Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread steve
On Wed, 2013-12-04 at 09:19 +0100, steve wrote: Hi We have similar (nothing deep) nesting and had similar issues on openSUSE with 1.9.5. It seems to be fixed on 1.11.x. It's a real pain to build and install but you could do us all a big favour by putting pressure on SUSE to get up to date

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Greg.Lehmann
-Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of steve Sent: Wednesday, 4 December 2013 6:20 PM To: sssd-devel@lists.fedorahosted.org Subject: Re: [SSSD] problem with AD nested group expansion, maybe?

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Greg.Lehmann
-Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of steve Sent: Wednesday, 4 December 2013 6:22 PM To: sssd-devel@lists.fedorahosted.org Subject: Re: [SSSD] problem with AD nested group expansion, maybe?

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread steve
___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-devel Tell you what: You get RHEL to include it and I'll push SUSE about SLES. I mean 6.5 just came out and they did not

Re: [SSSD] [PATCHES] Fixes for sss_cache

2013-12-04 Thread Sumit Bose
On Tue, Dec 03, 2013 at 02:01:27PM +0100, Jakub Hrozek wrote: On Thu, Nov 28, 2013 at 05:55:44PM +0100, Sumit Bose wrote: On Wed, Nov 27, 2013 at 02:50:35PM +0100, Jakub Hrozek wrote: On Tue, Nov 26, 2013 at 11:51:41AM +0100, Sumit Bose wrote: Hi, Steeve found some issues when

[SSSD] Could not create empty directory [tests_krb5_utils]. Please remove [tests_krb5_utils].

2013-12-04 Thread Antek Baranski
Hi there I grabbed the sources for the 1.11.2 release ( https://fedorahosted.org/released/sssd/sssd-1.11.2.tar.gz) and tried to build the rpm packages on a CentOS 6.4 (2.6.32-358.23.2.el6.x86_64) and it fails because of the krb5_util tests and subsequent check_and_open tests. I googled the error

[SSSD] [PATCH] MAN: Add a link explaining search scopes

2013-12-04 Thread Jakub Hrozek
As discussed in one of the threads on sssd-devel, it might be nice to add a link an explanation on different LDAP search scopes. From 7503dbad16762cd63a3b62b8c745aa7e3e94289f Mon Sep 17 00:00:00 2001 From: Jakub Hrozek jhro...@redhat.com Date: Wed, 4 Dec 2013 14:51:59 +0100 Subject: [PATCH 1/2]

Re: [SSSD] Could not create empty directory [tests_krb5_utils]. Please remove [tests_krb5_utils].

2013-12-04 Thread Jakub Hrozek
On Tue, Dec 03, 2013 at 03:29:53PM -0800, Antek Baranski wrote: Hi there I grabbed the sources for the 1.11.2 release ( https://fedorahosted.org/released/sssd/sssd-1.11.2.tar.gz) and tried to build the rpm packages on a CentOS 6.4 (2.6.32-358.23.2.el6.x86_64) and it fails because of the

Re: [SSSD] Could not create empty directory [tests_krb5_utils]. Please remove [tests_krb5_utils].

2013-12-04 Thread Lukas Slebodnik
On (03/12/13 15:29), Antek Baranski wrote: Hi there I grabbed the sources for the 1.11.2 release ( https://fedorahosted.org/released/sssd/sssd-1.11.2.tar.gz) and tried to build the rpm packages on a CentOS 6.4 (2.6.32-358.23.2.el6.x86_64) and it fails because of the krb5_util tests and subsequent

Re: [SSSD] [PATCH] MAN: Add a link explaining search scopes

2013-12-04 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/04/2013 08:58 AM, Jakub Hrozek wrote: As discussed in one of the threads on sssd-devel, it might be nice to add a link an explanation on different LDAP search scopes. Ack -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.15 (GNU/Linux)

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Jakub Hrozek
On Wed, Dec 04, 2013 at 09:24:58AM +, greg.lehm...@csiro.au wrote: Tell you what: You get RHEL to include it and I'll push SUSE about SLES. I mean 6.5 just came out and they did not increase the version by even a minor step over 6.4! Version numbers mean nothing in the enterprise world. To

