[SSSD] [sssd PR#5434][+Deferred] Adding multihost tests for ad_allow_remote_domain_local_groups, bz1883488 bz1756240
URL: https://github.com/SSSD/sssd/pull/5434 Title: #5434: Adding multihost tests for ad_allow_remote_domain_local_groups, bz1883488 bz1756240 Label: +Deferred ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5712][-Waiting for review] Health and Support Analyzer - Add request log parsing utility
URL: https://github.com/SSSD/sssd/pull/5712 Title: #5712: Health and Support Analyzer - Add request log parsing utility Label: -Waiting for review ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5712][+Accepted] Health and Support Analyzer - Add request log parsing utility
URL: https://github.com/SSSD/sssd/pull/5712 Title: #5712: Health and Support Analyzer - Add request log parsing utility Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5712][comment] Health and Support Analyzer - Add request log parsing utility
URL: https://github.com/SSSD/sssd/pull/5712 Title: #5712: Health and Support Analyzer - Add request log parsing utility pbrezina commented: """ @SSSD/developers if you have further comments please, share them now. I will merge it tomorrow. """ See the full comment at https://github.com/SSSD/sssd/pull/5712#issuecomment-942562706 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5712][comment] Health and Support Analyzer - Add request log parsing utility
URL: https://github.com/SSSD/sssd/pull/5712 Title: #5712: Health and Support Analyzer - Add request log parsing utility pbrezina commented: """ Ack. Thank you for your patience. """ See the full comment at https://github.com/SSSD/sssd/pull/5712#issuecomment-942561691 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5755][-Ready to push] Tests: support subid ranges managed by FreeIPA
URL: https://github.com/SSSD/sssd/pull/5755 Title: #5755: Tests: support subid ranges managed by FreeIPA Label: -Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5755][comment] Tests: support subid ranges managed by FreeIPA
URL: https://github.com/SSSD/sssd/pull/5755 Title: #5755: Tests: support subid ranges managed by FreeIPA pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5755 * `master` * 8e22258c1d7ba8ee04e397ddf562f5efa21c3d06 - Tests: support subid ranges managed by FreeIPA """ See the full comment at https://github.com/SSSD/sssd/pull/5755#issuecomment-942552741 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5755][closed] Tests: support subid ranges managed by FreeIPA
URL: https://github.com/SSSD/sssd/pull/5755 Author: aborah-sudo Title: #5755: Tests: support subid ranges managed by FreeIPA Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5755/head:pr5755 git checkout pr5755 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5755][-Accepted] Tests: support subid ranges managed by FreeIPA
URL: https://github.com/SSSD/sssd/pull/5755 Title: #5755: Tests: support subid ranges managed by FreeIPA Label: -Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5755][+Pushed] Tests: support subid ranges managed by FreeIPA
URL: https://github.com/SSSD/sssd/pull/5755 Title: #5755: Tests: support subid ranges managed by FreeIPA Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5802][closed] MONITOR: reduce logs severity around signalling
URL: https://github.com/SSSD/sssd/pull/5802 Author: alexey-tikhonov Title: #5802: MONITOR: reduce logs severity around signalling Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5802/head:pr5802 git checkout pr5802 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5802][-Ready to push] MONITOR: reduce logs severity around signalling
URL: https://github.com/SSSD/sssd/pull/5802 Title: #5802: MONITOR: reduce logs severity around signalling Label: -Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5802][-Accepted] MONITOR: reduce logs severity around signalling
URL: https://github.com/SSSD/sssd/pull/5802 Title: #5802: MONITOR: reduce logs severity around signalling Label: -Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5802][+Pushed] MONITOR: reduce logs severity around signalling
URL: https://github.com/SSSD/sssd/pull/5802 Title: #5802: MONITOR: reduce logs severity around signalling Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5802][comment] MONITOR: reduce logs severity around signalling
URL: https://github.com/SSSD/sssd/pull/5802 Title: #5802: MONITOR: reduce logs severity around signalling pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5802 * `master` * 01ff8155baea989c42664985ea939cb93beb31e7 - MONITOR: reduce logs severity around signalling and termination of services to avoid useless in those cases backtraces """ See the full comment at https://github.com/SSSD/sssd/pull/5802#issuecomment-942552570 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5823][closed] krb5_child: fixed incorrect checks on length value
