[SSSD] Time-Based Policies in FreeIPA

2015-07-14 Thread Stanislav Laznicka
Hi, If you're a member of the FreeIPA-devel mailing list, you may already know me. I am currently trying to re-introduce the time-based policies for FreeIPA HBAC Rules to both FreeIPA and SSSD. For some more information, see the design at

Re: [SSSD] Time-Based Policies in FreeIPA

2015-07-14 Thread Stanislav Laznicka
On 07/14/2015 09:32 AM, Lukas Slebodnik wrote: On (14/07/15 09:11), Stanislav Laznicka wrote: Hi, If you're a member of the FreeIPA-devel mailing list, you may already know me. I am currently trying to re-introduce the time-based policies for FreeIPA HBAC Rules to both FreeIPA and SSSD. For

Re: [SSSD] Time-Based Policies in FreeIPA

2015-07-14 Thread Lukas Slebodnik
On (14/07/15 09:11), Stanislav Laznicka wrote: Hi, If you're a member of the FreeIPA-devel mailing list, you may already know me. I am currently trying to re-introduce the time-based policies for FreeIPA HBAC Rules to both FreeIPA and SSSD. For some more information, see the design at

Re: [SSSD] Time-Based Policies in FreeIPA

2015-07-14 Thread Sumit Bose
On Tue, Jul 14, 2015 at 09:11:28AM +0200, Stanislav Laznicka wrote: Hi, If you're a member of the FreeIPA-devel mailing list, you may already know me. I am currently trying to re-introduce the time-based policies for FreeIPA HBAC Rules to both FreeIPA and SSSD. For some more information, see

Re: [SSSD] [PATCH] UTIL: Function 2string for enum sss_cli_command

2015-07-14 Thread Petr Cech
On 07/13/2015 07:13 PM, Lukas Slebodnik wrote: On (13/07/15 10:57), Jakub Hrozek wrote: On Mon, Jul 13, 2015 at 09:47:46AM +0200, Lukas Slebodnik wrote: On (10/07/15 16:54), Jakub Hrozek wrote: On Wed, Jul 08, 2015 at 03:26:52PM +0200, Sumit Bose wrote: I would suggest that you put

Re: [SSSD] [PATCH] Update few debug messages

2015-07-14 Thread Lukas Slebodnik
On (19/06/15 12:53), Pavel Reichl wrote: On 06/19/2015 10:46 AM, Lukas Slebodnik wrote: On (19/06/15 10:37), Pavel Reichl wrote: On 06/18/2015 06:16 PM, Lukas Slebodnik wrote: ehlo, I noticed the same noise in log files as user in ticker 2678. It was a little bit related to the latest changes

Re: [SSSD] [PATCHES] Wildcard lookups for InfoPipe

2015-07-14 Thread Pavel Březina
On 07/13/2015 06:25 PM, Jakub Hrozek wrote: On Fri, Jul 10, 2015 at 01:30:07PM +0200, Pavel Březina wrote: On 07/09/2015 12:17 PM, Jakub Hrozek wrote: It may be also better to move them into the sysdb module? I would do that if we anticipate more listing intefaces using this kind of filter.

Re: [SSSD] [PATCHES] Wildcard lookups for InfoPipe

2015-07-14 Thread Jakub Hrozek
On Tue, Jul 14, 2015 at 02:39:13PM +0200, Pavel Březina wrote: *Patch #02 SYSDB: Add functions to look up multiple entries including name and custom filter* +static char *enum_filter(TALLOC_CTX *mem_ctx, + const char *base_filter, + const char

[SSSD] [PATCH] nss_check_name_of_well_known_sid() improve name splitting

2015-07-14 Thread Sumit Bose
Hi, this patch should fix https://fedorahosted.org/sssd/ticket/2717 . As you can see I added a new entry ipa_ad_default_names to the global nss context so that the regular expression string is only evaluated once. Since it is currently only used in nss_check_name_of_well_known_sid() I do the

Re: [SSSD] [PATCH] nss_check_name_of_well_known_sid() improve name splitting

2015-07-14 Thread Lukas Slebodnik
On (14/07/15 15:02), Sumit Bose wrote: Hi, this patch should fix https://fedorahosted.org/sssd/ticket/2717 . As you can see I added a new entry ipa_ad_default_names to the global nss context so that the regular expression string is only evaluated once. Since it is currently only used in

Re: [SSSD] [PATCH] test common: sss_dp_get_account_recv() fix assignment

2015-07-14 Thread Jakub Hrozek
On Fri, Jul 10, 2015 at 08:30:49PM +0200, Jakub Hrozek wrote: On Fri, Jul 10, 2015 at 05:48:57PM +0200, Sumit Bose wrote: Hi, this patch fixes a simple copy-and-paste issue in the common test code. Since we currently always call mock_account_recv() with the second and third argument

Re: [SSSD] Time-Based Policies in FreeIPA

2015-07-14 Thread Dmitri Pal
On 07/14/2015 04:50 AM, Sumit Bose wrote: On Tue, Jul 14, 2015 at 09:11:28AM +0200, Stanislav Laznicka wrote: Hi, If you're a member of the FreeIPA-devel mailing list, you may already know me. I am currently trying to re-introduce the time-based policies for FreeIPA HBAC Rules to both FreeIPA

[SSSD] [PATCH] Use NSCD path in execl()

2015-07-14 Thread Jakub Hrozek
Hi, this is a small cleanup patch, see the commit message. From caf8b6842309c3fb7891b44b71815a37ed4c833b Mon Sep 17 00:00:00 2001 From: Jakub Hrozek jhro...@redhat.com Date: Fri, 5 Jun 2015 17:10:21 +0200 Subject: [PATCH] Use NSCD path in execl() man execl says: The first argument, by

Re: [SSSD] [PATCH] Use NSCD path in execl()

2015-07-14 Thread Lukas Slebodnik
On (14/07/15 22:44), Jakub Hrozek wrote: Hi, this is a small cleanup patch, see the commit message. From caf8b6842309c3fb7891b44b71815a37ed4c833b Mon Sep 17 00:00:00 2001 From: Jakub Hrozek jhro...@redhat.com Date: Fri, 5 Jun 2015 17:10:21 +0200 Subject: [PATCH] Use NSCD path in execl() man