[SSSD] [PATCH] LDAP: Fixing wrong pam error code for passwd

rom 5b9c1a166f0050544c55c6a5813906add185d7bf Mon Sep 17 00:00:00 2001 From: Petr Cech <pc...@redhat.com> Date: Tue, 2 Aug 2016 10:11:14 +0200 Subject: [PATCH] LDAP: Fixing wrong pam error code for passwd This patch adds right pam error code for sssd offline state. Resolves: https://fedorahosted.org/ss

[SSSD] [PATCH] LDAP: Fixing of removing netgroup from cache

>From 42ef4e523ad7e56f3014a7f6bb6a7423d24eccde Mon Sep 17 00:00:00 2001 From: Petr Cech <pc...@redhat.com> Date: Fri, 22 Jul 2016 14:28:54 +0200 Subject: [PATCH] LDAP: Fixing of removing netgroup from cache There were problem with local key which wasn't properly removed. This pa

[SSSD] Re: [PATCH] SECRETS: Log message for failures with removing file

On 07/22/2016 10:06 AM, Petr Cech wrote: On 07/22/2016 10:00 AM, Lukas Slebodnik wrote: ehlo, Nobody sent patch for this few weeks old coverity issue. So here you are :-) LS Hello Lukas, LGTM, I just wait for CI. Regards CI: http://sssd-ci.duckdns.org/logs/job/50/04/summary.html

[SSSD] Re: [PATCH] LDAP: Fixing of removing netgroup from cache

On 07/22/2016 02:34 PM, Petr Cech wrote: Hi list, there is patch solving [1] attached. It is possible that we will have similiar problem with other local keys, so I wrote special function for adding key to list of missing with condition if it is needed or not. [1] https://fedorahosted.org

[SSSD] Re: [PATCH SET] AD_PROVIDER: ad_enabled_domains

On 08/12/2016 04:05 PM, Petr Cech wrote: On 08/12/2016 03:36 PM, Jakub Hrozek wrote: On Fri, Aug 12, 2016 at 02:51:21PM +0200, Petr Cech wrote: On 08/12/2016 11:27 AM, Jakub Hrozek wrote: On Wed, Aug 10, 2016 at 08:54:25AM +0200, Petr Cech wrote: Sorry, I experienced some issue with mailing

[SSSD] Re: [PATCH] DP: Add log message for get account info

On 08/16/2016 09:20 AM, Petr Cech wrote: On 08/16/2016 09:17 AM, Lukas Slebodnik wrote: ehlo, Petr improved debug messages in https://git.fedorahosted.org/cgit/sssd.git/commit/?id=376eaf187c13c2a1eaea0ffbdd970b6b563ab74c but it was removed as part of DP refactoring. LS Hi Lukas, thanks

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 08/16/2016 10:15 AM, Jakub Hrozek wrote: On Tue, Aug 16, 2016 at 09:50:19AM +0200, Petr Cech wrote: Hello list, I am solving ticket [1] now. There are three points mentioned. A have prepared patches for the first two. I would like to ask anybody it is right or if I miss something

[SSSD] Re: [PATCH] Better error message if sssctl is ran w/o activating the IFP responder

On 08/16/2016 08:05 AM, Lukas Slebodnik wrote: On (12/08/16 12:24), Justin Stephenson wrote: Simple error message patch, resolves https://fedorahosted.org/sssd/ticket/3130 Kind regards, Justin Stephenson From 080f9639e120329d069d4f0ba5edcc776e0179c2 Mon Sep 17 00:00:00 2001 From: Justin

[SSSD] Re: [PATCH SET] AD_PROVIDER: ad_enabled_domains

On 08/16/2016 03:58 PM, Stephen Gallagher wrote: On 08/16/2016 09:26 AM, Jakub Hrozek wrote: > On Tue, Aug 16, 2016 at 03:17:19PM +0200, Petr Cech wrote: >>>> From 24d32d0eb12ddc433e64ffd6411e9e13f0067b35 Mon Sep 17 00:00:00 2001 >>>> From: Petr Cech <pc...@redh

