[SSSD] Re: [PATCH SET] AD_PROVIDER: ad_enabled_domains

On Mon, Jun 27, 2016 at 03:37:25PM +0200, Petr Cech wrote: > > > On 06/22/2016 06:25 AM, Petr Cech wrote: > > On 06/14/2016 05:21 PM, Petr Cech wrote: > > > Hello list, > > > > > > there is patch set attached resolving: > > > https://fedorahosted.org/sssd/ticket/2828 > > > > > > You can also

[SSSD] Re: [PATCH] MAN: Remove leading spaces from elements programlisting

On Fri, Jul 01, 2016 at 08:59:15AM +0200, Lukas Slebodnik wrote: > ehlo, > > I noticed weird indentation of example for allow_missing_name. > It's longer that 80 columns which is not usual for man pages > and default terminal size (25x80). > > LS I agree this renders nicer, ACK

[SSSD] Re: [PATCH] CONFIGURE: Inform about optional build dependencies

On Fri, Jul 01, 2016 at 08:45:53AM +0200, Lukas Slebodnik wrote: > ehlo, > > We usually inform about optional build dependencies at configure time > and which option can disable checking of this dependency. > > LS I agree with the intent, but I would just say we need such and such library,

[SSSD] Re: [PATCH] DOC: Fix few typos in doxygen comments

On Fri, Jul 01, 2016 at 10:51:13AM +0200, Lukas Slebodnik wrote: > ehlo, > > I noticed doxygen warnings when I was packaging 1.14beta into fedora. > > LS ACK, no more errors and make docs works fine. ___ sssd-devel mailing list

[SSSD] Re: [PATCH] sssctl: print a message when managing sssd

On Fri, Jul 01, 2016 at 01:24:35PM +0200, Pavel Březina wrote: > From 8b877579f3d1a9bbfa728a6e78ff829d936efbb1 Mon Sep 17 00:00:00 2001 > From: =?UTF-8?q?Pavel=20B=C5=99ezina?= > Date: Fri, 1 Jul 2016 13:23:57 +0200 > Subject: [PATCH] sssctl: print a message when managing

[SSSD] Re: [PATCH] sssctl: start sssd in remove-cache command

On Fri, Jul 01, 2016 at 01:21:39PM +0200, Pavel Březina wrote: > From 87c7a20749bc48f97de0f18df77193ed36da6076 Mon Sep 17 00:00:00 2001 > From: =?UTF-8?q?Pavel=20B=C5=99ezina?= > Date: Fri, 1 Jul 2016 12:59:08 +0200 > Subject: [PATCH 1/2] sssctl: restart SSSD when removing

[SSSD] Re: fully qualified sysdb names for users and groups

On Fri, Jul 01, 2016 at 11:01:53PM +0200, Jakub Hrozek wrote: > On Fri, Jul 01, 2016 at 03:24:39PM +0200, Jakub Hrozek wrote: > > On Wed, Jun 29, 2016 at 07:00:13PM +0200, Jakub Hrozek wrote: > > > On Wed, Jun 29, 2016 at 04:36:23PM +0200, Sumit Bose wrote: > > > >

[SSSD] Re: fully qualified sysdb names for users and groups

On Wed, Jun 29, 2016 at 07:00:13PM +0200, Jakub Hrozek wrote: > On Wed, Jun 29, 2016 at 04:36:23PM +0200, Sumit Bose wrote: > > On Wed, Jun 29, 2016 at 12:05:42PM +0200, Lukas Slebodnik wrote: > > > On (29/06/16 11:54), Pavel Březina wrote: > > > >On 06/28/201

[SSSD] Re: [PATCH] Changes to allow SSSD to be used for access control with a machine account belonging to a domain controller.

On Fri, Jul 01, 2016 at 08:55:05AM +0200, Lukas Slebodnik wrote: > On (26/11/15 16:51), Jakub Hrozek wrote: > >On Thu, Nov 26, 2015 at 04:46:07PM +0100, Sumit Bose wrote: > >> On Thu, Nov 26, 2015 at 03:47:13PM +0100, Jakub Hrozek wrote: > >> > On Mon, Nov 23, 2

[SSSD] Announcing SSSD 1.14 Beta

nitor ping with an in-process heartbeat #2957 Extend interface between DP and IFP #3070 Add infrastructure for socket-activated responders == Detailed Changelog == Christian Heimes (1): * Secrets: m4 macros for jansson and http-parser Jakub Hrozek (19): * Updating the version for the

[SSSD] Re: [PATCH SET} A new Secrets service

On Wed, Jun 29, 2016 at 10:39:17PM +0200, Jakub Hrozek wrote: > On Wed, Jun 29, 2016 at 06:49:05PM +0200, Jakub Hrozek wrote: > > On Wed, Jun 29, 2016 at 06:20:25PM +0200, Lukas Slebodnik wrote: > > > On (24/06/16 10:16), Jakub Hrozek wrote: > > > >On Thu, Jun 23,

[SSSD] [PATCH][PUSHED] MAN: Include idmap_sss.8.xml in the manpage sources

00:00:00 2001 From: Jakub Hrozek <jhro...@redhat.com> Date: Wed, 29 Jun 2016 23:16:54 +0200 Subject: [PATCH] MAN: Include idmap_sss.8.xml in the manpage sources Reviewed-by: N/A, one-liner before release --- src/man/po/po4a.cfg | 1 + 1 file changed, 1 insertion(+) diff --git a/src/man/po

