[SSSD] sssd behaviour with large nested netgroups.

2016-05-09 Thread Malahal Naineni
Hi All, We have ganesha NFS server that calls innetgr() call to validate client request. Noticing that all ganesha threads were making innetgr() calls and spending a lot of time there, I wrote a small script that just repeatedly calls innetgr() with same host name but with two different

[SSSD] Re: [PATCH] RESPONDERS: Negative caching of local users

2016-05-09 Thread Petr Cech
On 05/09/2016 01:15 PM, Petr Cech wrote: On 05/05/2016 05:34 PM, Petr Cech wrote: Hello, this patch resolves [1]. This adds new behaviour of negative caching of locals, so it needs new tests. I will send patch with tests soon, but not today. It is applicable after RESPONDERS: Negcache in

[SSSD] Re: [PATCH] GPO: Add "unity" to ad_gpo_map_interactive

2016-05-09 Thread Stephen Gallagher
On 05/06/2016 07:05 AM, Lukas Slebodnik wrote: > On (06/05/16 06:58), Stephen Gallagher wrote: >>> On May 6, 2016, at 6:55 AM, Lukas Slebodnik wrote: >>> On (05/05/16 10:46), Stephen Gallagher wrote: Ubuntu systems use "unity" as their screen-locker. Without this in

[SSSD] Re: [PATCH] MAN: Remove references to the obsolete PubkeyAgent ssh option

2016-05-09 Thread Jan Cholasta
Hi, On 27.4.2016 12:19, Jakub Hrozek wrote: Hi, please see the attached trivial patch. The issue was reported by adelton on IRC. LGTM. Honza -- Jan Cholasta ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org

[SSSD] Re: [PATCH] RESPONDERS: Negative caching of local users

2016-05-09 Thread Petr Cech
On 05/05/2016 05:34 PM, Petr Cech wrote: Hello, this patch resolves [1]. This adds new behaviour of negative caching of locals, so it needs new tests. I will send patch with tests soon, but not today. It is applicable after RESPONDERS: Negcache in resp_ctx [2]. For clarity, there is branch

[SSSD] Re: [PATCH] Make sdap_process_group_send() static

2016-05-09 Thread Lukas Slebodnik
On (09/05/16 12:20), Petr Cech wrote: >On 05/09/2016 10:01 AM, Petr Cech wrote: >> On 05/09/2016 09:54 AM, Jakub Hrozek wrote: >> > Hi, >> > >> > a trivial code-hygiene patch is attached. >> > >> > >> > 0001-Make-sdap_process_group_send-static.patch >> > >> > >> > From

[SSSD] Re: [PATCH] Make sdap_process_group_send() static

2016-05-09 Thread Petr Cech
On 05/09/2016 10:01 AM, Petr Cech wrote: On 05/09/2016 09:54 AM, Jakub Hrozek wrote: Hi, a trivial code-hygiene patch is attached. 0001-Make-sdap_process_group_send-static.patch From ac33446aaa78b65c6891f486e9ad462101f88a79 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek

[SSSD] Re: [PATCH] Unit tests for pam_sss using pam_wrapper (need help with CI..)

2016-05-09 Thread Jakub Hrozek
On Wed, May 04, 2016 at 11:36:57PM +0200, Lukas Slebodnik wrote: > On (27/04/16 10:51), Jakub Hrozek wrote: > >Hi, > > > >the attached patches implement unit tests for the pam_sss module using > >pam_wrapper and libpamtest. In my testing, the coverage is around 75% > >with mostly the parts that

[SSSD] [PATCH] systemtap-based performance probes

2016-05-09 Thread Jakub Hrozek
Hi, the attached patches are the first self-contained part of my performance work. Using them, I analyzed the performance of 'id' as the worst-case, then realized most of the issues are around processing and storing large groups. The results gathered using these scripts are in fact the base of

[SSSD] Re: [PATCH] Make sdap_process_group_send() static

2016-05-09 Thread Petr Cech
On 05/09/2016 09:54 AM, Jakub Hrozek wrote: Hi, a trivial code-hygiene patch is attached. 0001-Make-sdap_process_group_send-static.patch From ac33446aaa78b65c6891f486e9ad462101f88a79 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 8 Dec 2015 21:10:27 +0100

[SSSD] [PATCH] Make sdap_process_group_send() static

2016-05-09 Thread Jakub Hrozek
Hi, a trivial code-hygiene patch is attached. >From ac33446aaa78b65c6891f486e9ad462101f88a79 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 8 Dec 2015 21:10:27 +0100 Subject: [PATCH] Make sdap_process_group_send() static --- src/providers/ldap/sdap_async_groups.c |

[SSSD] Re: [DESIGN][PATCH] IPA HBAC Time Rules

2016-05-09 Thread Stanislav Laznicka
On 05/09/2016 09:32 AM, Jakub Hrozek wrote: On Mon, May 09, 2016 at 09:21:53AM +0200, Stanislav Laznicka wrote: From what I've gathered, you would also like to have it ported to FreeBSD and Solaris (correct me if I'm wrong). I already did some research on how to get the Olson name there but it

[SSSD] Re: [DESIGN][PATCH] IPA HBAC Time Rules

2016-05-09 Thread Jakub Hrozek
On Mon, May 09, 2016 at 09:21:53AM +0200, Stanislav Laznicka wrote: > From what I've gathered, you would also like to have > it ported to FreeBSD and Solaris (correct me if I'm wrong). I already did > some research on how to get the Olson name there but it all seems a bit > messy so if you know of

[SSSD] [DESIGN][PATCH] IPA HBAC Time Rules

2016-05-09 Thread Stanislav Laznicka
Hello, So after quite some time I finally got some HBAC time rules code I am able to present. I forked your sssd Github repository and added the code in my branch, the forked repo can be found on the following link: https://github.com/stlaz/sssd/tree/freeipa-timerules Please note that if