Re: [SSSD] [PATCH] pam: Incerease p11 child timeout

2015-08-14 Thread Roland Mainz
On 14 August 2015 at 14:40, Michal Židek mzi...@redhat.com wrote: Hi, this patch is a hotfix for pam-srv-failing tests. Increasing the timeout to 30 seconds seems to be enough. I do not want to make it too big because the timeout is currently not configurable. I'd like to talk to Sumit

Re: [SSSD] [PATCHES] Add support for Smartcard authentication

2015-07-27 Thread Roland Mainz
- Original Message - From: Roland Mainz rma...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Cc: Kai Engert keng...@redhat.com Sent: Tuesday, 21 July, 2015 3:08:44 AM Subject: Re: [SSSD] [PATCHES] Add support for Smartcard

Re: [SSSD] [PATCHES] Add support for Smartcard authentication

2015-07-20 Thread Roland Mainz
- Original Message - From: Sumit Bose sb...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Friday, 17 July, 2015 9:01:49 PM Subject: Re: [SSSD] [PATCHES] Add support for Smartcard authentication On Fri, Jul 10, 2015 at 06:40:30PM +0200, Sumit Bose wrote: Hi, this is

Re: [SSSD] [PATCH] SELINUX: Check the return value of setuid and setgid

2015-02-16 Thread Roland Mainz
- Original Message - From: Jakub Hrozek jhro...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Friday, February 13, 2015 5:31:40 PM Subject: Re: [SSSD] [PATCH] SELINUX: Check the return value of setuid and setgid On Thu, Feb 12, 2015 at 04:56:54AM -0500, Roland Mainz

[SSSD] Embedding l10n messages from one catalog into another l10n catalog's message text ... / was: Re: [PATCH] PAM: do not reject abruptly

2015-02-12 Thread Roland Mainz
- Original Message - From: Sumit Bose sb...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Wednesday, February 11, 2015 5:50:50 PM Subject: Re: [SSSD] [PATCH] PAM: do not reject abruptly On Wed, Feb 11, 2015 at 04:56:48PM +0100, Pavel Reichl wrote: Hello, please see

Re: [SSSD] [PATCH] MAN: libkrb5 and SSSD use different expansions

2015-02-12 Thread Roland Mainz
- Original Message - From: Dan Lavu side_cont...@runlevelone.net To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Friday, January 30, 2015 11:22:53 AM Subject: Re: [SSSD] [PATCH] MAN: libkrb5 and SSSD use different expansions

Re: [SSSD] [PATCH] SELINUX: Set permissive umask for selinux operations

2015-01-27 Thread Roland Mainz
- Original Message - From: Jakub Hrozek jhro...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Tuesday, January 27, 2015 11:31:58 AM Subject: Re: [SSSD] [PATCH] SELINUX: Set permissive umask for selinux operations On Tue, Jan 27, 2015 at 10:51:24AM +0100, Jakub Hrozek

Re: [SSSD] [PATCH] SELINUX: Set permissive umask for selinux operations

2015-01-27 Thread Roland Mainz
- Original Message - From: Roland Mainz rma...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Tuesday, January 27, 2015 4:41:28 PM Subject: Re: [SSSD] [PATCH] SELINUX: Set permissive umask for selinux operations

Re: [SSSD] [PATCH] SELINUX: Set permissive umask for selinux operations

2015-01-27 Thread Roland Mainz
wrote: On Tue, Jan 27, 2015 at 11:07:01AM -0500, Roland Mainz wrote: - Original Message - From: Roland Mainz rma...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Tuesday, January 27, 2015 4:41:28 PM

Re: [SSSD] [PATCH] TOOLS: add missing '\n' in debug messages

2015-01-22 Thread Roland Mainz
- Original Message - From: Pavel Reichl prei...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Thursday, January 22, 2015 2:05:56 PM Subject: Re: [SSSD] [PATCH] TOOLS: add missing '\n' in debug messages On 01/22/2015 01:27 PM, Pavel Reichl wrote: Hello, please see

Re: [SSSD] [PATCH] TOOLS: add missing '\n' in debug messages

2015-01-22 Thread Roland Mainz
- Original Message - From: Lukas Slebodnik lsleb...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Thursday, January 22, 2015 2:31:13 PM Subject: Re: [SSSD] [PATCH] TOOLS: add missing '\n' in debug messages On (22/01/15

Re: [SSSD] [PATCH] TOOLS: add missing '\n' in debug messages

2015-01-22 Thread Roland Mainz
:52), Roland Mainz wrote: - Original Message - From: Lukas Slebodnik lsleb...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Thursday, January 22, 2015 2:31:13 PM Subject: Re: [SSSD] [PATCH] TOOLS: add missing '\n

Re: [SSSD] Config file ownership and cwrap tests

2015-01-21 Thread Roland Mainz
- Original Message - From: Nikolai Kondrashov nikolai.kondras...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Wednesday, January 21, 2015 3:49:39 PM Subject: Re: [SSSD] Config file ownership and cwrap tests [snip]