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Jakub Hrozek
On Wed, Dec 04, 2013 at 09:24:58AM +, greg.lehm...@csiro.au wrote: -Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of steve Sent: Wednesday, 4 December 2013 6:20 PM To:

[SSSD] [PATCH] NSS: Fix memory leak in sss_setnetgrent

2013-12-04 Thread Lukas Slebodnik
ehlo, struct nss_cmd_ctx was not released in function nss_cmd_setnetgrent_done and it wasn't used in the other function, because getnetgrent creates its own nss_cmd_ctx context. struct nss_cmd_ctx was released after closing client because it was allocated under client context. Memory leak is

Re: [SSSD] [PATCH] MAN: Add a link explaining search scopes

2013-12-04 Thread Jakub Hrozek
On Wed, Dec 04, 2013 at 09:06:08AM -0500, Stephen Gallagher wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/04/2013 08:58 AM, Jakub Hrozek wrote: As discussed in one of the threads on sssd-devel, it might be nice to add a link an explanation on different LDAP search scopes.

Re: [SSSD] [PATCH 2/2] sysv/gentoo: Send debug output to a file instead of stderr

2013-12-04 Thread Jakub Hrozek
On Mon, Dec 02, 2013 at 09:22:40PM +0100, Jakub Hrozek wrote: On Mon, Dec 02, 2013 at 06:37:08PM +, Markos Chandras wrote: Output from init scripts should go to a file (ideally in /var/log directory) instead of stderr. Signed-off-by: Markos Chandras hwoar...@gentoo.org ---

Re: [SSSD] [PATCH 1/2] sysv/gentoo: Use xdm if possible

2013-12-04 Thread Jakub Hrozek
On Mon, Dec 02, 2013 at 09:23:53PM +0100, Jakub Hrozek wrote: On Mon, Dec 02, 2013 at 09:21:22PM +0100, Jakub Hrozek wrote: On Mon, Dec 02, 2013 at 06:37:07PM +, Markos Chandras wrote: Allow sssd to use the xdm wrapper so login managers can use sssd to authenticate users.

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Lukas Slebodnik
On (04/12/13 16:42), steve wrote: On Wed, 2013-12-04 at 15:13 +0100, Jakub Hrozek wrote: On Wed, Dec 04, 2013 at 09:24:58AM +, greg.lehm...@csiro.au wrote: Tell you what: You get RHEL to include it and I'll push SUSE about SLES. I mean 6.5 just came out and they did not increase the

Re: [SSSD] [PATCH] SUBDOMAINS: Reuse cached results if DP is offline

2013-12-04 Thread Sumit Bose
On Tue, Dec 03, 2013 at 03:49:56PM +0100, Jakub Hrozek wrote: On Fri, Nov 29, 2013 at 12:11:03PM +0100, Jakub Hrozek wrote: On Fri, Nov 29, 2013 at 12:06:37PM +0100, Sumit Bose wrote: On Thu, Nov 28, 2013 at 04:02:21PM +0100, Jakub Hrozek wrote: Please see the simple attached patch. To

Re: [SSSD] [PATCHES] Fixes for sss_cache

2013-12-04 Thread Jakub Hrozek
On Wed, Dec 04, 2013 at 10:42:52AM +0100, Sumit Bose wrote: On Tue, Dec 03, 2013 at 02:01:27PM +0100, Jakub Hrozek wrote: On Thu, Nov 28, 2013 at 05:55:44PM +0100, Sumit Bose wrote: On Wed, Nov 27, 2013 at 02:50:35PM +0100, Jakub Hrozek wrote: On Tue, Nov 26, 2013 at 11:51:41AM +0100,

Re: [SSSD] Warn to syslog if an unresponsive subprocess is terminated

2013-12-04 Thread Jakub Hrozek
On Mon, Dec 02, 2013 at 07:41:19PM +0100, Pavel Reichl wrote: Hello, first four patches address issues of freeing mt_svc structure. Last one adds warns to syslog. Pavel Reichl The patches work well and the code looks good. I have a couple of very small nitpicks, see inline. From

