Re: [SSSD] [PATCHES] DYNDNS: support mult. interfaces for dyndns_iface opt

2015-07-24 Thread Jakub Hrozek
On Thu, Jul 23, 2015 at 09:54:49PM +0200, Jakub Hrozek wrote: On Thu, Jul 23, 2015 at 01:47:19PM +0200, Pavel Reichl wrote: I hope attached patch set addresses all concerns, thanks! My issues were addressed and the code seems to work. Coverity didn't find anything either. ACK * master:

[SSSD] [PATCH] SPEC: Update spec file for krb5_local_auth_plugin

2015-07-24 Thread Lukas Slebodnik
ehlo, patch is attached. LS From 9474dfc64cbd73ab25bf12660f6b55e5563fe14c Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik lsleb...@redhat.com Date: Fri, 24 Jul 2015 09:24:31 +0200 Subject: [PATCH] SPEC: Update spec file for krb5_local_auth_plugin krb5_localauth_plugin could be build only with

[SSSD] [PATCH] intg: Invalidate memory cache before removing files

2015-07-24 Thread Lukas Slebodnik
ehlo, attached is a workaround in integration tests for ticket #2726 LS From 1b3abcbdb0b5ce689992be382821c97ab86c8681 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik lsleb...@redhat.com Date: Fri, 24 Jul 2015 12:31:42 +0200 Subject: [PATCH] intg: Invalidate memory cache before removing files

[SSSD] [PATCHES] support local overrides

2015-07-24 Thread Pavel Březina
https://fedorahosted.org/sssd/ticket/2584 If you have any idea how to improve manual page, please, share it. From 58e7ac9f61c9dcc33e14a255daf026b563f06a8c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pavel=20B=C5=99ezina?= pbrez...@redhat.com Date: Fri, 24 Jul 2015 09:55:28 +0200 Subject: [PATCH

Re: [SSSD] [PATCH] intg_test: Add integration test for memory cache

2015-07-24 Thread Lukas Slebodnik
On (24/07/15 16:19), Sumit Bose wrote: On Fri, Jul 24, 2015 at 03:35:22PM +0200, Lukas Slebodnik wrote: ehlo, it is a first version of integration test for memory cache. The main purpose of this mail is to have some comments to the first version. cwrap doesn't support properly initgroups

[SSSD] [PATCH] [HBAC]: Better libhbac debuging

2015-07-24 Thread Petr Cech
Hi, according to https://fedorahosted.org/sssd/ticket/2703 I tried to add logging to the library HBAC. A) Logging is performed using an external function, which you can set by: # hbac_enable_debug(...) B) The specific implementation of such a function, you can see # hbac_debug_messages(...)

Re: [SSSD] [PATCH] intg: Invalidate memory cache before removing files

2015-07-24 Thread Jakub Hrozek
On Fri, Jul 24, 2015 at 04:41:04PM +0200, Michal Židek wrote: On 07/24/2015 12:34 PM, Lukas Slebodnik wrote: ehlo, attached is a workaround in integration tests for ticket #2726 LS ACK. * master: eabc1732ef91548616a699b7e9f8d30e5e7b8dd3 ___

Re: [SSSD] [PATCH] intg_test: Add integration test for memory cache

2015-07-24 Thread Sumit Bose
On Fri, Jul 24, 2015 at 03:35:22PM +0200, Lukas Slebodnik wrote: ehlo, it is a first version of integration test for memory cache. The main purpose of this mail is to have some comments to the first version. cwrap doesn't support properly initgroups therefore I used a ctype module for

Re: [SSSD] [PATCH] intg: Invalidate memory cache before removing files

2015-07-24 Thread Michal Židek
On 07/24/2015 12:34 PM, Lukas Slebodnik wrote: ehlo, attached is a workaround in integration tests for ticket #2726 LS ACK. -- Senior Principal Intern ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org

Re: [SSSD] [PATCH] mmap_cache: Override functions for initgr mmap cache

2015-07-24 Thread Lukas Slebodnik
On (24/07/15 15:36), Michal Židek wrote: On 07/24/2015 03:21 PM, Lukas Slebodnik wrote: On (17/07/15 10:16), Lukas Slebodnik wrote: On (16/07/15 19:19), Michal Židek wrote: On 07/16/2015 05:07 PM, Lukas Slebodnik wrote: On (16/07/15 13:46), Michal Židek wrote: On 07/15/2015 06:42 PM, Lukas

Re: [SSSD] [PATCH] intg_tests: Add regression test for 2163

2015-07-24 Thread Lukas Slebodnik
On (22/07/15 11:43), Jakub Hrozek wrote: On Mon, Jul 20, 2015 at 03:52:52PM +0200, Lukas Slebodnik wrote: On (20/07/15 15:46), Lukas Slebodnik wrote: ehlo, attached is a regression test for old ticket 2163. Currently it fails due to fix for ticket 2717 And now with attached patch. BTW