Re: [SSSD] Config file ownership and cwrap tests

2015-01-21 Thread Roland Mainz
- Original Message - From: Nikolai Kondrashov nikolai.kondras...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Friday, January 16, 2015 7:29:53 PM Subject: Re: [SSSD] Config file ownership and cwrap tests On 01/16/2015

Re: [SSSD] Config file ownership and cwrap tests

2015-01-21 Thread Roland Mainz
/2015 02:05 PM, Roland Mainz wrote: - Original Message - From: Nikolai Kondrashov nikolai.kondras...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Friday, January 16, 2015 1:22:29 PM Subject: Re: [SSSD] Config file

Re: [SSSD] Config file ownership and cwrap tests

2015-01-21 Thread Roland Mainz
- Original Message - From: Nikolai Kondrashov nikolai.kondras...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Friday, January 16, 2015 1:22:29 PM Subject: Re: [SSSD] Config file ownership and cwrap tests On 01/14/2015

Re: [SSSD] Config file ownership and cwrap tests

2015-01-21 Thread Roland Mainz
/2015 03:09 PM, Roland Mainz wrote: - Original Message - From: Nikolai Kondrashov nikolai.kondras...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Wednesday, January 21, 2015 1:19:57 PM Subject: Re: [SSSD] Config file

[SSSD] Using XInclude for DocBook/XML manpages ... / was: Re: xml schema used for generating man pages

2015-01-16 Thread Roland Mainz
Hi! [Sending response to the list so the information can be referenced in the future] - Original Message - From: Roland Mainz rma...@redhat.com To: Pavel Reichl prei...@redhat.com Sent: Thursday, January 15, 2015 1:43:49 PM Subject: Re: xml schema used for generating man

[SSSD] Using XIncludes for longer programlisting chunks ? / was: Re: [PATCH] MAN: Remove indentation in element programlistening

2015-01-16 Thread Roland Mainz
- Original Message - From: Jakub Hrozek jhro...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Wednesday, January 14, 2015 4:19:15 PM Subject: Re: [SSSD] [PATCH] MAN: Remove indentation in element programlistening On Wed, Jan 14, 2015 at 09:10:29AM -0500, Roland Mainz

Re: [SSSD] [PATCH] MAN: Remove indentation in element programlistening

2015-01-14 Thread Roland Mainz
- Original Message - From: Lukas Slebodnik lsleb...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Wednesday, January 14, 2015 2:11:22 PM Subject: [SSSD] [PATCH] MAN: Remove indentation in element programlistening ehlo, I noticed that indentation of examples for

Re: [SSSD] Pass fd's around via /proc/$pid/fd/ ... / was: Re: sssd.conf ownership

2014-11-28 Thread Roland Mainz
, Roland Mainz wrote: - Original Message - From: Jakub Hrozek jhro...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Saturday, November 22, 2014 2:24:17 PM Subject: Re: [SSSD] sssd.conf ownership On Fri, Nov 21, 2014 at 04:26:58PM -0500, Stephen Gallagher wrote

[SSSD] Using ACLs to deal with sssd.conf ownership ? / was: Re: sssd.conf ownership

2014-11-27 Thread Roland Mainz
- Original Message - From: Jakub Hrozek jhro...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Friday, November 21, 2014 8:03:01 PM Subject: [SSSD] sssd.conf ownership Hi, I was going through our design page that describes the rootless sssd and I'd like to discuss the

[SSSD] Pass fd's around via /proc/$pid/fd/ ... / was: Re: sssd.conf ownership

2014-11-27 Thread Roland Mainz
- Original Message - From: Jakub Hrozek jhro...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Saturday, November 22, 2014 2:24:17 PM Subject: Re: [SSSD] sssd.conf ownership On Fri, Nov 21, 2014 at 04:26:58PM -0500, Stephen Gallagher wrote: On Fri, 2014-11-21 at

[SSSD] glibc |getgrouplist()|/|initgroups()| performace ... / was: Re: memory cache for initgroups

2014-11-10 Thread Roland Mainz
- Original Message - From: Simo Sorce sso...@redhat.com To: Niels de Vos nde...@redhat.com Cc: sssd-devel@lists.fedorahosted.org, Vijay Bellur vbel...@redhat.com Sent: Thursday, November 6, 2014 11:32:53 PM Subject: Re: [SSSD] memory cache for initgroups On Thu, 6 Nov 2014

Re: [SSSD] memory cache for initgroups

2014-11-10 Thread Roland Mainz
- Original Message - From: Simo Sorce sso...@redhat.com To: Niels de Vos nde...@redhat.com Cc: gluster-de...@gluster.org, sssd-devel@lists.fedorahosted.org, Vijay Bellur vbel...@redhat.com Sent: Friday, November 7, 2014 2:42:50 PM Subject: Re: [SSSD] memory cache for initgroups

[SSSD] Does sssd have any scripts which has messages which require localisation (=l10n) ?

