sssd PR#10] UTIL: Remove support to libini older than 1.0.0 (comment)

2016-09-07 Thread Fabiano Fidêncio
On Wed, Sep 7, 2016 at 9:03 AM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (07/09/16 08:46), Fabiano Fidêncio wrote: >>On Wed, Sep 7, 2016 at 8:34 AM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>> On (06/09/16 21:38), Fabiano Fidêncio wrote: >>>&g

[SSSD] Re: [sssd PR#10] UTIL: Remove support to libini older than 1.0.0 (comment)

2016-09-07 Thread Fabiano Fidêncio
On Wed, Sep 7, 2016 at 8:34 AM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (06/09/16 21:38), Fabiano Fidêncio wrote: >>On Tue, Sep 6, 2016 at 8:49 PM, lslebodn >><sssd-github-notificat...@fedorahosted.org> wrote: >>> lslebodn commented on a pull re

[SSSD] Re: [sssd PR#10] UTIL: Remove support to libini older than 1.0.0 (comment)

2016-09-06 Thread Fabiano Fidêncio
compatibility with elder systems, but I can't see any advantage on that. Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org

[SSSD] Re: [sssd PR#10] UTIL: Remove support to libini older than 1.0.0 (comment)

2016-09-06 Thread Fabiano Fidêncio
On Tue, Sep 6, 2016 at 2:30 PM, jhrozek wrote: > jhrozek commented on a pull request > > """ > On Tue, Sep 06, 2016 at 05:16:00AM -0700, fidencio wrote: >> The distributions that would break with this patch are: >> - RHEL/CentOS 5 and older > > I don't

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

2016-09-05 Thread Fabiano Fidêncio
Petr, On Mon, Sep 5, 2016 at 3:43 PM, Petr Cech <pc...@redhat.com> wrote: > On 09/05/2016 09:57 AM, Fabiano Fidêncio wrote: >> >> Petr, >> >> I see you have updated the OPT_MAX_CHILDREN_DEFAULT to 10 instead of >> 50. However, you haven't update the val

[SSSD] Re: [RFC] Use GNULIB's compiler warning code

2016-09-05 Thread Fabiano Fidêncio
On Thu, Aug 11, 2016 at 2:33 PM, Fabiano Fidêncio <fiden...@redhat.com> wrote: > Howdy! > > I've suggested, a long time ago, that we could start making use of > GNULIB's compiler warnings from 'manywarnings' module. This is > basically what we have been doing in a few

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

2016-09-05 Thread Fabiano Fidêncio
On Mon, Sep 5, 2016 at 11:59 AM, Fabiano Fidêncio <fiden...@redhat.com> wrote: > Petr, > > I went through your patches and in general they look good to me. > However, I haven't done any tests yet with your patches (and I'll do > it after lunch). I've done some tests and

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

2016-09-05 Thread Fabiano Fidêncio
olddn, -> struct ldb_dn *olddn, Patch0004: SYSDB: ldb_add --> sss_ldb_add in sysdb Patch0005: SYSDB: ldb_delete --> sss_ldb_delete in sysdb Patch0006: SYSDB: ldb_modify --> sss_ldb_modify in sysdb Patch0007: SYSDB: ldb_rename --> sss_ldb_rename in sysdb LGTM Best Regards, -- Fabiano

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

2016-09-05 Thread Fabiano Fidêncio
to the rest of the code (probably because I'm a newbie here ;-)), but would be nice to have it clear in the documentation (for newbies like myself ;-)). Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https

[SSSD] Re: [PATCH SYSDB: Fix handling of version in sysdb_cache_connect_helper

2016-09-01 Thread Fabiano Fidêncio
On Thu, Sep 1, 2016 at 6:02 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (01/09/16 17:22), Fabiano Fidêncio wrote: >>On Thu, Sep 1, 2016 at 5:12 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>> On (30/08/16 17:07), Lukas Slebodnik wrote: >>>>O

[SSSD] Re: [PATCH SYSDB: Fix handling of version in sysdb_cache_connect_helper

2016-09-01 Thread Fabiano Fidêncio
On Thu, Sep 1, 2016 at 5:12 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (30/08/16 17:07), Lukas Slebodnik wrote: >>On (30/08/16 16:59), Fabiano Fidêncio wrote: >>>Lukaš, >>> >>>On Tue, Aug 30, 2016 at 4:54 PM, Lukas Slebodnik <lsleb...@redhat.