URL: https://github.com/SSSD/sssd/pull/5823 Author: alexey-tikhonov Title: #5823: krb5_child: fixed incorrect checks on length value Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5823/head:pr5823 git checkout pr5823 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5823][-Ready to push] krb5_child: fixed incorrect checks on length value
URL: https://github.com/SSSD/sssd/pull/5823 Title: #5823: krb5_child: fixed incorrect checks on length value Label: -Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5823][-Accepted] krb5_child: fixed incorrect checks on length value
URL: https://github.com/SSSD/sssd/pull/5823 Title: #5823: krb5_child: fixed incorrect checks on length value Label: -Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5823][+Pushed] krb5_child: fixed incorrect checks on length value
URL: https://github.com/SSSD/sssd/pull/5823 Title: #5823: krb5_child: fixed incorrect checks on length value Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5823][comment] krb5_child: fixed incorrect checks on length value
URL: https://github.com/SSSD/sssd/pull/5823 Title: #5823: krb5_child: fixed incorrect checks on length value pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5823 * `master` * 03f6ef367d6907784dc358b75813098138c1b160 - krb5_child: fixed incorrect checks on length value """ See the full comment at https://github.com/SSSD/sssd/pull/5823#issuecomment-942552347 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][-Ready to push] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets Label: -Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][closed] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Author: sumit-bose Title: #5825: krb5: use hidden file when creating config snippets Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5825/head:pr5825 git checkout pr5825 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][-Accepted] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets Label: -Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][+Pushed] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][comment] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets pbrezina commented: """ Pushed PR: https://github.com/SSSD/sssd/pull/5825 * `master` * 794127106627e01e4ab9d242b8087bb5cccb9524 - krb5: use hidden file when creating config snippets """ See the full comment at https://github.com/SSSD/sssd/pull/5825#issuecomment-942552117 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5755][+Ready to push] Tests: support subid ranges managed by FreeIPA
URL: https://github.com/SSSD/sssd/pull/5755 Title: #5755: Tests: support subid ranges managed by FreeIPA Label: +Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5802][+Ready to push] MONITOR: reduce logs severity around signalling
URL: https://github.com/SSSD/sssd/pull/5802 Title: #5802: MONITOR: reduce logs severity around signalling Label: +Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5823][+Ready to push] krb5_child: fixed incorrect checks on length value
URL: https://github.com/SSSD/sssd/pull/5823 Title: #5823: krb5_child: fixed incorrect checks on length value Label: +Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][+Ready to push] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets Label: +Ready to push ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][comment] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets sumit-bose commented: """ > There is `ding-libs/path_utils` that has relevant functions but I think it > doesn't make sense to pull it in... Hi, yes, there are the POSIX `basename()` and `dirname` calls as well, but those and the ding-libs versions are not aware of talloc, so I thought implementing it directly would be more efficient. bye, Sumit """ See the full comment at https://github.com/SSSD/sssd/pull/5825#issuecomment-942348678 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][synchronized] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825
Author: sumit-bose
Title: #5825: krb5: use hidden file when creating config snippets
Action: synchronized
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5825/head:pr5825
git checkout pr5825
From 0af6545696d95c813708ad9ba0993dd63ee4f7e4 Mon Sep 17 00:00:00 2001
From: Sumit Bose
Date: Wed, 13 Oct 2021 09:54:53 +0200
Subject: [PATCH] krb5: use hidden file when creating config snippets
When creating config snippets fir libkrb5 SSSD first creates a temporary
file with a random suffix and renames this file after all content is
written. If this temporary file is not properly removed or renamed dur
to an error it might confuse libkrb5.
To avoid this confusion with this patch the temporary files are created
as hidden files, the name will start with a '.', which are ignored by
libkrb5.