[SSSD] Re: [PATCH 1/2] LDAP: Adding support for SIGTERM signal

On 08/17/2016 01:10 PM, Pavel Březina wrote: On 08/15/2016 01:27 PM, Petr Cech wrote: On 08/15/2016 09:59 AM, Jakub Hrozek wrote: On Mon, Aug 15, 2016 at 09:47:27AM +0200, Petr Cech wrote: On 08/12/2016 04:13 PM, Jakub Hrozek wrote: On Fri, Aug 12, 2016 at 03:41:26PM +0200, Petr Cech wrote

[SSSD] [PATCH SET] WIP: INTG: Tests for ldap nested netgroups

and LDB cache attached [1]. [1] ldap_ldb_content.txt Regards -- Petr^4 Čech >From 66ba2a7b1ed2cf5d255f92f66f74200cd1ccdd3f Mon Sep 17 00:00:00 2001 From: Petr Cech <pc...@redhat.com> Date: Wed, 17 Aug 2016 14:01:09 +0200 Subject: [PATCH 1/2] INTG: Adding support for netgroups to

[SSSD] Re: [PATCH SET] AD_PROVIDER: ad_enabled_domains

On 08/17/2016 10:40 AM, Lukas Slebodnik wrote: On (17/08/16 09:54), Lukas Slebodnik wrote: On (16/08/16 16:29), Petr Cech wrote: On 08/16/2016 03:58 PM, Stephen Gallagher wrote: On 08/16/2016 09:26 AM, Jakub Hrozek wrote: On Tue, Aug 16, 2016 at 03:17:19PM +0200, Petr Cech wrote: From

[SSSD] Re: [PATCH] LDAP: Fixing of removing netgroup from cache

On 08/12/2016 09:17 AM, Petr Cech wrote: On 08/11/2016 08:53 AM, Petr Cech wrote: On 08/03/2016 12:34 PM, Michal Židek wrote: Two nitpicks, see inline. On 07/22/2016 02:34 PM, Petr Cech wrote: +static errno_t add_to_missing_attrs (TALLOC_CTX * mem_ctx

[SSSD] Re: [PATCH] Better error message if sssctl is ran w/o activating the IFP responder

On 08/17/2016 04:23 PM, Justin Stephenson wrote: On 08/17/2016 04:26 AM, Pavel Březina wrote: On 08/16/2016 05:33 PM, Jakub Hrozek wrote: On Tue, Aug 16, 2016 at 04:16:08PM +0200, Petr Cech wrote: On 08/16/2016 04:06 PM, Justin Stephenson wrote: Updated patch attached. Kind regards, Justin

[SSSD] Re: [PATCH] sssd_netgroup.py: Resolve nested netgroups

On 08/18/2016 12:22 PM, Petr Cech wrote: On 08/18/2016 12:19 PM, Lukas Slebodnik wrote: ehlo, python wrapper for retrieving netgroups was push to early. Attached patch fixes it. LS Thanks, Lukas. I will take a look and I will try it with my tests :-) Hi Lukas, your patch works how we

[SSSD] Re: [PATCH SET] WIP: INTG: Tests for ldap nested netgroups

On 08/18/2016 12:39 PM, Lukas Slebodnik wrote: On (17/08/16 14:32), Petr Cech wrote: Hello list, there is attached patch set for intg. testing of ldap nested netgroups. I used last version of Lukas patch 'sssd_netgroup.py: Resolve nested netgroups'. I don't know if it is on list. It is still

[SSSD] Re: [PATCH] LDAP: Fixing of removing netgroup from cache

On 08/19/2016 01:26 PM, Jakub Hrozek wrote: On Fri, Aug 19, 2016 at 12:54:07PM +0200, Petr Cech wrote: On 08/17/2016 02:37 PM, Petr Cech wrote: On 08/12/2016 09:17 AM, Petr Cech wrote: On 08/11/2016 08:53 AM, Petr Cech wrote: On 08/03/2016 12:34 PM, Michal Židek wrote: Two nitpicks, see

[SSSD] Re: [PATCH] LDAP: Fixing of removing netgroup from cache

On 08/17/2016 02:37 PM, Petr Cech wrote: On 08/12/2016 09:17 AM, Petr Cech wrote: On 08/11/2016 08:53 AM, Petr Cech wrote: On 08/03/2016 12:34 PM, Michal Židek wrote: Two nitpicks, see inline. On 07/22/2016 02:34 PM, Petr Cech wrote: +static errno_t add_to_missing_attrs (TALLOC_CTX