2014-09-12 Thread Roland Mainz
Hi! [Follow-up to another discussion on IRC] Does sssd have any scripts which has messages which require localisation (=l10n) ? Bye, Roland -- __ . . __ (o.\ \/ /.o) rma...@redhat.com \__\/\/__/ IPA/Kerberos5 team /O /==\ O\ (;O/ \/ \O;)

Re: [SSSD] [PATCH] CI: Improve usability of ci script

2014-09-11 Thread Roland Mainz
- Original Message - From: Lukas Slebodnik lsleb...@redhat.com To: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Thursday, September 11, 2014 10:36:23 AM Subject: Re: [SSSD] [PATCH] CI: Improve usability of ci script On (05/09/14

Re: [SSSD] [PATCH] CI: Improve usability of ci script

2014-09-11 Thread Roland Mainz
On 09/11/2014 08:42 PM, Roland Mainz wrote: Some (minor) nits (not needed for now): 1. Please use source, not ., e.g. turn... -- snip -- . shared_variables.sh -- snip -- ... into ... -- snip -- source shared_variables.sh -- snip -- The reason is that source is more readable

Re: [SSSD] [PATCH v3 1/1] NFSv4 client: man page

2014-09-08 Thread Roland Mainz
diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in index 938c779..b35b2e5 100644 --- a/contrib/sssd.spec.in +++ b/contrib/sssd.spec.in @@ -622,6 +622,7 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man5/sssd.conf.5* %{_mandir}/man5/sssd-simple.5* %{_mandir}/man5/sssd-sudo.5*

Re: [SSSD] [PATCH v2 1/2] NFSv4 client: man page

2014-09-03 Thread Roland Mainz
diff --git a/src/man/Makefile.am b/src/man/Makefile.am index 546e0ad..a92ac0d 100644 --- a/src/man/Makefile.am +++ b/src/man/Makefile.am @@ -45,7 +45,9 @@ man_MANS = \ sssd.8 sssd.conf.5 sssd-ldap.5 \ sssd-krb5.5 sssd-simple.5 \ sssd_krb5_locator_plugin.8 sss_groupshow.8 \ -

Re: [SSSD] [PATCH v2 2/2] NFSv4 client: man page - add to RPM spec

2014-09-03 Thread Roland Mainz
diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in index 6e9d969..9b25cbc 100644 --- a/contrib/sssd.spec.in +++ b/contrib/sssd.spec.in @@ -666,6 +666,7 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man5/sssd.conf.5* %{_mandir}/man5/sssd-simple.5* %{_mandir}/man5/sssd-sudo.5*

Re: [SSSD] sss.so idmapd plugin manual page... / was: Re: [PATCH v3 0/4] NFSv4 rpc.idmapd plugin

2014-09-02 Thread Roland Mainz
- Original Message - From: Noam Meltzer tsn...@gmail.com To: Roland Mainz rma...@redhat.com Cc: Development of the System Security Services Daemon sssd-devel@lists.fedorahosted.org Sent: Tuesday, September 2, 2014 1:07:17 PM Subject: Re: sss.so idmapd plugin manual page

Re: [SSSD] [PATCH] AUTOCONF: Update detection of libnfsidmap

2014-09-02 Thread Roland Mainz
- Original Message - From: Lukas Slebodnik lsleb...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Tuesday, September 2, 2014 4:29:29 PM Subject: [SSSD] [PATCH] AUTOCONF: Update detection of libnfsidmap ehlo, There were used two variables with_nfs_idmap and with_nfs,

Re: [SSSD] [PATCH v3 0/4] NFSv4 rpc.idmapd plugin

2014-09-01 Thread Roland Mainz
src/external/libnfsidmap.m4 create mode 100644 src/sss_client/nfs/nfsidmap_internal.h create mode 100644 src/sss_client/nfs/sss_nfs_client.c I asked Roland Mainz (CC-ed) to help us review the patches. Some of the discussion happened off-list, but I think the final ACK should be given

Re: [SSSD] Atomic |rename()| ... / was: Re: [PATCH] https://fedorahosted.org/sssd/ticket/2410

2014-08-28 Thread Roland Mainz
-0400, Roland Mainz wrote: I like your approach better and do not expect any issues since rename() is expected to be atomic. Please find comments below. Erm... |rename(src, dest)| with |src| and |dest| in the same directory can be considered an atomic operation... beyond

[SSSD] Atomic |rename()| ... / was: Re: [PATCH] https://fedorahosted.org/sssd/ticket/2410

2014-08-26 Thread Roland Mainz
- Original Message - From: Sumit Bose sb...@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Tuesday, August 26, 2014 12:06:53 PM Subject: Re: [SSSD] [PATCH] https://fedorahosted.org/sssd/ticket/2410 On Tue, Aug 26, 2014 at 10:46:59AM +0200, Jakub Hrozek wrote: On Fri, Aug