[SSSD] Re: [PATCH] BUILD: Fix detection of systemd

On Wed, Jun 29, 2016 at 12:44:17PM +0200, Lukas Slebodnik wrote: > On (29/06/16 12:23), Jakub Hrozek wrote: > >On Wed, Jun 29, 2016 at 12:12:19PM +0200, Lukas Slebodnik wrote: > >> On (29/06/16 11:28), Jakub Hrozek wrote: > >> >On Tue, Jun 28, 2016 at 05:50:

[SSSD] Re: fully qualified sysdb names for users and groups

On Wed, Jun 29, 2016 at 04:36:23PM +0200, Sumit Bose wrote: > On Wed, Jun 29, 2016 at 12:05:42PM +0200, Lukas Slebodnik wrote: > > On (29/06/16 11:54), Pavel Březina wrote: > > >On 06/28/2016 06:24 PM, Jakub Hrozek wrote: > > >> Hi, > > >> > > >

[SSSD] Re: [PATCH SET} A new Secrets service

On Wed, Jun 29, 2016 at 06:20:25PM +0200, Lukas Slebodnik wrote: > On (24/06/16 10:16), Jakub Hrozek wrote: > >On Thu, Jun 23, 2016 at 04:23:12PM -0400, Simo Sorce wrote: > >> On Thu, 2016-06-23 at 21:36 +0200, Jakub Hrozek wrote: > >> > On Thu, Apr 21, 2016 at 09:21:

[SSSD] Re: [PATCH] LDAP: Change the default rfc2307 autofs attribute mappings

On Wed, Jun 29, 2016 at 12:48:36PM +0200, Lukas Slebodnik wrote: > On (28/06/16 11:50), Jakub Hrozek wrote: > >From b493cee9976b8dd62bea3d8f09b88ce809a40980 Mon Sep 17 00:00:00 2001 > >From: Jakub Hrozek <jhro...@redhat.com> > >Date: Thu, 19 Nov 2015 10:40:39 +0100 >

[SSSD] Re: [PATCH] BUILD: Fix detection of systemd

On Tue, Jun 28, 2016 at 05:50:15PM +0200, Jakub Hrozek wrote: > On Tue, Jun 28, 2016 at 12:45:13PM +0200, Lukas Slebodnik wrote: > > ehlo, > > > > @see commit message in attached patch. > > > > LS > > Thanks, the code reads much better and works on RHEL-6

[SSSD] Re: [PATCH] PAM: Allow to configure pam services for smartcards

On Mon, Feb 15, 2016 at 01:23:52PM +0100, Sumit Bose wrote: > On Wed, Jan 20, 2016 at 01:35:01PM +0100, Lukas Slebodnik wrote: > > ehlo, > > > > attached patch should fix ticket #2926 > > > > The default case (no adding, no removing services) is tested > > by pam-srv-tests. > > > > If the patch

[SSSD] Re: [PATCH] SSH: Do not print an error message if sss_ssh_authorizedkeys is asked for a local user

On Thu, Apr 28, 2016 at 10:40:58AM +0200, Jakub Hrozek wrote: > Hi, > > please see the attached patch. I didn't find any information in the ssh > man pages about the expected error codes from the AuthorizedKeysCommand, > but I think we should at least suppress the error messages.

[SSSD] Re: [PATCH] IPA: Handle requests for netgroups from trusted domains gracefully

On Wed, May 11, 2016 at 01:59:42PM +0200, Jakub Hrozek wrote: > On Wed, May 11, 2016 at 01:57:53PM +0200, Pavel Březina wrote: > > On 05/06/2016 03:04 PM, Jakub Hrozek wrote: > > > To reproduce, just run: > > > getent netgroup some_name@trusted.domain > &g

[SSSD] fully qualified sysdb names for users and groups

Hi, here is my branch that implements using the fully qualified names in sysdb for users and groups: https://github.com/jhrozek/sssd/commits/sysdb-fqdn The SSSD code changes are done. There are some downstream tests that are failing (some sudo and some HBAC tests), but I think I can chase

[SSSD] Re: [PATCH] BUILD: Fix detection of systemd

On Tue, Jun 28, 2016 at 12:45:13PM +0200, Lukas Slebodnik wrote: > ehlo, > > @see commit message in attached patch. > > LS Thanks, the code reads much better and works on RHEL-6 and Fedora. I'm waiting for CI before pushing. But in the meantime, ACK.