Re: [SSSD] [PATCHES] Fixes for sss_cache

2013-12-04 Thread Sumit Bose
On Wed, Dec 04, 2013 at 05:22:06PM +0100, Jakub Hrozek wrote: On Wed, Dec 04, 2013 at 10:42:52AM +0100, Sumit Bose wrote: On Tue, Dec 03, 2013 at 02:01:27PM +0100, Jakub Hrozek wrote: On Thu, Nov 28, 2013 at 05:55:44PM +0100, Sumit Bose wrote: On Wed, Nov 27, 2013 at 02:50:35PM +0100,

Re: [SSSD] Warn to syslog if an unresponsive subprocess is terminated

2013-12-04 Thread Dmitri Pal
On 12/04/2013 12:14 PM, Jakub Hrozek wrote: On Mon, Dec 02, 2013 at 07:41:19PM +0100, Pavel Reichl wrote: Hello, first four patches address issues of freeing mt_svc structure. Last one adds warns to syslog. Pavel Reichl The patches work well and the code looks good. I have a couple of very

Re: [SSSD] Design Doc review request for AD GPO Integration

2013-12-04 Thread Yassir Elley
Comments inline. - Original Message - On 12/03/2013 12:38 PM, Yassir Elley wrote: Hi all, I have written up a Design Document for GPO Integration with the AD Provider [1]. The Document includes the design, as well as some Unresolved Issues. Your review of the document would be

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Greg.Lehmann
-Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of Jakub Hrozek Sent: Thursday, 5 December 2013 12:14 AM To: sssd-devel@lists.fedorahosted.org Subject: Re: [SSSD] problem with AD nested group expansion,

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Greg.Lehmann
-Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of steve Sent: Thursday, 5 December 2013 1:43 AM To: sssd-devel@lists.fedorahosted.org Subject: Re: [SSSD] problem with AD nested group expansion, maybe?

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread steve
On Wed, 2013-12-04 at 23:10 +, greg.lehm...@csiro.au wrote: -Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of steve Sent: Thursday, 5 December 2013 1:43 AM To: sssd-devel@lists.fedorahosted.org

Re: [SSSD] Design Doc review request for AD GPO Integration

2013-12-04 Thread Dmitri Pal
On 12/04/2013 05:58 PM, Yassir Elley wrote: 2) IMO it should be stated as a clear non goal to create a pluggable CSE framework on the client at least at the moment and extend it on case by case basis. Although the intent is to only implement one CSE plugin module for the first

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Dmitri Pal
On 12/04/2013 07:11 PM, steve wrote: On Wed, 2013-12-04 at 23:10 +, greg.lehm...@csiro.au wrote: -Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of steve Sent: Thursday, 5 December 2013 1:43 AM To:

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Dmitri Pal
On 12/04/2013 06:06 PM, greg.lehm...@csiro.au wrote: -Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of Jakub Hrozek Sent: Thursday, 5 December 2013 12:14 AM To: sssd-devel@lists.fedorahosted.org

Re: [SSSD] Design Doc review request for AD GPO Integration

2013-12-04 Thread Simo Sorce
On Wed, 2013-12-04 at 21:28 -0500, Dmitri Pal wrote: My point is that the whole page should be about AD access provider and the GPO is its implementation detail not a generic mechanism. There can be a separate page where you can describe how GPO generally works and reference it. Right now the

Re: [SSSD] problem with AD nested group expansion, maybe?

2013-12-04 Thread Greg.Lehmann
-Original Message- From: sssd-devel-boun...@lists.fedorahosted.org [mailto:sssd-devel- boun...@lists.fedorahosted.org] On Behalf Of Jakub Hrozek Sent: Thursday, 5 December 2013 12:14 AM To: sssd-devel@lists.fedorahosted.org Subject: Re: [SSSD] problem with AD nested group expansion,