Resolves: https://github.com/SSSD/sssd/issues/5824
---
src/tests/cmocka/test_utils.c | 21 +
src/util/domain_info_utils.c | 26 --
src/util/util.h | 2 ++
3 files changed, 47 insertions(+), 2 deletions(-)
diff --git a/src/tests/cmocka/test_utils.c b/src/tests/cmocka/test_utils.c
index 536cee59f4..6661740087 100644
--- a/src/tests/cmocka/test_utils.c
+++ b/src/tests/cmocka/test_utils.c
@@ -1513,6 +1513,26 @@ void test_sss_write_krb5_conf_snippet(void **state)
free(path);
}
+void test_get_hidden_path(void **state)
+{
+char *s;
+
+assert_null(get_hidden_tmp_path(NULL, NULL));
+assert_null(get_hidden_tmp_path(NULL, "/"));
+assert_null(get_hidden_tmp_path(NULL, "/abc/"));
+
+s = get_hidden_tmp_path(NULL, "abc");
+assert_string_equal(s, ".abcXX");
+talloc_free(s);
+
+s = get_hidden_tmp_path(NULL, "/abc");
+assert_string_equal(s, "/.abcXX");
+talloc_free(s);
+
+s = get_hidden_tmp_path(NULL, "/xyz/xyz/xyz//abc");
+assert_string_equal(s, "/xyz/xyz/xyz//.abcXX");
+talloc_free(s);
+}
struct unique_file_test_ctx {
char *filename;
@@ -2127,6 +2147,7 @@ int main(int argc, const char *argv[])
setup_leak_tests,
teardown_leak_tests),
cmocka_unit_test(test_sss_write_krb5_conf_snippet),
+cmocka_unit_test(test_get_hidden_path),
cmocka_unit_test_setup_teardown(test_sss_unique_file,
unique_file_test_setup,
unique_file_test_teardown),
diff --git a/src/util/domain_info_utils.c b/src/util/domain_info_utils.c
index c2e510ecf1..67f1c8d88a 100644
--- a/src/util/domain_info_utils.c
+++ b/src/util/domain_info_utils.c
@@ -471,7 +471,7 @@ sss_write_domain_mappings(struct sss_domain_info *domain)
DEBUG(SSSDBG_FUNC_DATA, "Mapping file for domain [%s] is [%s]\n",
domain->name, mapping_file);
-tmp_file = talloc_asprintf(tmp_ctx, "%sXX", mapping_file);
+tmp_file = get_hidden_tmp_path(tmp_ctx, mapping_file);
if (tmp_file == NULL) {
ret = ENOMEM;
goto done;
@@ -631,6 +631,28 @@ errno_t get_dom_names(TALLOC_CTX *mem_ctx,
return ret;
}
+char *get_hidden_tmp_path(TALLOC_CTX *mem_ctx, const char *path)
+{
+const char *s;
+
+if (path == NULL) {
+return NULL;
+}
+
+s = strrchr(path, '/');
+if (s == NULL) {
+/* No path, just file name */
+return talloc_asprintf(mem_ctx, ".%sXX", path);
+} else if ( *(s + 1) == '\0') {
+/* '/' is the last character, there is no filename */
+DEBUG(SSSDBG_OP_FAILURE, "Missing file name in [%s].\n", path);
+return NULL;
+}
+
+return talloc_asprintf(mem_ctx, "%.*s.%sXX", (int)(s - path + 1),
+ path, s+1);
+}
+
static errno_t sss_write_krb5_snippet_common(const char *file_name,
const char *content)
{
@@ -649,7 +671,7 @@ static errno_t sss_write_krb5_snippet_common(const char *file_name,
return ENOMEM;
}
-tmp_file = talloc_asprintf(tmp_ctx, "%sXX", file_name);
+tmp_file = get_hidden_tmp_path(tmp_ctx, file_name);
if (tmp_file == NULL) {
DEBUG(SSSDBG_OP_FAILURE, "talloc_asprintf failed.\n");
ret = ENOMEM;
diff --git a/src/util/util.h b/src/util/util.h
index bcbb9ac72f..e85cd12022 100644
--- a/src/util/util.h
+++ b/src/util/util.h
@@ -637,6 +637,8 @@ errno_t sss_get_domain_mappings_content(TALLOC_CTX *mem_ctx,
errno_t sss_write_domain_mappings(struct sss_domain_info *domain);
+char *get_hidden_tmp_path(TALLOC_CTX *mem_ctx, const char *path);
+
errno_t sss_write_krb5_conf_snippet(const char *path, bool canonicalize,
bool udp_limit);
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an
[SSSD] [sssd PR#5825][comment] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets alexey-tikhonov commented: """ Thank you, ACK. """ See the full comment at https://github.com/SSSD/sssd/pull/5825#issuecomment-942396039 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][+Accepted] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][comment] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets alexey-tikhonov commented: """ There is `ding-libs/path_utils` that has relevant functions but I think it doesn't make sense to pull it in... """ See the full comment at https://github.com/SSSD/sssd/pull/5825#issuecomment-942226742 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5782][synchronized] CONFDB: Change ownership of config.ldb
URL: https://github.com/SSSD/sssd/pull/5782
Author: thalman
Title: #5782: CONFDB: Change ownership of config.ldb
Action: synchronized
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5782/head:pr5782
git checkout pr5782
From 1f3868e797b3d75e0154499ca45bfd6d09577576 Mon Sep 17 00:00:00 2001
From: Tomas Halman
Date: Wed, 8 Sep 2021 14:18:35 +0200
Subject: [PATCH 1/2] CONFDB: Change ownership of config.ldb
Config database is owned by root. This prevents our socket
activated services to start because they are started under
the sssd user. Changing the ownership to sssd fixes the issue.