[SSSD] Re: [PATCH 2/2] UTIL: Revent connection handling in sssd_async_connect_send

On Tue, Jun 28, 2016 at 12:48:04PM +0200, Lukas Slebodnik wrote: > On (20/06/16 08:49), Simo Sorce wrote: > >On Mon, 2016-06-20 at 11:04 +0200, Lukas Slebodnik wrote: > >> On (19/06/16 15:27), Simo Sorce wrote: > >> >As the commit message says, nothing more. > >> >Isn't it right to wait for 6

[SSSD] [PATCH] LDAP: Change the default rfc2307 autofs attribute mappings

, we should also file a ticket to remove the warnings in the next release to avoid warning forever. >From b493cee9976b8dd62bea3d8f09b88ce809a40980 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek <jhro...@redhat.com> Date: Thu, 19 Nov 2015 10:40:39 +0100 Subject: [PATCH] LDAP: Change the defaul

[SSSD] Re: [PATCH] confdb: Check for config file errors on sssd startup

On Fri, Jun 24, 2016 at 09:48:18AM +0200, Michal Židek wrote: > On 06/23/2016 10:38 PM, Michal Židek wrote: > > On 06/23/2016 10:22 PM, Jakub Hrozek wrote: > > > On Thu, Jun 23, 2016 at 10:19:49PM +0200, Michal Židek wrote: > > > > On 06/23/2016 10:17 PM, Jakub Hroze

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Mon, Jun 27, 2016 at 07:02:19PM +0200, Jakub Hrozek wrote: > On Mon, Jun 27, 2016 at 05:58:49PM +0200, Michal Židek wrote: > > On 06/27/2016 04:18 PM, Jakub Hrozek wrote: > > > On Mon, Jun 27, 2016 at 03:05:54PM +0200, Lukas Slebodnik wrote: > > > > It depends o

[SSSD] Re: [PATCH] confdb: Check for config file errors on sssd startup

On Fri, Jun 24, 2016 at 10:09:24AM +0200, Michal Židek wrote: > On 06/24/2016 09:56 AM, Jakub Hrozek wrote: > > On Thu, Jun 23, 2016 at 11:10:57AM +0200, Lukas Slebodnik wrote: > > > ehlo > > > > > > The first patch is sligtly modified version of Micha

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Mon, Jun 27, 2016 at 05:58:49PM +0200, Michal Židek wrote: > On 06/27/2016 04:18 PM, Jakub Hrozek wrote: > > On Mon, Jun 27, 2016 at 03:05:54PM +0200, Lukas Slebodnik wrote: > > > It depends on which patches will be pushed to master. > > > but I was able to a

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Thu, Jun 23, 2016 at 11:46:33AM +0200, Lukas Slebodnik wrote: > On (23/06/16 11:03), Lukas Slebodnik wrote: > >On (20/06/16 21:09), Jakub Hrozek wrote: > >>On Mon, Jun 20, 2016 at 08:54:18PM +0200, Lukas Slebodnik wrote: > >>> ehlo, > >>> &g

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Tue, Jun 21, 2016 at 10:57:02AM +0200, Jakub Hrozek wrote: > On Tue, Jun 21, 2016 at 10:25:41AM +0200, Lukas Slebodnik wrote: > > It looks like there is an agreement that we needn't change anything in > > libini_config for this use-case. So I will focus on other ding-libs patche

[SSSD] Re: [PATCH] Pavel's sssctl work

On Mon, Jun 27, 2016 at 06:05:50PM +0200, Jakub Hrozek wrote: > On Mon, Jun 27, 2016 at 01:26:09PM +0200, Pavel Březina wrote: > > Turned out I sent wrong patches. > > > > Thank you, Coverity came back clean, CI passed as well: > http://sssd-ci.duckdns.org/logs/job/46

[SSSD] Re: [PATCH] Pavel's sssctl work

On Mon, Jun 27, 2016 at 01:26:09PM +0200, Pavel Březina wrote: > Turned out I sent wrong patches. > Thank you, Coverity came back clean, CI passed as well: http://sssd-ci.duckdns.org/logs/job/46/13/summary.html I did some more manual testing (because there are no tests so far..) and found:

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Mon, Jun 27, 2016 at 03:05:54PM +0200, Lukas Slebodnik wrote: > It depends on which patches will be pushed to master. > but I was able to apply patch from this thread with 3way merge > on Pavel's sssctl branch from fedorapeople; there weren't any conflicts The latest ones on the list. I will

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

> > > On 06/24/2016 09:57 AM, Jakub Hrozek wrote: > > > > > > On Thu, Jun 23, 2016 at 10:04:21PM +0200, Michal Židek wrote: > > > > > > > On 06/23/2016 09:40 PM, Jakub Hrozek wrote: > > > > > > > > On Thu, Jun 23, 2016 at 09:10

[SSSD] Re: release notes for the 1.14 beta release

On Thu, Jun 23, 2016 at 10:21:34PM +0200, Jakub Hrozek wrote: > Hi, > > I prepared release notes for the beta release: > https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta > I wanted to release the tarball today, but I would also like to push the > secrets respond

[SSSD] Re: [PATCH SET} A new Secrets service

On Thu, Jun 23, 2016 at 04:23:12PM -0400, Simo Sorce wrote: > On Thu, 2016-06-23 at 21:36 +0200, Jakub Hrozek wrote: > > On Thu, Apr 21, 2016 at 09:21:17AM +0200, Jakub Hrozek wrote: > > > Given that Lukas says "http_parser can provide pkgconfig in future", I > &g

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Thu, Jun 23, 2016 at 10:04:21PM +0200, Michal Židek wrote: > On 06/23/2016 09:40 PM, Jakub Hrozek wrote: > > On Thu, Jun 23, 2016 at 09:10:34PM +0200, Jakub Hrozek wrote: > > > On Thu, Jun 23, 2016 at 07:29:13PM +0200, Lukas Slebodnik wrote: > > > > On (23/06

