On 07/09/2015 11:15 AM, Pavel Reichl wrote:
Hello,
please see attached patches.
1st patch adds return value ENOENT to sss_iface_addr_list_get() so I
can provide more concrete debug message for missing interface or if
interface is not suitable (missing IP address)
2nd patch:
* I introduced
On Thu, Jul 09, 2015 at 11:50:06AM +0200, Jan Pazdziora wrote:
On Thu, Jul 09, 2015 at 11:33:11AM +0200, Sumit Bose wrote:
Most probable because ad...@example.test is the Kerberos principal of
your user. If SSSD cannot find a matching user name and the name
contains an '@' it tries to
Hello,
please see attached patches.
1st patch adds return value ENOENT to sss_iface_addr_list_get() so I can
provide more concrete debug message for missing interface or if
interface is not suitable (missing IP address)
2nd patch:
* I introduced new public function
Hi!
There is my repaired patch. All of yours comments were helpful.
I renamed the function to sss_cmd2str(), but maybe it could be
sss_cli_cmd2str(). I am not sure with it, but if it is better, I will
rename it again.
Petr
On 07/08/2015 03:26 PM, Sumit Bose wrote:
On Wed, Jul 08, 2015 at
On Tue, Jun 30, 2015 at 02:09:31PM +0200, Sumit Bose wrote:
It does the right thing and I'm able to get the value back via
pam_getenv(pamh, PAM_ENV_AUTH_DOMAIN) in my Apache module.
My only concern is that the domain name as returned by sssd is
lowercase which does not really match the
On Thu, Jul 09, 2015 at 11:27:14AM +0200, Jan Pazdziora wrote:
On Tue, Jun 30, 2015 at 02:09:31PM +0200, Sumit Bose wrote:
It does the right thing and I'm able to get the value back via
pam_getenv(pamh, PAM_ENV_AUTH_DOMAIN) in my Apache module.
My only concern is that the domain name
On Thu, Jul 09, 2015 at 11:33:11AM +0200, Sumit Bose wrote:
Most probable because ad...@example.test is the Kerberos principal of
your user. If SSSD cannot find a matching user name and the name
contains an '@' it tries to find a Kerberos principal which matches the
full given name.
But
On Tue, Jun 30, 2015 at 02:15:27PM +0200, Jan Pazdziora wrote:
If for the applications realm is also useful, then
a) the app can query the sssd dbus interface for the matching realm
for the domain
b) we can also return the realm, although the expectations should be
set