[SSSD] Re: [PATCH] sssd_netgroup.py: Resolve nested netgroups

On 08/19/2016 11:24 AM, Lukas Slebodnik wrote: On (19/08/16 08:55), Petr Cech wrote: On 08/18/2016 12:22 PM, Petr Cech wrote: On 08/18/2016 12:19 PM, Lukas Slebodnik wrote: ehlo, python wrapper for retrieving netgroups was push to early. Attached patch fixes it. LS Thanks, Lukas. I

[SSSD] Re: [PATCH] sssd_netgroup.py: Resolve nested netgroups

On 08/19/2016 11:42 AM, Petr Cech wrote: On 08/19/2016 11:24 AM, Lukas Slebodnik wrote: On (19/08/16 08:55), Petr Cech wrote: On 08/18/2016 12:22 PM, Petr Cech wrote: On 08/18/2016 12:19 PM, Lukas Slebodnik wrote: ehlo, python wrapper for retrieving netgroups was push to early. Attached

[SSSD] [PATCH] LDAP: Fixing of removing netgroup from cache

On 08/19/2016 01:00 PM, Petr Cech wrote: On 08/18/2016 12:39 PM, Lukas Slebodnik wrote: On (17/08/16 14:32), Petr Cech wrote: Hello list, there is attached patch set for intg. testing of ldap nested netgroups. I used last version of Lukas patch 'sssd_netgroup.py: Resolve nested netgroups'. I

[SSSD] Re: [PATCH] LDAP: Log autofs rfc2307 config changes only with enabled responder

On 08/16/2016 01:41 PM, Lukas Slebodnik wrote: ehlo, attached patch should fix annoying message with disabled autofs responder. LS Hi Lukas, LGTM, I am waiting for CI. Regards -- Petr^4 Čech ___ sssd-devel mailing list

[SSSD] Re: [PATCH] Better error message if sssctl is ran w/o activating the IFP responder

On 08/16/2016 04:06 PM, Justin Stephenson wrote: Updated patch attached. Kind regards, Justin Stephenson Thanks, Justin. Obviously ACK. On 08/16/2016 02:05 AM, Lukas Slebodnik wrote: On (12/08/16 12:24), Justin Stephenson wrote: Simple error message patch, resolves

[SSSD] Re: [PATCH SET] AD_PROVIDER: ad_enabled_domains

On 08/16/2016 02:52 PM, Jakub Hrozek wrote: On Mon, Aug 15, 2016 at 04:03:17PM +0200, Petr Cech wrote: On 08/12/2016 04:05 PM, Petr Cech wrote: On 08/12/2016 03:36 PM, Jakub Hrozek wrote: On Fri, Aug 12, 2016 at 02:51:21PM +0200, Petr Cech wrote: On 08/12/2016 11:27 AM, Jakub Hrozek wrote

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 08/16/2016 01:22 PM, Petr Cech wrote: On 08/16/2016 01:02 PM, Lukas Slebodnik wrote: On (16/08/16 12:52), Petr Cech wrote: On 08/16/2016 10:15 AM, Jakub Hrozek wrote: On Tue, Aug 16, 2016 at 09:50:19AM +0200, Petr Cech wrote: Hello list, I am solving ticket [1] now. There are three

[SSSD] Re: [PATCH] LDAP: Fixing of removing netgroup from cache

On 08/19/2016 05:18 PM, Lukas Slebodnik wrote: On (19/08/16 13:35), Petr Cech wrote: On 08/19/2016 01:00 PM, Petr Cech wrote: On 08/18/2016 12:39 PM, Lukas Slebodnik wrote: On (17/08/16 14:32), Petr Cech wrote: Hello list, there is attached patch set for intg. testing of ldap nested

[SSSD] Re: [PATCH] sssd_netgroup.py: Resolve nested netgroups

On 08/24/2016 09:33 AM, Petr Cech wrote: Hi Lukas, I didn't run CI tests because your new code is not used yet. But I run my tests for nested_group with your updated version. Everything works how we expected. Code LGTM. => ACK CI passed with my patches: http://sssd-ci.duckdns.org/logs/job