Resolves: https://github.com/SSSD/sssd/issues/5781
---
src/confdb/confdb.c| 3 ++
src/monitor/monitor.c | 2 +-
src/tests/cwrap/group | 1 +
src/tests/cwrap/passwd | 1 +
src/util/usertools.c | 63 ++
src/util/util.h| 4 +++
6 files changed, 73 insertions(+), 1 deletion(-)
diff --git a/src/confdb/confdb.c b/src/confdb/confdb.c
index b7a73d97b3..7a718cc628 100644
--- a/src/confdb/confdb.c
+++ b/src/confdb/confdb.c
@@ -673,8 +673,11 @@ int confdb_init(TALLOC_CTX *mem_ctx,
}
old_umask = umask(SSS_DFL_UMASK);
+sss_set_sssd_user_eid();
ret = ldb_connect(cdb->ldb, confdb_location, 0, NULL);
+
+sss_restore_sssd_user_eid();
umask(old_umask);
if (ret != LDB_SUCCESS) {
DEBUG(SSSDBG_FATAL_FAILURE, "Unable to open config database [%s]\n",
diff --git a/src/monitor/monitor.c b/src/monitor/monitor.c
index 60a9658642..a213b2fb47 100644
--- a/src/monitor/monitor.c
+++ b/src/monitor/monitor.c
@@ -1603,7 +1603,7 @@ errno_t load_configuration(TALLOC_CTX *mem_ctx,
/* Allow configuration database to be accessible
* when SSSD runs as nonroot */
-ret = chown(cdb_file, ctx->uid, ctx->gid);
+ret = chown(cdb_file, sss_sssd_user_uid(), sss_sssd_user_gid());
if (ret != 0) {
ret = errno;
DEBUG(SSSDBG_FATAL_FAILURE,
diff --git a/src/tests/cwrap/group b/src/tests/cwrap/group
index d0cea659ea..1a3766e630 100644
--- a/src/tests/cwrap/group
+++ b/src/tests/cwrap/group
@@ -1,2 +1,3 @@
+root:x:0:
sssd:x:123:
foogroup:x:10001:
diff --git a/src/tests/cwrap/passwd b/src/tests/cwrap/passwd
index 862ccfe03e..0511a91bcb 100644
--- a/src/tests/cwrap/passwd
+++ b/src/tests/cwrap/passwd
@@ -1,2 +1,3 @@
+root:x:0:0:root:/root:/bin/bash
sssd:x:123:456:sssd unprivileged user:/:/sbin/nologin
foobar:x:10001:10001:User for SSSD testing:/home/foobar:/bin/bash
diff --git a/src/util/usertools.c b/src/util/usertools.c
index 8c2ed4e2de..8871ba7b51 100644
--- a/src/util/usertools.c
+++ b/src/util/usertools.c
@@ -835,3 +835,66 @@ int sss_output_fqname(TALLOC_CTX *mem_ctx,
talloc_zfree(tmp_ctx);
return ret;
}
+
+static void sss_sssd_user_uid_and_gid(uid_t *uid, gid_t *gid)
+{
+static uid_t sssd_uid;
+static uid_t sssd_gid;
+static bool resolved = false;
+
+errno_t ret;
+
+if (! resolved) {
+ret = sss_user_by_name_or_uid(SSSD_USER, _uid, _gid);
+if (ret != EOK) {
+DEBUG(SSSDBG_CRIT_FAILURE, "failed to get sssd user (" SSSD_USER ") uid/gid, using root\n");
+if (uid != NULL) {
+*uid = 0;
+}
+if (gid != NULL) {
+*gid = 0;
+}
+return;
+} else {
+resolved = true;
+}
+}
+
+if (uid != NULL) {
+*uid = sssd_uid;
+}
+
+if (gid != NULL) {
+*gid = sssd_gid;
+}
+}
+
+uid_t sss_sssd_user_uid(void)
+{
+uid_t uid;
+sss_sssd_user_uid_and_gid(, NULL);
+return uid;
+}
+
+gid_t sss_sssd_user_gid(void)
+{
+gid_t gid;
+sss_sssd_user_uid_and_gid(NULL, );
+return gid;
