Re: [SSSD] krb5 ticket renewal via gnome-screensaver not working

On Tue, Nov 10, 2009 at 11:36:45PM -0500, Brian J. Murrell wrote: On Mon, 2009-11-09 at 21:19 +0100, Sumit Bose wrote: Does this mean you are still seeing [Credentials cache I/O operation failed XXX] in krb5_child.log? No. I am seeing nothing new at all in the krb5_child.log when

Re: [SSSD] wildcard chars for sssd.conf?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/11/2009 01:26 AM, David O'Brien wrote: from IRC when everyone was sleeping ;-) davido [Mon 18:28] is there such a thing as a wildcard character that works in /etc/sssd/sssd.conf ? davido [Mon 18:29] I tried filter_groups = * to see if I

Re: [SSSD] [PATCH] Fixes for proxy provider

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/11/2009 09:22 AM, Sumit Bose wrote: Hi, this patch fixes a bug in the procy provider and makes proxy_pam_target a mandatory option, because we do not ship a matching pam configuration for the old default. bye, Sumit

Re: [SSSD] [PATCH] found a double free while testing rawhide

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/11/2009 10:07 AM, Simo Sorce wrote: abrtd in rawhide is quite handy, it catches segfaulted apps and dumps the core and other accessory info in a directory for the admin to see. Here it is a fix for a segfault I found on one of my test

[SSSD] [PATCH] rework check_cache()

Today I stumbled on check_cache while working on the initgroups caching. It took a long discussion on IRC with Steven to find out exactly how it behaved, and we found a bug in it. Given the complexity I decide to refactor it so that hopefully it will be clearer and will not require arguing over

[SSSD] [PATCH] Make 'permit' the default for the access target

Hi, this patch make 'permit' the default for the access target. This means that access_provider has to be set explicitly if a specific provider should be used, e.g. access_provider=ipa. bye, Sumit From ee3ff411494c7bae1158b7baef1adc24ebdbe342 Mon Sep 17 00:00:00 2001 From: Sumit Bose

Re: [SSSD] krb5 ticket renewal via gnome-screensaver not working

On Wed, 2009-11-11 at 09:35 +0100, Sumit Bose wrote: ah, sorry, I misinterpreted your original post. I thought a ccache file wasn't created at all when using gnome-screensaver. No, you didn't mis-interpret I don't think. Here's what happened: 1. Logged into gnome, got a ccache file

Re: [SSSD] krb5 ticket renewal via gnome-screensaver not working

On Wed, 2009-11-11 at 17:27 -0500, Brian J. Murrell wrote: If you want to renew the TGT with every authentication you have to use a per-user unique ccache file, e.g. FILE:%d/krb5cc_%U. I don't think so. I think even a per-login-session ccache file that will be created by a gnome

Re: [SSSD] [PATCH] rework check_cache()

On Wed, 2009-11-11 at 13:55 -0500, Simo Sorce wrote: Today I stumbled on check_cache while working on the initgroups caching. It took a long discussion on IRC with Steven to find out exactly how it behaved, and we found a bug in it. Given the complexity I decide to refactor it so that

[SSSD] [PATCH] better var name

Comment in patch says all. Simo. -- Simo Sorce * Red Hat, Inc * New York From cf01eae6e4518c1abdd75c37b0796d468e76eaa5 Mon Sep 17 00:00:00 2001 From: Simo Sorce sso...@redhat.com Date: Wed, 11 Nov 2009 20:44:23 -0500 Subject: [PATCH] Change var name to make its use more clear. Change memctx to