[SSSD] Re: [PATCH] LDAP: Fixing of removing netgroup from cache

On 08/24/2016 09:15 AM, Lukas Slebodnik wrote: On (22/08/16 16:39), Petr Cech wrote: On 08/19/2016 05:18 PM, Lukas Slebodnik wrote: Thank you for test but I would appraciate a little bit simpler solution. "memberNisNetgroup"(SYSDB_NETGROUP_MEMBER) Your patch will append "me

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

On 08/24/2016 05:25 PM, Fabiano Fidêncio wrote: Petr, On Wed, Aug 24, 2016 at 4:22 PM, Petr Cech <pc...@redhat.com> wrote: Hello, I am fighting with adding new option to sssd.conf. I slowly running out of breath. I know proxy could be id, auth or chpass provider. I don't know

[SSSD] Re: MONITOR: Add disable_netlink sssd.conf option

On 09/02/2016 03:31 PM, Justin Stephenson wrote: On 09/02/2016 05:23 AM, Petr Cech wrote: On 09/01/2016 03:36 PM, Justin Stephenson wrote: On 08/30/2016 03:54 AM, Jakub Hrozek wrote: On Sat, Aug 27, 2016 at 12:54:53PM -0400, Justin Stephenson wrote: Hello, The attached patches resolve

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

sssd sss_cache -E getent passwd remote_user You can try modify the user or delete him after. It will change the ldif message. PS: New patch set is attached. Regards -- Petr^4 Čech >From 0b6ec52d3d43b8f0706272b5642d86da8b2381c9 Mon Sep 17 00:00:00 2001 From: Petr Cech <pc...@redhat.c

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

On 09/05/2016 04:05 PM, Fabiano Fidêncio wrote: Petr, On Mon, Sep 5, 2016 at 3:43 PM, Petr Cech <pc...@redhat.com> wrote: On 09/05/2016 09:57 AM, Fabiano Fidêncio wrote: Petr, I see you have updated the OPT_MAX_CHILDREN_DEFAULT to 10 instead of 50. However, you haven't update the

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 09/05/2016 03:32 PM, Lukas Slebodnik wrote: On (05/09/16 15:24), Jakub Hrozek wrote: On Mon, Sep 05, 2016 at 02:31:31PM +0200, Fabiano Fidêncio wrote: On Mon, Sep 5, 2016 at 11:59 AM, Fabiano Fidêncio wrote: Petr, I went through your patches and in general they look

[SSSD] Re: MONITOR: Add disable_netlink sssd.conf option

On 09/05/2016 09:45 AM, Lukas Slebodnik wrote: On (02/09/16 15:34), Petr Cech wrote: On 09/02/2016 03:31 PM, Justin Stephenson wrote: On 09/02/2016 05:23 AM, Petr Cech wrote: On 09/01/2016 03:36 PM, Justin Stephenson wrote: On 08/30/2016 03:54 AM, Jakub Hrozek wrote: On Sat, Aug 27

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 09/05/2016 03:24 PM, Jakub Hrozek wrote: On Mon, Sep 05, 2016 at 02:31:31PM +0200, Fabiano Fidêncio wrote: On Mon, Sep 5, 2016 at 11:59 AM, Fabiano Fidêncio wrote: Petr, I went through your patches and in general they look good to me. However, I haven't done any tests

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

value in man page and I reformulated description. Is it better? Regards -- Petr^4 Čech >From 4645b8a9f2c3b98fe92343135aa09e70b8a019d3 Mon Sep 17 00:00:00 2001 From: Petr Cech <pc...@redhat.com> Date: Wed, 24 Aug 2016 14:41:09 +0200 Subject: [PATCH] PROXY: Adding proxy_max_children option

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 09/06/2016 01:15 PM, Petr Cech wrote: On 09/05/2016 02:31 PM, Fabiano Fidêncio wrote: On Mon, Sep 5, 2016 at 11:59 AM, Fabiano Fidêncio <fiden...@redhat.com> wrote: Petr, I went through your patches and in general they look good to me. However, I haven't done any tests yet wit

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

On 09/06/2016 05:11 PM, Justin Stephenson wrote: On 09/06/2016 10:57 AM, Petr Cech wrote: On 09/06/2016 04:17 PM, Justin Stephenson wrote: On 09/05/2016 10:20 AM, Petr Cech wrote: On 09/05/2016 04:05 PM, Fabiano Fidêncio wrote: Petr, On Mon, Sep 5, 2016 at 3:43 PM, Petr Cech <

[SSSD] Re: RFC: github PR workflow

On 08/31/2016 10:28 AM, Jakub Hrozek wrote: Hi, I documented workflow that we could use for submitting PRs: https://fedorahosted.org/sssd/wiki/GithubWorkflow It's quite similar to what the FreeIPA team uses (although I don't think they publicly document it yet). Comments or edits welcome.