+}
+
+void sss_set_sssd_user_eid(void)
+{
+if (geteuid() == 0) {
+seteuid(sss_sssd_user_uid());
+setegid(sss_sssd_user_gid());
+}
+}
+
+void sss_restore_sssd_user_eid(void)
+{
+if (getuid() == 0) {
+seteuid(getuid());
+setegid(getgid());
+}
+}
diff --git a/src/util/util.h b/src/util/util.h
index bcbb9ac72f..94df2a8b99 100644
--- a/src/util/util.h
+++ b/src/util/util.h
@@ -383,6 +383,10 @@ errno_t sss_canonicalize_ip_address(TALLOC_CTX *mem_ctx,
const char * const * get_known_services(void);
errno_t sss_user_by_name_or_uid(const char *input, uid_t *_uid, gid_t *_gid);
+uid_t sss_sssd_user_uid(void);
+gid_t sss_sssd_user_gid(void);
+void sss_set_sssd_user_eid(void);
+void sss_restore_sssd_user_eid(void);
int split_on_separator(TALLOC_CTX *mem_ctx, const char *str,
const char sep, bool trim, bool skip_empty,
From 52ffabf89ebcdc4be947798748d47eb7804635d7 Mon Sep 17 00:00:00 2001
From: Tomas Halman
Date: Mon, 20 Sep 2021 13:05:14 +
Subject: [PATCH 2/2] CONFDB: Change ownership before dropping privileges
From previous SSSD version, config file can exist and can be
owned by root. To allow smooth transition we can change
[SSSD] [sssd PR#5825][+Bugzilla] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825 Title: #5825: krb5: use hidden file when creating config snippets Label: +Bugzilla ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD] [sssd PR#5825][opened] krb5: use hidden file when creating config snippets
URL: https://github.com/SSSD/sssd/pull/5825
Author: sumit-bose
Title: #5825: krb5: use hidden file when creating config snippets
Action: opened
PR body:
"""
When creating config snippets fir libkrb5 SSSD first creates a temporary
file with a random suffix and renames this file after all content is
written. If this temporary file is not properly removed or renamed dur
to an error it might confuse libkrb5.
To avoid this confusion with this patch the temporary files are created
as hidden files, the name will start with a '.', which are ignored by
libkrb5.
Resolves: https://github.com/SSSD/sssd/issues/5824
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5825/head:pr5825
git checkout pr5825
From ecb4a007571baf73f03ad08c23ab76b56659d4f1 Mon Sep 17 00:00:00 2001
From: Sumit Bose
Date: Wed, 13 Oct 2021 09:54:53 +0200
Subject: [PATCH] krb5: use hidden file when creating config snippets
When creating config snippets fir libkrb5 SSSD first creates a temporary
file with a random suffix and renames this file after all content is
written. If this temporary file is not properly removed or renamed dur
to an error it might confuse libkrb5.
To avoid this confusion with this patch the temporary files are created
as hidden files, the name will start with a '.', which are ignored by
libkrb5.
