[SSSD] Announcing SSSD 1.15.2

SSSD 1.15.2 === The SSSD team is proud to announce the release of version 1.15.2 of the System Security Services Daemon. The tarball can be downloaded from https://releases.pagure.org/SSSD/sssd/ RPM packages will be made available for Fedora shortly. Feedback Please provide

[SSSD] [sssd PR#196][comment] SSSD-1.15 - config-check: Message when sssd.conf is missing

URL: https://github.com/SSSD/sssd/pull/196 Title: #196: SSSD-1.15 - config-check: Message when sssd.conf is missing mzidek-rh commented: """ Sorry, I do not understand your last comment. Can you please summarize it in an pagure issue? I am little bit confused (but if I understand it correctly

[SSSD] [sssd PR#192][comment] Add certificate mapping library

URL: https://github.com/SSSD/sssd/pull/192 Title: #192: Add certificate mapping library sumit-bose commented: """ retest this please """ See the full comment at https://github.com/SSSD/sssd/pull/192#issuecomment-286795274 ___ sssd-devel mailing list

[SSSD] Re: RFC: 1.15.2 release notes

On Wed, Mar 15, 2017 at 04:52:18PM +0100, Sumit Bose wrote: > > * The SSSD D-Bus interface gained two new methods: > >``FindByNameAndCertificate`` and ``ListByCertificate``. These methods > > will > >be used primarily by IPA to correctly match multple users who use the >

[SSSD] Re: RFC: 1.15.2 release notes

On Wed, Mar 15, 2017 at 04:27:26PM +0100, Fabiano Fidêncio wrote: > > * Several issues related to socket-activating the NSS service, especially > >if SSSD was configured to use a non-privileged user were fixed. The NSS > >service now starts as root to avoid triggering a name-service

[SSSD] [sssd PR#186][closed] Subdomain config

URL: https://github.com/SSSD/sssd/pull/186 Author: mzidek-rh Title: #186: Subdomain config Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/186/head:pr186 git checkout pr186 ___

[SSSD] [sssd PR#186][comment] Subdomain config

URL: https://github.com/SSSD/sssd/pull/186 Title: #186: Subdomain config jhrozek commented: """ * master: 61854f17c8de6548fb56bb7ad959708109d76fc3 62a1570f01053ec61e894ee3e58fc759ee809c6e 231bd1b34023daa3080cf461085e6e4aa7f4d733 ebe05e32b5af9b1ee404ebe492e52096d45fb675 """ See the full

[SSSD] [sssd PR#186][-Accepted] Subdomain config

URL: https://github.com/SSSD/sssd/pull/186 Title: #186: Subdomain config Label: -Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] [sssd PR#186][+Pushed] Subdomain config

URL: https://github.com/SSSD/sssd/pull/186 Title: #186: Subdomain config Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: RFC: 1.15.2 release notes

On Wed, Mar 15, 2017 at 04:17:51PM +0100, Jakub Hrozek wrote: > Hi, > > I prepared release notes for today's release. They are written in > anticipation that PR#186 with the subdomain config will be merged. > > The RST I pushed to the sssd/docs repo is below: > > SSSD 1.15.2 > === > >

[SSSD] Re: RFC: 1.15.2 release notes

On Wed, Mar 15, 2017 at 4:17 PM, Jakub Hrozek wrote: > Hi, > > I prepared release notes for today's release. They are written in > anticipation that PR#186 with the subdomain config will be merged. > > The RST I pushed to the sssd/docs repo is below: > > SSSD 1.15.2 >

[SSSD] [sssd PR#186][comment] Subdomain config

URL: https://github.com/SSSD/sssd/pull/186 Title: #186: Subdomain config jhrozek commented: """ CI: http://sssd-ci.duckdns.org/logs/job/64/93/summary.html """ See the full comment at https://github.com/SSSD/sssd/pull/186#issuecomment-28617 ___

[SSSD] [sssd PR#183][comment] More socket-activation fixes

URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes fidencio commented: """ On Wed, Mar 15, 2017 at 4:17 PM, lslebodn wrote: > BTW feel free to fix TOCTOU in different PR > Sure thing. I'll open an issue and fix the problem in a

[SSSD] RFC: 1.15.2 release notes

Hi, I prepared release notes for today's release. They are written in anticipation that PR#186 with the subdomain config will be merged. The RST I pushed to the sssd/docs repo is below: SSSD 1.15.2 === Highlights -- * It is now possible to configure certain parameters of a