[SSSD] Re: MONITOR: Add disable_netlink sssd.conf option

On 09/01/2016 03:36 PM, Justin Stephenson wrote: On 08/30/2016 03:54 AM, Jakub Hrozek wrote: On Sat, Aug 27, 2016 at 12:54:53PM -0400, Justin Stephenson wrote: Hello, The attached patches resolve https://fedorahosted.org/sssd/ticket/3142 However, I am having difficult with the man page

[SSSD] Re: MONITOR: Add disable_netlink sssd.conf option

On 09/02/2016 11:23 AM, Petr Cech wrote: On 09/01/2016 03:36 PM, Justin Stephenson wrote: On 08/30/2016 03:54 AM, Jakub Hrozek wrote: On Sat, Aug 27, 2016 at 12:54:53PM -0400, Justin Stephenson wrote: Hello, The attached patches resolve https://fedorahosted.org/sssd/ticket/3142 However, I

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 09/07/2016 09:53 AM, Jakub Hrozek wrote: On Wed, Sep 07, 2016 at 08:45:18AM +0200, Lukas Slebodnik wrote: On (05/09/16 16:07), Jakub Hrozek wrote: On Mon, Sep 05, 2016 at 03:32:48PM +0200, Lukas Slebodnik wrote: On (05/09/16 15:24), Jakub Hrozek wrote: On Mon, Sep 05, 2016 at 02:31:31PM

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

Bump. -- Petr^4 Čech ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

Bump. -- Petr^4 Čech ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org

[SSSD] Re: [SSSD} [PATCH] Remove no longer used code

On 08/26/2016 04:59 PM, Jakub Hrozek wrote: On Mon, Aug 15, 2016 at 02:58:50PM +0200, Fabiano Fidêncio wrote: Those 3 patches are from Jakub and I've just done some minor adjustments and add myself as co-author of the first 2 patches. CI has passed:

[SSSD] Re: MONITOR: Add disable_netlink sssd.conf option

On 08/27/2016 06:54 PM, Justin Stephenson wrote: Hello, The attached patches resolve https://fedorahosted.org/sssd/ticket/3142 However, I am having difficult with the man page addition to 'src/man/sssd.conf.5.xml' for this new option. I have stared at the open and close xml tags(for far too

[SSSD] Re: [SSSD} [PATCH] Remove no longer used code

On 08/15/2016 02:58 PM, Fabiano Fidêncio wrote: Those 3 patches are from Jakub and I've just done some minor adjustments and add myself as co-author of the first 2 patches. CI has passed: http://sssd-ci.duckdns.org/logs/job/51/55/summary.html Best Regards, -- Fabiano Fidêncio Hello, CI

[SSSD] Re: [SSSD} [PATCH] Remove no longer used code

On 08/30/2016 08:28 AM, Fabiano Fidêncio wrote: On Tue, Aug 30, 2016 at 8:23 AM, Petr Cech <pc...@redhat.com> wrote: On 08/15/2016 02:58 PM, Fabiano Fidêncio wrote: Those 3 patches are from Jakub and I've just done some minor adjustments and add myself as co-author of the first 2 p

[SSSD] Re: [PATCHES] Remove leftovers from diag_cmd and force_timeout

On 08/31/2016 07:44 AM, Petr Cech wrote: On 08/30/2016 06:35 PM, Fabiano Fidêncio wrote: Seems that when I sent the v2 of 7579cf99 and ac35fe74 I attached the wrong patches that ended up being pushed. Those patches were incomplete as there are still some leftovers. My bad, sorry :-\ See

[SSSD] Re: [PATCH] SYSDB: Fix error handling in sysdb_get_user_members_recursively