Resolves: https://github.com/SSSD/sssd/issues/5824
---
src/tests/cmocka/test_utils.c | 21 +
src/util/domain_info_utils.c | 26 --
src/util/util.h | 2 ++
3 files changed, 47 insertions(+), 2 deletions(-)
diff --git a/src/tests/cmocka/test_utils.c b/src/tests/cmocka/test_utils.c
index 536cee59f4..6661740087 100644
--- a/src/tests/cmocka/test_utils.c
+++ b/src/tests/cmocka/test_utils.c
@@ -1513,6 +1513,26 @@ void test_sss_write_krb5_conf_snippet(void **state)
free(path);
}
+void test_get_hidden_path(void **state)
+{
+char *s;
+
+assert_null(get_hidden_tmp_path(NULL, NULL));
+assert_null(get_hidden_tmp_path(NULL, "/"));
+assert_null(get_hidden_tmp_path(NULL, "/abc/"));
+
+s = get_hidden_tmp_path(NULL, "abc");
+assert_string_equal(s, ".abcXX");
+talloc_free(s);
+
+s = get_hidden_tmp_path(NULL, "/abc");
+assert_string_equal(s, "/.abcXX");
+talloc_free(s);
+
+s = get_hidden_tmp_path(NULL, "/xyz/xyz/xyz//abc");
+assert_string_equal(s, "/xyz/xyz/xyz//.abcXX");
+talloc_free(s);
+}
struct unique_file_test_ctx {
char *filename;
@@ -2127,6 +2147,7 @@ int main(int argc, const char *argv[])
setup_leak_tests,
teardown_leak_tests),
cmocka_unit_test(test_sss_write_krb5_conf_snippet),
+cmocka_unit_test(test_get_hidden_path),
cmocka_unit_test_setup_teardown(test_sss_unique_file,
unique_file_test_setup,
unique_file_test_teardown),
diff --git a/src/util/domain_info_utils.c b/src/util/domain_info_utils.c
index c2e510ecf1..0673930ee3 100644
--- a/src/util/domain_info_utils.c
+++ b/src/util/domain_info_utils.c
@@ -471,7 +471,7 @@ sss_write_domain_mappings(struct sss_domain_info *domain)
DEBUG(SSSDBG_FUNC_DATA, "Mapping file for domain [%s] is [%s]\n",
domain->name, mapping_file);
-tmp_file = talloc_asprintf(tmp_ctx, "%sXX", mapping_file);
+tmp_file = get_hidden_tmp_path(tmp_ctx, mapping_file);
if (tmp_file == NULL) {
ret = ENOMEM;
goto done;
@@ -631,6 +631,28 @@ errno_t get_dom_names(TALLOC_CTX *mem_ctx,
return ret;
}
+char *get_hidden_tmp_path(TALLOC_CTX *mem_ctx, const char *path)
+{
+char *s;
+
+if (path == NULL) {
+return NULL;
+}
+
+s = strrchr(path, '/');
+if (s == NULL) {
+/* No path, just file name */
+return talloc_asprintf(mem_ctx, ".%sXX", path);
+} else if ( *(s + 1) == '\0') {
+/* '/' is the last character, there is no filename */
+DEBUG(SSSDBG_OP_FAILURE, "Missing file name in [%s].\n", path);
+return NULL;
+}
+
+return talloc_asprintf(mem_ctx, "%.*s.%sXX", (int)(s - path + 1),
+ path, s+1);
+}
+
static errno_t sss_write_krb5_snippet_common(const char *file_name,
const char *content)
{
@@ -649,7 +671,7 @@ static errno_t sss_write_krb5_snippet_common(const char *file_name,
return ENOMEM;
}
-tmp_file = talloc_asprintf(tmp_ctx, "%sXX", file_name);
+tmp_file = get_hidden_tmp_path(tmp_ctx, file_name);
if (tmp_file == NULL) {
DEBUG(SSSDBG_OP_FAILURE, "talloc_asprintf failed.\n");
ret = ENOMEM;
diff --git a/src/util/util.h b/src/util/util.h
index bcbb9ac72f..e85cd12022 100644
--- a/src/util/util.h
+++ b/src/util/util.h
@@ -637,6 +637,8 @@ errno_t
[SSSD][sssd PR#5814][comment] Tests: sss_override does not take precedence over override_homedir di…
URL: https://github.com/SSSD/sssd/pull/5814 Title: #5814: Tests: sss_override does not take precedence over override_homedir di… sgoveas commented: """ Please move test to a separate file like test_local_overrides.py with marker 'localoverrides'. Add requirement "local_overrides" """ See the full comment at https://github.com/SSSD/sssd/pull/5814#issuecomment-941970297 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[SSSD][sssd PR#5814][+Changes requested] Tests: sss_override does not take precedence over override_homedir di…
URL: https://github.com/SSSD/sssd/pull/5814 Title: #5814: Tests: sss_override does not take precedence over override_homedir di… Label: +Changes requested ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