[SSSD] Re: [PATCH] DEBUG: Apend line feed to messages from libsemanage

2016-09-01 Thread Fabiano Fidêncio
hosted.org > There is a typo in the commit shot log: Apend -> Append (no need to resend the patch because of the typo, just fix before pushing) Patch is really simple and quite useful. Have you checked if there is any other place where this change would also be welcome? Best Regards, -- Fabi

[SSSD] Re: [PATCH] SDAP: Fix settig paging attribute in sdap_get_generic_ext_send

2016-08-30 Thread Fabiano Fidêncio
also to stable branch? > > LS > > ___ > sssd-devel mailing list > sssd-devel@lists.fedorahosted.org > https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org > Acked-by: Fabiano Fidêncio <fiden...@redhat.com>

[SSSD] [PATCHES] Remove leftovers from diag_cmd and force_timeout

2016-08-30 Thread Fabiano Fidêncio
Seems that when I sent the v2 of 7579cf99 and ac35fe74 I attached the wrong patches that ended up being pushed. Those patches were incomplete as there are still some leftovers. My bad, sorry :-\ See these 2 attached patches Best Regards, -- Fabiano Fidêncio From

[SSSD] Re: [SSSD} [PATCH] Remove no longer used code

2016-08-30 Thread Fabiano Fidêncio
On Tue, Aug 30, 2016 at 8:23 AM, Petr Cech <pc...@redhat.com> wrote: > On 08/15/2016 02:58 PM, Fabiano Fidêncio wrote: >> >> Those 3 patches are from Jakub and I've just done some minor >> adjustments and add myself as co-author of the first 2 patches. >&

[SSSD] Re: [PATCH] BUILD: Break the intgcheck target into 5 smaller targets: intgcheck-{prepare,configure,build,run,clean}

2016-08-29 Thread Fabiano Fidêncio
On Mon, Aug 29, 2016 at 6:03 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (29/08/16 16:38), Lukas Slebodnik wrote: >>On (29/08/16 16:05), Fabiano Fidêncio wrote: >>>On Mon, Aug 29, 2016 at 3:51 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>>

[SSSD] Re: [PATCH] BUILD: Remove leftover after sysdb refactoring

2016-08-29 Thread Fabiano Fidêncio
orahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org > Acked-by: Fabiano Fidêncio <fiden...@redhat.com> Best Regards, -- Fabiano Fidêncio ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org

[SSSD] Re: [PATCH] BUILD: Break the intgcheck target into 5 smaller targets: intgcheck-{prepare,configure,build,run,clean}

2016-08-29 Thread Fabiano Fidêncio
On Mon, Aug 29, 2016 at 3:51 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (29/08/16 14:47), Lukas Slebodnik wrote: >>On (29/08/16 14:36), Fabiano Fidêncio wrote: >>>On Mon, Aug 29, 2016 at 2:27 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>>

[SSSD] Re: [PATCH] BUILD: Break the intgcheck target into 5 smaller targets: intgcheck-{prepare,configure,build,run,clean}

2016-08-29 Thread Fabiano Fidêncio
On Mon, Aug 29, 2016 at 3:53 PM, Jakub Hrozek <jhro...@redhat.com> wrote: > On Mon, Aug 29, 2016 at 03:51:06PM +0200, Lukas Slebodnik wrote: >> On (29/08/16 14:47), Lukas Slebodnik wrote: >> >On (29/08/16 14:36), Fabiano Fidêncio wrote: >> >>On Mon, Aug 29, 201

[SSSD] Re: [PATCHSET] BUILD: Improve a little bit the "prerelease-*" targets

2016-08-29 Thread Fabiano Fidêncio
On Mon, Aug 29, 2016 at 2:30 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (29/08/16 14:22), Fabiano Fidêncio wrote: >>On Mon, Aug 29, 2016 at 1:39 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>> On (17/08/16 22:14), Fabiano Fidêncio wrote: >>>

[SSSD] Re: [PATCH] BUILD: Break the intgcheck target into 5 smaller targets: intgcheck-{prepare,configure,build,run,clean}

2016-08-29 Thread Fabiano Fidêncio
On Mon, Aug 29, 2016 at 2:27 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: > On (29/08/16 14:15), Fabiano Fidêncio wrote: >>On Mon, Aug 29, 2016 at 12:36 PM, Lukas Slebodnik <lsleb...@redhat.com> wrote: >>> On (29/08/16 12:08), Fabiano Fidêncio wrote: >>>&

  1   2   >