[SSSD] Re: [PATCH] confdb: Check for config file errors on sssd startup

On Thu, Jun 23, 2016 at 11:10:57AM +0200, Lukas Slebodnik wrote: > ehlo > > The first patch is sligtly modified version of Michal's patch. > It depends on patch for config snippet. Because config > validation is optional if it isn't supported in libini_config. > And detection for new

[SSSD] Re: [PATCH] confdb: Check for config file errors on sssd startup

On Thu, Jun 23, 2016 at 10:19:49PM +0200, Michal Židek wrote: > On 06/23/2016 10:17 PM, Jakub Hrozek wrote: > > On Thu, Jun 23, 2016 at 10:12:21PM +0200, Michal Židek wrote: > > > On 06/23/2016 10:08 PM, Jakub Hrozek wrote: > > > > On Thu, Jun 23, 2016 at 11:10:57A

[SSSD] release notes for the 1.14 beta release

Hi, I prepared release notes for the beta release: https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta I wanted to release the tarball today, but I would also like to push the secrets responder and wait for CI to finish..let's try tomorrow.

[SSSD] Re: [PATCH] confdb: Check for config file errors on sssd startup

On Thu, Jun 23, 2016 at 10:12:21PM +0200, Michal Židek wrote: > On 06/23/2016 10:08 PM, Jakub Hrozek wrote: > > On Thu, Jun 23, 2016 at 11:10:57AM +0200, Lukas Slebodnik wrote: > > > @@ -217,6 +216,14 @@ int confdb_init_db(const char *config_file, const >

[SSSD] Re: [PATCH] confdb: Check for config file errors on sssd startup

On Thu, Jun 23, 2016 at 11:10:57AM +0200, Lukas Slebodnik wrote: > @@ -217,6 +216,14 @@ int confdb_init_db(const char *config_file, const char > *config_dir, > goto done; > } > > +/* FIXME: Do not hardcode the path */ > +ret = sss_ini_call_validators(init_data, > +

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Thu, Jun 23, 2016 at 09:10:34PM +0200, Jakub Hrozek wrote: > On Thu, Jun 23, 2016 at 07:29:13PM +0200, Lukas Slebodnik wrote: > > On (23/06/16 18:59), Michal Židek wrote: > > >On 06/23/2016 06:52 PM, Lukas Slebodnik wrote: > > >> On (23/06/16 18:24), Michal Židek

[SSSD] Re: [PATCH SET} A new Secrets service

On Thu, Apr 21, 2016 at 09:21:17AM +0200, Jakub Hrozek wrote: > Given that Lukas says "http_parser can provide pkgconfig in future", I > read his mail as a preference to keep the pkg-check test. And actually I > agree, it doesn't hurt, let's keep it in. I wanted to push these

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Thu, Jun 23, 2016 at 07:29:13PM +0200, Lukas Slebodnik wrote: > On (23/06/16 18:59), Michal Židek wrote: > >On 06/23/2016 06:52 PM, Lukas Slebodnik wrote: > >> On (23/06/16 18:24), Michal Židek wrote: > >> > On 06/23/2016 05:50 PM, Michal Židek wrote: > >> > > Lukas, > >> > > > >> > > did you

[SSSD] I renamed the 1.15 milestone to 1.16, the new 1.15 tracks Fedora 25 development

Hi, ssia, mostly. The previous 1.15 bucket was just a huge ball of everything we want to work on for the next release. But we're looking at some enhancements sooner, in time for Fedora 25, so I just shifted the version numbers and will add some tickets that we would like to include in Fedora 25

[SSSD] Re: [PATCH] Improve sysdb write performance

On Thu, Jun 23, 2016 at 12:40:28PM +0200, Sumit Bose wrote: > On Thu, Jun 23, 2016 at 09:52:46AM +0200, Jakub Hrozek wrote: > > On Tue, Jun 21, 2016 at 10:28:52PM +0200, Lukas Slebodnik wrote: > > > On (21/06/16 22:08), Jakub Hrozek wrote: > > > >On Tue, Jun 21, 2

[SSSD] Re: [PATCH] Pavel's sssctl work

On Thu, Jun 23, 2016 at 01:40:50PM +0200, Lukas Slebodnik wrote: > On (23/06/16 13:23), Jakub Hrozek wrote: > >On Wed, Jun 22, 2016 at 03:23:28PM +0200, Jakub Hrozek wrote: > >> On Tue, Jun 21, 2016 at 04:44:05PM +0200, Jakub Hrozek wrote: > >> > On Tue, Jun 21, 2

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Thu, Jun 23, 2016 at 11:46:33AM +0200, Lukas Slebodnik wrote: > On (23/06/16 11:03), Lukas Slebodnik wrote: > >On (20/06/16 21:09), Jakub Hrozek wrote: > >>On Mon, Jun 20, 2016 at 08:54:18PM +0200, Lukas Slebodnik wrote: > >>> ehlo, > >>> &g

[SSSD] Re: [PATCH] Pavel's sssctl work

On Tue, Jun 21, 2016 at 04:44:05PM +0200, Jakub Hrozek wrote: > On Tue, Jun 21, 2016 at 04:15:06PM +0200, Pavel Březina wrote: > > On 06/21/2016 03:50 PM, Jakub Hrozek wrote: > > > On Mon, Jun 20, 2016 at 07:13:10PM +0200, Jakub Hrozek wrote: > > > > Hi, > &

