Re: [SSSD] [PATCH] Keep sysdb context in domain info struct

2012-01-31 Thread Sumit Bose
On Mon, Jan 30, 2012 at 09:31:14PM -0500, Stephen Gallagher wrote: On Wed, 2012-01-25 at 18:12 +0100, Sumit Bose wrote: Hi, a few days ago I send a draft patch where the sysdb context is stored in the domain info struct. I created a patch which is a bot more conservative than the last

Re: [SSSD] [PATCHES] Add services map support to the LDAP Provider

2012-01-31 Thread Jakub Hrozek
On Mon, Jan 30, 2012 at 09:26:21AM -0500, Stephen Gallagher wrote: On Mon, 2012-01-30 at 15:04 +0100, Jakub Hrozek wrote: On Sat, Jan 28, 2012 at 02:10:19PM -0500, Stephen Gallagher wrote: On Sat, 2012-01-28 at 13:52 -0500, Stephen Gallagher wrote: On Sat, 2012-01-28 at 12:08 -0500,

Re: [SSSD] Problem with LDAPS+TLS.

2012-01-31 Thread Jan Zelený
Hi - We're using SSSD with LDAPS and TLS on redhat, and it's working fine. I just tried to make it work for unbuntu, but I can't get TLS to work. I get the following errors: (Mon Jan 30 14:36:09 2012) [sssd[be[PSFC]]] [sss_ldap_init_sys_connect_done] (1): ldap_install_tls failed: Connect

Re: [SSSD] [PATCH] KRB5: Add syslog messages for Kerberos failures

2012-01-31 Thread Jan Zelený
Fixes https://fedorahosted.org/sssd/ticket/1137 Obvious Ack. Jan signature.asc Description: This is a digitally signed message part. ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/sssd-devel

Re: [SSSD] Need a strategy to manage AD group names for Unix consumption

2012-01-31 Thread Jan Zelený
-Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of Jakub Hrozek Sent: Wednesday, 25 January 2012 7:10 PM To: sssd-devel@lists.fedorahosted.org Subject: Re: [SSSD] Need a strategy to manage AD group

Re: [SSSD] SUDO: provide manual pages

2012-01-31 Thread Stephen Gallagher
On Mon, 2012-01-30 at 21:48 -0500, Stephen Gallagher wrote: On Mon, 2012-01-30 at 21:39 -0500, Stephen Gallagher wrote: On Mon, 2012-01-30 at 10:57 +0100, Jakub Hrozek wrote: Unfortunately Pavel did not have enough time to finish all the sudo related tickets that would change strings and

Re: [SSSD] [PATCH] Keep sysdb context in domain info struct

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 09:36 +0100, Sumit Bose wrote: On Mon, Jan 30, 2012 at 09:31:14PM -0500, Stephen Gallagher wrote: On Wed, 2012-01-25 at 18:12 +0100, Sumit Bose wrote: Hi, a few days ago I send a draft patch where the sysdb context is stored in the domain info struct. I

Re: [SSSD] [PATCH] KRB5: Add syslog messages for Kerberos failures

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 13:04 +0100, Jan Zelený wrote: Fixes https://fedorahosted.org/sssd/ticket/1137 Obvious Ack. Pushed to master signature.asc Description: This is a digitally signed message part ___ sssd-devel mailing list

Re: [SSSD] [PATCHES] Add services map support to the LDAP Provider

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 10:58 +0100, Jakub Hrozek wrote: On Mon, Jan 30, 2012 at 09:26:21AM -0500, Stephen Gallagher wrote: On Mon, 2012-01-30 at 15:04 +0100, Jakub Hrozek wrote: On Sat, Jan 28, 2012 at 02:10:19PM -0500, Stephen Gallagher wrote: On Sat, 2012-01-28 at 13:52 -0500, Stephen

Re: [SSSD] [PATCH] SUDO Integration - sudo_timed option for responder

2012-01-31 Thread Jakub Hrozek
On Wed, Jan 25, 2012 at 08:23:23PM +0100, Jakub Hrozek wrote: On Fri, Jan 20, 2012 at 01:22:19PM +0100, Pavel Březina wrote: Dne 18.1.2012 10:30, Jakub Hrozek napsal(a): On Wed, Jan 18, 2012 at 10:16:14AM +0100, Jakub Hrozek wrote: On Wed, Jan 18, 2012 at 10:05:23AM +0100, Jan Zelený wrote:

