[SSSD] [PATCH] Use SO_PEERCRED on the PAM socket

2010-03-29 Thread Sumit Bose
Hi, please find attached my second attempt to exchange uid, gid and pid between PAM client and responder. This new apporoach does not require any communication between the client and the responder and should behave much better than the previous one based on SO_PASSCRED and SCM_CREDENTIALS. To

Re: [SSSD] Synchronous sysdb

2010-03-29 Thread Sumit Bose
On Sun, Mar 21, 2010 at 10:54:28AM -0400, Simo Sorce wrote: I have completed the work of making sysdb synchronous in my fedorapeople repository. Although all core functionality seem to work we need some careful testing of stuff I touched that I wasn't able to test like the IPA HBAC stuff.

Re: [SSSD] Patch to fix LDAP ID backend GSSAPI credential expired messages

2010-03-29 Thread Eugene Indenbom
Hi Simon, I have to admit that the patch is really quite big and, actually, it has by far exceeded size and time limits I would normally apply to patches to third party components. The patch can be theoretically split into 3 parts: 1. Changes to ldap_child related to returned ticket expiration