[SSSD] Announcing ding-libs 0.6.0

A new version of ding-libs was released today! ding-libs, or "Ding is not GLib" is a a set of helpful libraries used by projects such as SSSD or gss-proxy. The tarball can be downloaded from: https://fedorahosted.org/sssd/wiki/Releases == Highlights == * libini_config * libini now

[SSSD] Re: [ding-libs] [PATCH] ini: Add infrastructure for validators

On Wed, Jun 22, 2016 at 11:48:20AM +0200, Lukas Slebodnik wrote: > Thank you for review. > > Feel free to change/add comments before pushing patches. I just added a simple comment that the structure field is unused at the moment. All patches are pushed to ding-libs master: *

[SSSD] release notes for the ding-libs 0.6.0 release

Hi, I prepared very simple release notes for ding-libs 0.6.0: https://fedorahosted.org/sssd/wiki/Releases/DingNotes-0.6.0 ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org

[SSSD] Re: [ding-libs] [PATCH] ini: Add infrastructure for validators

On Wed, Jun 22, 2016 at 10:52:34AM +0200, Lukas Slebodnik wrote: > On (22/06/16 10:39), Jakub Hrozek wrote: > >On Wed, Jun 22, 2016 at 09:28:26AM +0200, Lukas Slebodnik wrote: > >> ehlo, > >> > >> The first 4 patches are slightly modified version > >

[SSSD] Re: [ding-libs] [PATCH] ini: Add infrastructure for validators

On Wed, Jun 22, 2016 at 09:28:26AM +0200, Lukas Slebodnik wrote: > ehlo, > > The first 4 patches are slightly modified version > of Michal's patches. Mostly coding style issues, fixed reports from static > analyzers + fixed small issues which would be fixed as part of review process. > > Last

[SSSD] Re: [PATCHES] gpo and ding libs

On Wed, Jun 22, 2016 at 09:40:47AM +0200, Lukas Slebodnik wrote: > On (05/05/16 16:28), Michal Židek wrote: > >New patches are attached. > > > >SSSD patch changes: > >-I changed the behavior to only try > >parsing with the new flag when it > >previously failed as proposed by Sumit. > > >

[SSSD] Re: [PATCH] Improve sysdb write performance

On Tue, Jun 21, 2016 at 11:46:51AM +0200, Jakub Hrozek wrote: > On Mon, Jun 20, 2016 at 06:57:55PM +0200, Jakub Hrozek wrote: > > On Fri, Jun 10, 2016 at 01:33:49PM +0200, Jakub Hrozek wrote: > > > On Fri, Jun 03, 2016 at 12:43:41PM +0200, Jakub Hrozek

[SSSD] Re: [PATCH] Pavel's sssctl work

On Tue, Jun 21, 2016 at 04:15:06PM +0200, Pavel Březina wrote: > On 06/21/2016 03:50 PM, Jakub Hrozek wrote: > > On Mon, Jun 20, 2016 at 07:13:10PM +0200, Jakub Hrozek wrote: > > > Hi, > > > > > > Pavel's sssctl tool is at: > > > > >

[SSSD] Re: [PATCH] Pavel's sssctl work

On Tue, Jun 21, 2016 at 04:10:41PM +0200, Jakub Hrozek wrote: > On Tue, Jun 21, 2016 at 03:50:17PM +0200, Jakub Hrozek wrote: > > On Mon, Jun 20, 2016 at 07:13:10PM +0200, Jakub Hrozek wrote: > > > Hi, > > > > > > Pavel's sssctl tool is at: > > >

[SSSD] Re: [PATCH] Pavel's sssctl work

On Tue, Jun 21, 2016 at 03:50:17PM +0200, Jakub Hrozek wrote: > On Mon, Jun 20, 2016 at 07:13:10PM +0200, Jakub Hrozek wrote: > > Hi, > > > > Pavel's sssctl tool is at: > > https://fedorapeople.org/cgit/pbrezina/public_git/sssd.git/log/?h=sssctl > >

[SSSD] Re: [PATCH] Pavel's sssctl work

On Mon, Jun 20, 2016 at 07:13:10PM +0200, Jakub Hrozek wrote: > Hi, > > Pavel's sssctl tool is at: > https://fedorapeople.org/cgit/pbrezina/public_git/sssd.git/log/?h=sssctl > > I'll try to have a first pass at review today in the evening, but I > thought I'll pass

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Tue, Jun 21, 2016 at 10:25:41AM +0200, Lukas Slebodnik wrote: > It looks like there is an agreement that we needn't change anything in > libini_config for this use-case. So I will focus on other ding-libs patches. > > BTW I need to update manual pages to reflect this change. > Please file a

[SSSD] Announcing SSSD 1.14 Alpha

. Jakub Hrozek (72): * Updating the version to track 1.14 development * MAN: Clarify pam_trusted_users option description * MAN: proxy and krb5 are valid access control modules * contrib: Add a pre-push hook to warn about commits without Reviewed-By * AD: Provide common connection list