[SSSD] [PATCH] SUDO: Introduce a new configure option --with-sudo

2012-01-31 Thread Jakub Hrozek
We will want to set this option (but perhaps not --enable-all-experimental-features) for F17 to be able to build the sudo library. https://fedorahosted.org/sssd/ticket/1145 At the time being the option is also turned on when --enable-all-experimental-features is specified. The second patch does

[SSSD] [PATCH] SYSDB: index sudoUser

2012-01-31 Thread Jakub Hrozek
Most of the the searches in the Sudo responder include the sudoUser attribute. Indexing it will make the responder faster. From 0153be5db9b8d33e73177ead6e5f93fb04b21008 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek jhro...@redhat.com Date: Tue, 24 Jan 2012 22:17:46 +0100 Subject: [PATCH] SYSDB:

Re: [SSSD] [PATCH] SYSDB: index sudoUser

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 16:09 +0100, Jakub Hrozek wrote: Most of the the searches in the Sudo responder include the sudoUser attribute. Indexing it will make the responder faster. Nack. You're adding indexes for sudoNotAfter and sudoNotBefore in the upgrade routine, but not in the initial

Re: [SSSD] [PATCH] SYSDB: index sudoUser

2012-01-31 Thread Jakub Hrozek
On Tue, Jan 31, 2012 at 10:17:04AM -0500, Stephen Gallagher wrote: On Tue, 2012-01-31 at 16:09 +0100, Jakub Hrozek wrote: Most of the the searches in the Sudo responder include the sudoUser attribute. Indexing it will make the responder faster. Nack. You're adding indexes for

[SSSD] [PATCH] Refactor nss_cmd_send_empty

2012-01-31 Thread Jakub Hrozek
This refactoring patch would allow both me and Honza to simplify sending an empty packet back to client. From 95d12cd3cd82e67e8767fbcd66a8226d3337c7f9 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek jhro...@redhat.com Date: Tue, 31 Jan 2012 22:59:58 +0100 Subject: [PATCH] Refactor nss_cmd_send_empty

Re: [SSSD] [PATCH] SYSDB: index sudoUser

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 23:05 +0100, Jakub Hrozek wrote: On Tue, Jan 31, 2012 at 10:17:04AM -0500, Stephen Gallagher wrote: On Tue, 2012-01-31 at 16:09 +0100, Jakub Hrozek wrote: Most of the the searches in the Sudo responder include the sudoUser attribute. Indexing it will make the

Re: [SSSD] [PATCH] Refactor nss_cmd_send_empty

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 23:18 +0100, Jakub Hrozek wrote: This refactoring patch would allow both me and Honza to simplify sending an empty packet back to client. Ack. signature.asc Description: This is a digitally signed message part ___ sssd-devel

Re: [SSSD] [PATCH] SUDO: Introduce a new configure option --with-sudo

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 16:02 +0100, Jakub Hrozek wrote: We will want to set this option (but perhaps not --enable-all-experimental-features) for F17 to be able to build the sudo library. https://fedorahosted.org/sssd/ticket/1145 At the time being the option is also turned on when

Re: [SSSD] [PATCH] SUDO Integration - sudo_timed option for responder

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 15:56 +0100, Jakub Hrozek wrote: On Wed, Jan 25, 2012 at 08:23:23PM +0100, Jakub Hrozek wrote: On Fri, Jan 20, 2012 at 01:22:19PM +0100, Pavel Březina wrote: Dne 18.1.2012 10:30, Jakub Hrozek napsal(a): On Wed, Jan 18, 2012 at 10:16:14AM +0100, Jakub Hrozek wrote:

Re: [SSSD] [PATCH] Refactor nss_cmd_send_empty

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 19:51 -0500, Stephen Gallagher wrote: On Tue, 2012-01-31 at 23:18 +0100, Jakub Hrozek wrote: This refactoring patch would allow both me and Honza to simplify sending an empty packet back to client. Ack. Pushed to master. signature.asc Description: This is a

Re: [SSSD] [PATCHES][PRELIMINARY] Support of SELinux user maps in SSSD

2012-01-31 Thread Stephen Gallagher
On Tue, 2012-01-31 at 22:15 +0100, Jan Zeleny wrote: Jan Zelený jzel...@redhat.com wrote: Hi, I'm sending all patches implementing support for SELinux user maps. Some support patches are included as well. #0001: Implemented support for multiple search bases in HBAC rules and