[SSSD] [sssd PR#183][closed] More socket-activation fixes

URL: https://github.com/SSSD/sssd/pull/183 Author: fidencio Title: #183: More socket-activation fixes Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/183/head:pr183 git checkout pr183

[SSSD] [sssd PR#183][+Pushed] More socket-activation fixes

URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] [sssd PR#183][comment] More socket-activation fixes

URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes lslebodn commented: """ BTW feel free to fix TOCTOU in different PR """ See the full comment at https://github.com/SSSD/sssd/pull/183#issuecomment-286774565 ___

[SSSD] [sssd PR#196][comment] SSSD-1.15 - config-check: Message when sssd.conf is missing

URL: https://github.com/SSSD/sssd/pull/196 Title: #196: SSSD-1.15 - config-check: Message when sssd.conf is missing lslebodn commented: """ On (15/03/17 07:53), mzidek-rh wrote: >I just realized that the message needs to be printed conditionally only if >SSSD was configured with

[SSSD] [sssd PR#183][comment] More socket-activation fixes

URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes lslebodn commented: """ master: * ecaf0bb271812c3af3e5916f14da0e37d26994d2 * e19327b3b06e723e5162f0c91cb77ba254bb3dc7 * b7430c4f4b98efe08d9d13d202fbb76229628b30 LS """ See the full comment at

[SSSD] [sssd PR#183][comment] More socket-activation fixes

URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes lslebodn commented: """ ACK """ See the full comment at https://github.com/SSSD/sssd/pull/183#issuecomment-286767772 ___ sssd-devel mailing list --

[SSSD] [sssd PR#196][comment] SSSD-1.15 - config-check: Message when sssd.conf is missing

URL: https://github.com/SSSD/sssd/pull/196 Title: #196: SSSD-1.15 - config-check: Message when sssd.conf is missing mzidek-rh commented: """ I just realized that the message needs to be printed conditionally only if SSSD was configured with --enable-files-domain . I tested it in both cases.

[SSSD] [sssd PR#196][synchronized] SSSD-1.15 - config-check: Message when sssd.conf is missing

URL: https://github.com/SSSD/sssd/pull/196 Author: mzidek-rh Title: #196: SSSD-1.15 - config-check: Message when sssd.conf is missing Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/196/head:pr196 git checkout pr196

[SSSD] [sssd PR#186][comment] Subdomain config

URL: https://github.com/SSSD/sssd/pull/186 Title: #186: Subdomain config mzidek-rh commented: """ I agree with the comments. I also want to add a sssd specific configuration validator that will check if options used in subdomain are allowed and print message if they are not. But I need to

[SSSD] [sssd PR#170][+Pushed] PROXY: Remove duplicit users from group

URL: https://github.com/SSSD/sssd/pull/170 Title: #170: PROXY: Remove duplicit users from group Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] [sssd PR#170][-Accepted] PROXY: Remove duplicit users from group

URL: https://github.com/SSSD/sssd/pull/170 Title: #170: PROXY: Remove duplicit users from group Label: -Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] [sssd PR#170][comment] PROXY: Remove duplicit users from group

URL: https://github.com/SSSD/sssd/pull/170 Title: #170: PROXY: Remove duplicit users from group jhrozek commented: """ * master: ed2a5dad1ec82eda8a43ed8b0a05a6b01c3a6586 """ See the full comment at https://github.com/SSSD/sssd/pull/170#issuecomment-286761892

[SSSD] [sssd PR#170][closed] PROXY: Remove duplicit users from group

URL: https://github.com/SSSD/sssd/pull/170 Author: celestian Title: #170: PROXY: Remove duplicit users from group Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/170/head:pr170 git checkout pr170

[SSSD] [sssd PR#186][comment] Subdomain config

URL: https://github.com/SSSD/sssd/pull/186 Title: #186: Subdomain config jhrozek commented: """ The patches now look good to me, but I have some questions: 1) Could we (perhaps in a future patch) extend the dp_options structure with a boolean flag to indicate which options can be inherited?