[SSSD] Re: [PATCH] confd: Make it possible to use config snippets

On Mon, Jun 20, 2016 at 08:54:18PM +0200, Lukas Slebodnik wrote: > ehlo, > > Attached is a sligtly modified version of Michal's patch. The same patch is attached twice. Was it by accident or did you mean to send two patches? > I fixed few coding style issues + added missing creation of

[SSSD] [PATCH] Pavel's sssctl work

Hi, Pavel's sssctl tool is at: https://fedorapeople.org/cgit/pbrezina/public_git/sssd.git/log/?h=sssctl I'll try to have a first pass at review today in the evening, but I thought I'll pass on the branch in case anyone else is interested.. ___

[SSSD] Re: [PATCH] Improve sysdb write performance

On Fri, Jun 10, 2016 at 01:33:49PM +0200, Jakub Hrozek wrote: > On Fri, Jun 03, 2016 at 12:43:41PM +0200, Jakub Hrozek wrote: > > Hi, > > > > the attached patchset improves SSSD by performance by adding a second > > ldb cache file that is opened with LDB_FLG_NOSYNC and

[SSSD] Re: [PATCHES] Data provider refactoring

On Sat, Jun 18, 2016 at 04:11:30PM +0200, Pavel Březina wrote: > On 06/17/2016 08:33 PM, Lukas Slebodnik wrote: > > On (17/06/16 16:54), Lukas Slebodnik wrote: > > > On (14/06/16 15:30), Pavel Březina wrote: > > > > On 05/16/2016 02:00 PM, Pavel Březina wrote: > > > > > Hi, > > > > > the patches

[SSSD] RFC: 1.14 alpha release notes

Hi, I would like to release 1.14 alpha today, so I prepared the release notes: https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha I will also move the tickets that didn't make the Alpha release out of the Trac milestone. Please comment or edit the notes directly. For convenience,

[SSSD] Re: [PATCH] pam-srv-tests: Fix warning unused-function

On Thu, Jun 16, 2016 at 07:31:46PM +0200, Lukas Slebodnik wrote: > ehlo, > > attached small patch fix tiny complier warning when building with openssl > instead of nss. > > LS ack CI: http://sssd-ci.duckdns.org/logs/job/45/33/summary.html ___

[SSSD] Re: [PATCH] SPEC: Run sssd as privileged user

On Thu, Jun 16, 2016 at 10:17:26PM +0200, Lukas Slebodnik wrote: > On (16/06/16 22:11), Jakub Hrozek wrote: > >On Thu, Jun 16, 2016 at 08:04:36PM +0200, Lukas Slebodnik wrote: > >> ehlo, > >> > >> attached patch makes my life easier. > >> I need

[SSSD] Re: [PATCH] SPEC: Run sssd as privileged user

On Thu, Jun 16, 2016 at 08:04:36PM +0200, Lukas Slebodnik wrote: > ehlo, > > attached patch makes my life easier. > I needn't patch spec file before building > sssd for downstream tests. SSSD still has some > issues with non-root mode and complicated providers. > > I would appreciate review. I

[SSSD] Re: [PATCHES] Data provider refactoring

On Thu, Jun 16, 2016 at 04:40:15PM +0200, Pavel Březina wrote: > On 06/16/2016 03:32 PM, Lukas Slebodnik wrote: > > On (16/06/16 10:32), Pavel Březina wrote: > > > On 06/15/2016 09:57 PM, Lukas Slebodnik wrote: > > > > On (15/06/16 21:54), Lukas Slebodnik wrote: > > > > > On (15/06/16 21:08),

[SSSD] Re: [PATCH] DEBUG: Add `debug` alias for debug_level

On Wed, Jun 08, 2016 at 09:23:39AM +0200, Pavel Březina wrote: > Ack from me as well. master: 131684b9107a3fc07906013d16b35975531f2864 ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org

[SSSD] Re: [PATCH] ssh: skip invalid certificates

On Thu, Jun 16, 2016 at 01:33:47PM +0200, Jakub Hrozek wrote: > On Tue, Jun 07, 2016 at 03:58:31PM +0200, Sumit Bose wrote: > > > You need to free tmp_ctx in this function. > > > > ah. sorry, I added it to the caller and forgot to add it to the new > > function. New

[SSSD] Re: [PATCH] Add underlying diagnostic message for SSL errors.

On Tue, Jun 14, 2016 at 03:25:19PM +0200, Pavel Březina wrote: > On 06/09/2016 04:04 PM, Jakub Hrozek wrote: > > Hi, > > > > the reporter of https://fedorahosted.org/sssd/ticket/3005 kindly > > submitted a patch. I'm resending it here for review (looks good to me &

[SSSD] Re: [PATCH] ssh: skip invalid certificates

On Tue, Jun 07, 2016 at 03:58:31PM +0200, Sumit Bose wrote: > > You need to free tmp_ctx in this function. > > ah. sorry, I added it to the caller and forgot to add it to the new > function. New version attached. > > bye, > Sumit Thank you, ACK CI:

[SSSD] Re: [PATCHES] Data provider refactoring

On Wed, Jun 15, 2016 at 09:57:45PM +0200, Lukas Slebodnik wrote: > On (15/06/16 21:54), Lukas Slebodnik wrote: > >On (15/06/16 21:08), Lukas Slebodnik wrote: > >>On (15/06/16 19:08), Lukas Slebodnik wrote: > >>>On (15/06/16 14:08), Pavel Březina wrote: > On 06/15/2016 08:44 AM, Lukas Slebodnik

