Re: [SSSD] [PATCH] make ldap provider a little bit more resistant to errors

2009-10-26 Thread Simo Sorce
On Mon, 2009-10-26 at 20:15 -0400, Simo Sorce wrote: > On Mon, 2009-10-26 at 18:56 -0400, Simo Sorce wrote: > > I was seeing in some non-easily reproduceable cases errors returned by > > ldap_search_ext() that would hose the connection. The same connection > > handler would be used after the offlin

Re: [SSSD] [PATCH] make ldap provider a little bit more resistant to errors

2009-10-26 Thread Simo Sorce
On Mon, 2009-10-26 at 18:56 -0400, Simo Sorce wrote: > I was seeing in some non-easily reproduceable cases errors returned by > ldap_search_ext() that would hose the connection. The same connection > handler would be used after the offline timeout causing again the same > error (and us going offlin

[SSSD] [PATCH] make ldap provider a little bit more resistant to errors

2009-10-26 Thread Simo Sorce
I was seeing in some non-easily reproduceable cases errors returned by ldap_search_ext() that would hose the connection. The same connection handler would be used after the offline timeout causing again the same error (and us going offline again). This patch should fix it or at least make the code

[SSSD] [PATCH] Remove DP from the list of services in the example config

2009-10-26 Thread Stephen Gallagher
Pushed to master under a combination of the one-liner rule and the understanding that this file is never used without editing. -- Stephen Gallagher RHCE 804006346421761 Looking to carve out IT costs? www.redhat.com/carveoutcosts/ From fe93cf2e1d44e54cb4d5abfc00ad57b826cdbdff Mon Sep 17 00:00:00

Re: [SSSD] [PATCH] fix set last login function in pam handler

2009-10-26 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/26/2009 03:51 PM, Simo Sorce wrote: > On Mon, 2009-10-26 at 15:19 -0400, Simo Sorce wrote: >> See comments in commit message. >> Also add patch to fix some talloc_free -> talloc_zfree cases in sysdb > > As discussed on IRC respin to always set P

Re: [SSSD] [PATCH] fix set last login function in pam handler

2009-10-26 Thread Simo Sorce
On Mon, 2009-10-26 at 15:19 -0400, Simo Sorce wrote: > See comments in commit message. > Also add patch to fix some talloc_free -> talloc_zfree cases in sysdb As discussed on IRC respin to always set PAM_SYSTEM_ERR on error, given the set_last_login_send request never even have access to the preq-

[SSSD] [PATCH] fix set last login function in pam handler

2009-10-26 Thread Simo Sorce
See comments in commit message. Also add patch to fix some talloc_free -> talloc_zfree cases in sysdb Simo. -- Simo Sorce * Red Hat, Inc * New York >From 93543a3f6cc6fc9e2c38f2e5824363f5cc4c155d Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Mon, 26 Oct 2009 15:11:14 -0400 Subject: [PATCH 1/2]

[SSSD] [PATCH] added a ASQ search API for sysdb

2009-10-26 Thread Sumit Bose
Hi, this patch adds a sysdb interface for ASQ (attribute scoped query) searches. These are useful to limit searches to objects listed in member/memberof attributes (this is not limited to member/memberof you can take any attribute you want). bye, Sumit >From d7b027d5fa55b7e4db3aaecb156ae6a6384e4b

Re: [SSSD] [PATCHES] Minor fixes

2009-10-26 Thread Simo Sorce
On Mon, 2009-10-26 at 08:58 -0400, Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 10/26/2009 08:53 AM, Sumit Bose wrote: > > On Sat, Oct 24, 2009 at 02:07:15PM -0400, Simo Sorce wrote: > >> Shouldn't require comments. > >> > >> Simo. > > > > [PATCH] Add IPA conf

Re: [SSSD] [PATCHES] Minor fixes

2009-10-26 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/26/2009 08:53 AM, Sumit Bose wrote: > On Sat, Oct 24, 2009 at 02:07:15PM -0400, Simo Sorce wrote: >> Shouldn't require comments. >> >> Simo. > > [PATCH] Add IPA conf template, looks ok to me: ACK > > [PATCH] Copy option overrides, ACK, but plea

Re: [SSSD] [PATCHES] Minor fixes

2009-10-26 Thread Sumit Bose
On Sat, Oct 24, 2009 at 02:07:15PM -0400, Simo Sorce wrote: > Shouldn't require comments. > > Simo. [PATCH] Add IPA conf template, looks ok to me: ACK [PATCH] Copy option overrides, ACK, but please fix the typo in the patch description. Maybe it would be helpful to add a call to dump the curren

Re: [SSSD] [PATCH] Fix migration script for pre-0.5 local domains

2009-10-26 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/26/2009 08:16 AM, Jakub Hrozek wrote: > On 10/26/2009 01:10 PM, Stephen Gallagher wrote: >> On 10/26/2009 07:58 AM, Jakub Hrozek wrote: >>> Configuration files before 0.5.0 did not enforce provider= in local >>> domains it did special-case by dom

Re: [SSSD] [PATCH] Fix migration script for pre-0.5 local domains

2009-10-26 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/26/2009 01:10 PM, Stephen Gallagher wrote: > On 10/26/2009 07:58 AM, Jakub Hrozek wrote: >> Configuration files before 0.5.0 did not enforce provider= in local >> domains it did special-case by domain name (LOCAL). Our script was >> relying on pr

Re: [SSSD] [PATCH] Fix migration script for pre-0.5 local domains

2009-10-26 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/26/2009 07:58 AM, Jakub Hrozek wrote: > Configuration files before 0.5.0 did not enforce provider= in local > domains it did special-case by domain name (LOCAL). Our script was > relying on provider= value, this patch adds the special-casing in c

[SSSD] [PATCH] Fix migration script for pre-0.5 local domains

2009-10-26 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Configuration files before 0.5.0 did not enforce provider= in local domains it did special-case by domain name (LOCAL). Our script was relying on provider= value, this patch adds the special-casing in case the domain was called LOCAL. Fixes: RHBZ #530