[SSSD] [sssd PR#198][edited] secrets: support https in proxy provider

URL: https://github.com/SSSD/sssd/pull/198 Author: pbrezina Title: #198: secrets: support https in proxy provider Action: edited Changed field: body Original value: """ I had to switch to libcurl as a client in order to communicate properly over HTTPS protocol. I added several new options

[SSSD] [sssd PR#170][+Accepted] PROXY: Remove duplicit users from group

URL: https://github.com/SSSD/sssd/pull/170 Title: #170: PROXY: Remove duplicit users from group Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] [sssd PR#170][comment] PROXY: Remove duplicit users from group

URL: https://github.com/SSSD/sssd/pull/170 Title: #170: PROXY: Remove duplicit users from group fidencio commented: """ CI: http://sssd-ci.duckdns.org/logs/job/64/92/summary.html Whoever is going to push this patch ... please, update the issue link to pagure instead of SSSD trac. """ See the

[SSSD] [sssd PR#183][comment] More socket-activation fixes

URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes fidencio commented: """ @lslebodn: Patch set updated according to your comments. """ See the full comment at https://github.com/SSSD/sssd/pull/183#issuecomment-286740540

[SSSD] [sssd PR#183][synchronized] More socket-activation fixes

URL: https://github.com/SSSD/sssd/pull/183 Author: fidencio Title: #183: More socket-activation fixes Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/183/head:pr183 git checkout pr183 From

[SSSD] [sssd PR#197][edited] These patches add a new service for managing Kerberos credential patches. It follows the design document here: https://fedorahosted.org/sssd/wiki/DesignDocs/KCM

URL: https://github.com/SSSD/sssd/pull/197 Author: jhrozek Title: #197: These patches add a new service for managing Kerberos credential patches. It follows the design document here: https://fedorahosted.org/sssd/wiki/DesignDocs/KCM Action: edited Changed field: title Original value: """

[SSSD] [sssd PR#188][comment] Add the first version of the KCM responder

URL: https://github.com/SSSD/sssd/pull/188 Title: #188: Add the first version of the KCM responder jhrozek commented: """ Let's try this again from the branch that actually contains the current code """ See the full comment at https://github.com/SSSD/sssd/pull/188#issuecomment-286739035

[SSSD] [sssd PR#188][closed] Add the first version of the KCM responder

URL: https://github.com/SSSD/sssd/pull/188 Author: jhrozek Title: #188: Add the first version of the KCM responder Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/188/head:pr188 git checkout pr188

[SSSD] [sssd PR#183][comment] More socket-activation fixes

URL: https://github.com/SSSD/sssd/pull/183 Title: #183: More socket-activation fixes lslebodn commented: """ I would prefer to remove `open_and_fchown_debug_file` from the last patch. it requires more testing and root can write to any file. It will simplify testing. and

[SSSD] [sssd PR#196][opened] SSSD-1.15 - config-check: Message when sssd.conf is missing

URL: https://github.com/SSSD/sssd/pull/196 Author: mzidek-rh Title: #196: SSSD-1.15 - config-check: Message when sssd.conf is missing Action: opened PR body: """ SSSD 1.15 version for patch recently pushed to 1.14. sssctl config-check should print a message for user if no sssd.conf was

[SSSD] [sssd PR#194][+Pushed] config-check: Message when sssd.conf is missing

URL: https://github.com/SSSD/sssd/pull/194 Title: #194: config-check: Message when sssd.conf is missing Label: +Pushed ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to

[SSSD] [sssd PR#194][closed] config-check: Message when sssd.conf is missing

URL: https://github.com/SSSD/sssd/pull/194 Author: mzidek-rh Title: #194: config-check: Message when sssd.conf is missing Action: closed To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/194/head:pr194 git checkout pr194

[SSSD] [sssd PR#194][comment] config-check: Message when sssd.conf is missing

URL: https://github.com/SSSD/sssd/pull/194 Title: #194: config-check: Message when sssd.conf is missing lslebodn commented: """ On (15/03/17 04:05), mzidek-rh wrote: >I know this is a corner case, but I would like sssctl config-check to behave >more user friendly in the case when config file

[SSSD] [sssd PR#194][comment] config-check: Message when sssd.conf is missing

URL: https://github.com/SSSD/sssd/pull/194 Title: #194: config-check: Message when sssd.conf is missing mzidek-rh commented: """ I know this is a corner case, but I would like sssctl config-check to behave more user friendly in the case when config file is missing for whatever reason, it is

[SSSD] [sssd PR#192][comment] Add certificate mapping library

URL: https://github.com/SSSD/sssd/pull/192 Title: #192: Add certificate mapping library sumit-bose commented: """ Hi, Lukas, thank you for the review. I fixed the invalid read the two NULL RETURNS, the PW.SET_BUT_NOT_USED and the CLANG WARNING. It would be possible to save the result in a