[SSSD] Re: [PATCH] sdap: improve filtering of multiple results in GC lookups

On Mon, Jun 13, 2016 at 03:16:25PM +0200, Lukas Slebodnik wrote: > On (29/02/16 11:17), Jakub Hrozek wrote: > >On Thu, Feb 25, 2016 at 01:37:27PM +0100, Sumit Bose wrote: > >> On Thu, Feb 25, 2016 at 12:50:55PM +0100, Jakub Hrozek wrote: > >> > On Tue, Feb 23, 2016 a

[SSSD] Re: [PATCH] pam-srv-tests: Increase cached_auth_timeout

On Fri, Jun 10, 2016 at 04:42:51PM +0200, Lukas Slebodnik wrote: > On (10/06/16 12:07), Sumit Bose wrote: > >On Fri, Jun 10, 2016 at 11:09:49AM +0200, Lukas Slebodnik wrote: > >> On (10/06/16 09:54), Sumit Bose wrote: > >> >On Fri, Jun 10, 2016 at 09:26:38AM +0200, Lukas Slebodnik wrote: > >> >>

[SSSD] Re: [PATCH] systemtap-based performance probes

On Thu, Jun 09, 2016 at 11:33:40AM +0200, Lukas Slebodnik wrote: > On (08/06/16 19:11), Lukas Slebodnik wrote: > >On (07/06/16 23:27), Jakub Hrozek wrote: > >>On Mon, Jun 06, 2016 at 05:50:03PM +0200, Lukas Slebodnik wrote: > >>> >diff --git a/src/external/systemt

[SSSD] [PATCH] Add underlying diagnostic message for SSL errors.

Hi, the reporter of https://fedorahosted.org/sssd/ticket/3005 kindly submitted a patch. I'm resending it here for review (looks good to me btw) >From 765c3fdd384a427445eca6c7e367d39c1e2f9558 Mon Sep 17 00:00:00 2001 From: Graham Leggett Date: Thu, 9 Jun 2016 15:27:34 +0200

[SSSD] Re: [PATCH] RESPONDER: Fix error check in cache_req.c

On Thu, Jun 09, 2016 at 12:28:51PM +0200, Lukas Slebodnik wrote: > On (09/06/16 12:25), Jakub Hrozek wrote: > >On Thu, Jun 09, 2016 at 12:20:25PM +0200, Lukas Slebodnik wrote: > >> On (09/06/16 12:06), Jakub Hrozek wrote: > >> >On Thu, Jun 09, 2016 at 10:37:19A

[SSSD] Re: [PATCH] RESPONDER: Fix error check in cache_req.c

On Thu, Jun 09, 2016 at 12:20:25PM +0200, Lukas Slebodnik wrote: > On (09/06/16 12:06), Jakub Hrozek wrote: > >On Thu, Jun 09, 2016 at 10:37:19AM +0200, Lukas Slebodnik wrote: > >> sssd-1-13: > >> * d9ccb66522adcf9fbbe3772a7b712e6bdcb2ad46 > > > >Unf

[SSSD] Re: [PATCH] RESPONDER: Fix error check in cache_req.c

On Thu, Jun 09, 2016 at 10:37:19AM +0200, Lukas Slebodnik wrote: > sssd-1-13: > * d9ccb66522adcf9fbbe3772a7b712e6bdcb2ad46 Unfortunately the debug macro doesn't seem to be in sssd-1-13, can we revert the patch from that branch? ___ sssd-devel mailing

[SSSD] Re: [PATCHES] ipa: add support for certificate overrides

On Wed, Jun 08, 2016 at 03:39:11PM +0200, Sumit Bose wrote: > On Tue, Jun 07, 2016 at 04:40:42PM +0200, Jakub Hrozek wrote: > > On Tue, Jun 07, 2016 at 02:55:40PM +0200, Sumit Bose wrote: > > > On Tue, Jun 07, 2016 at 01:56:10PM +0200, Jakub Hrozek wrote: > > > > On T

[SSSD] [PATCH] RESPONDER: Fix error check in cache_req.c

Hi, I found this little bug when reviewing Pavel's sudo patch. >From f0724df7da5029d73c3cd0806beb1a17e9063ec3 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek <jhro...@redhat.com> Date: Wed, 8 Jun 2016 15:12:14 +0200 Subject: [PATCH] RESPONDER: Fix error check in cache_req.c --- src/respond

[SSSD] Re: [PATCH] AD: use krb5_keytab for subdomain initialization

On Fri, Apr 22, 2016 at 04:29:36PM +0200, Sumit Bose wrote: > On Fri, Apr 22, 2016 at 03:20:56PM +0200, Jakub Hrozek wrote: > > On Wed, Apr 13, 2016 at 03:45:22PM +0200, Sumit Bose wrote: > > > Hi, > > > > > > this is a bit of a follow-up patch to "s

[SSSD] Re: [PATCH] Add winbind idmap plugin

On Tue, May 10, 2016 at 11:10:05AM +0200, Sumit Bose wrote: > Hi, > > this patch adds a new plugin similar to the one for the cifs-utils which > allows winbind to use the same id-mapping as SSSD. > > Currently I only added it to the dlopen test because I think it would be > best to test it