[SSSD] [PATCHES] DYDNDS: update quality of input for nsupdate

2015-07-24 Thread Pavel Reichl
Hello, please see attached patch set. Thanks! From 7d95190fd111cb59321a3adfcb249d7cd236dbbe Mon Sep 17 00:00:00 2001 From: Jakub Hrozek jhro...@redhat.com Date: Sun, 6 Jul 2014 22:53:27 +0200 Subject: [PATCH 1/9] DYNDNS: Add a new option dyndns_server Some environments use a different DNS

Re: [SSSD] [PATCHES] DYDNDS: update quality of input for nsupdate

2015-07-24 Thread Pavel Reichl
On 07/24/2015 07:41 PM, Pavel Reichl wrote: Hello, please see attached patch set. Thanks! ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-devel Hmm...I should have sent this to the

Re: [SSSD] [PATCHES] DYDNDS: update quality of input for nsupdate

2015-07-24 Thread Jakub Hrozek
On 24 Jul 2015, at 19:44, Pavel Reichl prei...@redhat.com wrote: On 07/24/2015 07:41 PM, Pavel Reichl wrote: Hello, please see attached patch set. Thanks! ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org

Re: [SSSD] [PATCH] AD: Handle cases where no GPOs apply

2015-07-24 Thread Lukas Slebodnik
On (24/07/15 18:41), Michal Židek wrote: On 07/23/2015 09:46 AM, Lukas Slebodnik wrote: On (20/07/15 10:41), Stephen Gallagher wrote: It is possible to have a machine where none of the GPOs associated with it include access-control rules. Currently, this results in a denial-by-system-error. We

Re: [SSSD] [PATCH] CONFDB: Assume config file version 2 if missing

2015-07-24 Thread Lukas Slebodnik
On (07/07/15 19:45), Michal Židek wrote: Hi! See the attached patch. Ticket: https://fedorahosted.org/sssd/ticket/2688 CI passed: http://sssd-ci.duckdns.org/logs/job/18/71/summary.html Thanks, Michal -- Senior Principal Intern From c67f8df99df4f1aafa41d57a84c8d1c19fb5d610 Mon Sep 17

Re: [SSSD] [PATCH] AD: Handle cases where no GPOs apply

2015-07-24 Thread Jakub Hrozek
On 24 Jul 2015, at 18:41, Michal Židek mzi...@redhat.com wrote: On 07/23/2015 09:46 AM, Lukas Slebodnik wrote: On (20/07/15 10:41), Stephen Gallagher wrote: It is possible to have a machine where none of the GPOs associated with it include access-control rules. Currently, this results in a

Re: [SSSD] [PATCH] AD: Handle cases where no GPOs apply

2015-07-24 Thread Michal Židek
On 07/23/2015 09:46 AM, Lukas Slebodnik wrote: On (20/07/15 10:41), Stephen Gallagher wrote: It is possible to have a machine where none of the GPOs associated with it include access-control rules. Currently, this results in a denial-by-system-error. We need to treat this case as allowing the

Re: [SSSD] [PATCH] mmap_cache: Override functions for initgr mmap cache

2015-07-24 Thread Lukas Slebodnik
On (17/07/15 10:16), Lukas Slebodnik wrote: On (16/07/15 19:19), Michal Židek wrote: On 07/16/2015 05:07 PM, Lukas Slebodnik wrote: On (16/07/15 13:46), Michal Židek wrote: On 07/15/2015 06:42 PM, Lukas Slebodnik wrote: ehlo, reproducer: add user and few groups to ldap call id user

Re: [SSSD] [PATCH] mmap_cache: Override functions for initgr mmap cache

2015-07-24 Thread Michal Židek
On 07/24/2015 03:21 PM, Lukas Slebodnik wrote: On (17/07/15 10:16), Lukas Slebodnik wrote: On (16/07/15 19:19), Michal Židek wrote: On 07/16/2015 05:07 PM, Lukas Slebodnik wrote: On (16/07/15 13:46), Michal Židek wrote: On 07/15/2015 06:42 PM, Lukas Slebodnik wrote: ehlo, reproducer:

[SSSD] [PATCHES] nss: use negative cache for sid-by-id requests

2015-07-24 Thread Sumit Bose
Hi, the attached two patches should fix https://fedorahosted.org/sssd/ticket/2731 . If an object is looked up by a POSIX UID or GID we always assume a multi-domain search and only have a global, i.e. for all domains, negative cache. Doing a multi-domain search makes sense because there is no

[SSSD] [PATCH] intg_test: Add integration test for memory cache

2015-07-24 Thread Lukas Slebodnik
ehlo, it is a first version of integration test for memory cache. The main purpose of this mail is to have some comments to the first version. cwrap doesn't support properly initgroups therefore I used a ctype module for calling initgroups from libnsss_sss.so. I'm aware of some issies in this