Re: [SSSD] [PATCH] LDAP: Do not impose sizelimit=1 for single-entry searches

2015-09-17 Thread Jakub Hrozek
On Thu, Sep 17, 2015 at 09:35:11AM +0200, Jakub Hrozek wrote: > > After just only a month since the nack, attached are updated patches. I > > would prefer to only apply the first one to downstream, since the others > > are just optimizations and tests. > > CI runs revealed the tests didn't link

[SSSD] [PATCH] views: do not require overrideDN in groups when LOCAL view is set

2015-09-17 Thread Pavel Březina
https://fedorahosted.org/sssd/ticket/2790 This is just a partial fix. If a group contains member which doesn't have overrideDN specified, we fail to resolve membership with LOCAL views. There is a bigger issue when group contains ghost members, we do not apply overrides and just ignore the

Re: [SSSD] [PATCH] views: do not require overrideDN in groups when LOCAL view is set

2015-09-17 Thread Sumit Bose
On Thu, Sep 17, 2015 at 12:11:17PM +0200, Pavel Březina wrote: > https://fedorahosted.org/sssd/ticket/2790 > > This is just a partial fix. > > If a group contains member which doesn't have overrideDN specified, we fail > to resolve membership with LOCAL views. > > There is a bigger issue when

Re: [SSSD] [PATCH] views: do not require overrideDN in groups when LOCAL view is set

2015-09-17 Thread Pavel Březina
On 09/17/2015 12:37 PM, Sumit Bose wrote: On Thu, Sep 17, 2015 at 12:11:17PM +0200, Pavel Březina wrote: https://fedorahosted.org/sssd/ticket/2790 This is just a partial fix. If a group contains member which doesn't have overrideDN specified, we fail to resolve membership with LOCAL views.

Re: [SSSD] [PATCH] views: do not require overrideDN in groups when LOCAL view is set

2015-09-17 Thread Pavel Březina
On 09/17/2015 01:21 PM, Sumit Bose wrote: On Thu, Sep 17, 2015 at 12:44:37PM +0200, Pavel Březina wrote: On 09/17/2015 12:37 PM, Sumit Bose wrote: On Thu, Sep 17, 2015 at 12:11:17PM +0200, Pavel Březina wrote: https://fedorahosted.org/sssd/ticket/2790 This is just a partial fix. If a group

Re: [SSSD] [PATCH] views: do not require overrideDN in groups when LOCAL view is set

2015-09-17 Thread Sumit Bose
On Thu, Sep 17, 2015 at 12:44:37PM +0200, Pavel Březina wrote: > On 09/17/2015 12:37 PM, Sumit Bose wrote: > >On Thu, Sep 17, 2015 at 12:11:17PM +0200, Pavel Březina wrote: > >>https://fedorahosted.org/sssd/ticket/2790 > >> > >>This is just a partial fix. > >> > >>If a group contains member which

Re: [SSSD] [PATCH] cache_req: support UPN

2015-09-17 Thread Petr Cech
Hi Pavel! There is some code between my last end and this continuation. I was read it and did't find anything wrong. On 09/16/2015 04:26 PM, Petr Cech wrote: 0003-cache_req-tests-reduce-code-duplication.patch From e41f96a47f2b0f8d3e07e34af83e9a516d29df34 Mon Sep 17 00:00:00 2001 From:

Re: [SSSD] [PATCH] views: do not require overrideDN in groups when LOCAL view is set

2015-09-17 Thread Pavel Březina
On 09/17/2015 01:26 PM, Pavel Březina wrote: On 09/17/2015 01:21 PM, Sumit Bose wrote: On Thu, Sep 17, 2015 at 12:44:37PM +0200, Pavel Březina wrote: On 09/17/2015 12:37 PM, Sumit Bose wrote: On Thu, Sep 17, 2015 at 12:11:17PM +0200, Pavel Březina wrote:

Re: [SSSD] [PATCH] Temporarily mark subdomain as inactive instead marking the whole back end offline

2015-09-17 Thread Pavel Březina
On 09/04/2015 02:35 PM, Jakub Hrozek wrote: Hi, the attached patches implement https://fedorahosted.org/sssd/ticket/2637 There are two main use-cases: 1) If AD DCs are not reachable on the IPA server itself, we should avoid going offline completely, at least the IPA domain should be

Re: [SSSD] [PATCH] Temporarily mark subdomain as inactive instead marking the whole back end offline

2015-09-17 Thread Pavel Březina
On 09/17/2015 10:41 PM, Pavel Březina wrote: On 09/04/2015 02:35 PM, Jakub Hrozek wrote: Hi, the attached patches implement https://fedorahosted.org/sssd/ticket/2637 There are two main use-cases: 1) If AD DCs are not reachable on the IPA server itself, we should avoid going offline