[SSSD] Re: [PATCH] systemtap-based performance probes

fied to 'tapset_dir="${withval}"' after > updating help string. Fixed > > >+[tapset_dir="\$(datadir)/systemtap/tapset"]) >^^^^^^^^ >this defaul

[SSSD] Re: [PATCHES] ipa: add support for certificate overrides

On Tue, Jun 07, 2016 at 02:55:40PM +0200, Sumit Bose wrote: > On Tue, Jun 07, 2016 at 01:56:10PM +0200, Jakub Hrozek wrote: > > On Tue, Jun 07, 2016 at 12:28:22PM +0200, Sumit Bose wrote: > > > sure, here you are. > > > > > > bye, > > > Sumi

[SSSD] Re: [PATCH] DEBUG: Add `debug` alias for debug_level

On Fri, Jun 03, 2016 at 09:34:46AM -0400, Stephen Gallagher wrote: > On 04/28/2016 09:30 AM, Lukas Slebodnik wrote: > > On (27/04/16 15:18), Stephen Gallagher wrote: > >> On 04/27/2016 05:57 AM, Pavel Březina wrote: > >>> On 04/26/2016 05:08 PM, Stephen Gallagher wrote: > Our users constantly

[SSSD] Re: [PATCHES] p11: add no_verification option

On Tue, Jun 07, 2016 at 03:11:49PM +0200, Sumit Bose wrote: > On Tue, Jun 07, 2016 at 02:42:56PM +0200, Jakub Hrozek wrote: > > On Mon, May 30, 2016 at 04:32:20PM +0200, Sumit Bose wrote: > > > > oops, yes I guess this would be a good idea. I'll send a new patch. > > &g

[SSSD] Re: [PATCH] ssh: skip invalid certificates

On Fri, Jun 03, 2016 at 08:17:01PM +0200, Sumit Bose wrote: > Hi, > > currently the code which generates ssh key from the public keys in the > user certificates fails if one certificate cannot be validated and > terminates the whole request. It is of course valid that the user entry > might

[SSSD] Re: [PATCHES] p11: add no_verification option

On Mon, May 30, 2016 at 04:32:20PM +0200, Sumit Bose wrote: > > oops, yes I guess this would be a good idea. I'll send a new patch. > > > > new version attached. > > bye, > Sumit One last question, do we want to add the ocsp_default_responder and ocsp_default_responder_signing_cert options to

[SSSD] Re: [PATCHES] ipa: add support for certificate overrides

On Tue, Jun 07, 2016 at 12:28:22PM +0200, Sumit Bose wrote: > sure, here you are. > > bye, > Sumit Hmm, are these the correct patches? /home/remote/jhrozek/devel/sssd/src/db/sysdb_views.c: In function 'sysdb_search_override_by_cert': /home/remote/jhrozek/devel/sssd/src/db/sysdb_views.c:880:11:

[SSSD] Re: [PATCH] PAM: add pam_sss option allow_missing_name

On Tue, Jun 07, 2016 at 12:18:17PM +0200, Jakub Hrozek wrote: > On Mon, Jun 06, 2016 at 10:56:52AM +0200, Sumit Bose wrote: > > On Fri, Jun 03, 2016 at 05:56:45PM +0200, Jakub Hrozek wrote: > > > On Wed, Jun 01, 2016 at 06:31:29PM +0200, Sumit Bose wrote: > > > > Hi,

[SSSD] Re: [PATCH] PAM: add pam_sss option allow_missing_name

On Mon, Jun 06, 2016 at 10:56:52AM +0200, Sumit Bose wrote: > On Fri, Jun 03, 2016 at 05:56:45PM +0200, Jakub Hrozek wrote: > > On Wed, Jun 01, 2016 at 06:31:29PM +0200, Sumit Bose wrote: > > > Hi, > > > > > > that attached two patches would allow to us

[SSSD] Re: [PATCHES] ipa: add support for certificate overrides

On Mon, Jun 06, 2016 at 11:06:06AM +0200, Sumit Bose wrote: > On Fri, Jun 03, 2016 at 02:56:08PM +0200, Jakub Hrozek wrote: > > On Fri, May 20, 2016 at 09:13:29PM +0200, Sumit Bose wrote: > > > Hi, > > > > > > this set of patches should resolve > > &

[SSSD] Re: Design document - sssctl

On Tue, Jun 07, 2016 at 11:53:55AM +0200, Pavel Březina wrote: > On 06/07/2016 11:36 AM, Jakub Hrozek wrote: > > On Mon, Jun 06, 2016 at 02:09:57PM +0200, Pavel Březina wrote: > > > On 03/22/2016 12:42 PM, Pavel Reichl wrote: > > > > Hello, > > > >

[SSSD] Re: [PATCH] libwbclient: wbcSidsToUnixIds() don't fail on errors

On Mon, Jun 06, 2016 at 03:22:22PM +0300, Alexander Bokovoy wrote: > ACK. master: 52f1093ef3d7c44132ec10c57436865b2cbb19d7 sssd-1-13: 15ad5f603a5797c61a01f67365c2581c7bddcdfa ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org

<    1   2   3   4   5   6   7   8   9   10   >