On 08/31/2016 07:26 AM, Petr Cech wrote: On 08/30/2016 05:24 PM, Lukas Slebodnik wrote: ehlo, We should not ignore return values of functions. LS Hi Lukas, thanks for patch. LGTM, I am waiting for CI. CI passed: http://sssd-ci.duckdns.org/logs/job/52/82/summary.html => ACK Rega

[SSSD] Re: [PATCH] LDAP: Improving debug message

On 08/31/2016 09:36 AM, Lukas Slebodnik wrote: On (31/08/16 08:28), Petr Cech wrote: From b3ae463a7544bb9561126c5e05475d5b98928edc Mon Sep 17 00:00:00 2001 From: Petr Cech <pc...@example.com> Date: Fri, 15 Jul 2016 14:54:35 +0200 Subject: [PATCH] LDAP: Improving debug message There were

[SSSD] Re: [PATCHES] Remove leftovers from diag_cmd and force_timeout

On 08/30/2016 06:35 PM, Fabiano Fidêncio wrote: Seems that when I sent the v2 of 7579cf99 and ac35fe74 I attached the wrong patches that ended up being pushed. Those patches were incomplete as there are still some leftovers. My bad, sorry :-\ See these 2 attached patches Best Regards, --

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

Bump. -- Petr^4 Čech ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org

[SSSD] Re: [PATCH] SYSDB: Fix error handling in sysdb_get_user_members_recursively

On 08/30/2016 05:24 PM, Lukas Slebodnik wrote: ehlo, We should not ignore return values of functions. LS Hi Lukas, thanks for patch. LGTM, I am waiting for CI. Regards -- Petr^4 Čech ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

On 08/30/2016 01:21 PM, Pavel Březina wrote: On 08/30/2016 01:06 PM, Lukas Slebodnik wrote: On (30/08/16 13:03), Petr Cech wrote: On 08/30/2016 12:42 PM, Pavel Březina wrote: On 08/25/2016 01:43 PM, Petr Cech wrote: -/* FIXME: get max_children from configuration file */ -auth_ctx

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

On 08/30/2016 12:42 PM, Pavel Březina wrote: On 08/25/2016 01:43 PM, Petr Cech wrote: -/* FIXME: get max_children from configuration file */ -auth_ctx->max_children = 10; +ret = confdb_get_int(be_ctx->cdb, be_ctx->conf_path, + CONFDB_PROXY_MAX_CHI

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

Bump. -- Petr^4 Čech ___ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 09/12/2016 10:01 AM, Lukas Slebodnik wrote: You have a point here (and I regret adding the ENOENT retval in general, >but the difference is that ldb_search wrapper changes /functionality/, this >just adds logging. So the only thing we would miss if we forget to use >the wrapper is the extra

[SSSD] Re: [PATCH] PROXY: Adding proxy_max_children option

On 09/13/2016 04:27 PM, Lukas Slebodnik wrote: On (13/09/16 16:24), Lukas Slebodnik wrote: On (13/09/16 14:11), Fabiano Fidêncio wrote: On Mon, Sep 12, 2016 at 9:40 AM, Petr Cech <pc...@redhat.com> wrote: Bump. -- Petr^4 Čech ___ sssd

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 09/12/2016 10:01 AM, Lukas Slebodnik wrote: On (11/09/16 23:49), Jakub Hrozek wrote: On Thu, Sep 08, 2016 at 12:56:08PM +0200, Lukas Slebodnik wrote: Let me explain why wrappers are not good idea in production. There was introduced new wrapper(#1991) for ldb_search SSS_LDB_SEARCH. It should

[SSSD] Re: [PATCH ding-libs] Extend API to const key for clients that don't need to modify their keys

On 10/05/2016 04:18 PM, Michal Židek wrote: On 10/05/2016 03:47 PM, Philip Prindeville wrote: On Oct 5, 2016, at 7:18 AM, Michal Židek wrote: I forgot to attach the patches. Again the first one is acked by me, the second needs a review. Michal Thanks for writing

[SSSD] Re: [PATCH ding-libs] Extend API to const key for clients that don't need to modify their keys

On 10/05/2016 04:39 PM, Michal Židek wrote: On 10/05/2016 04:30 PM, Petr Cech wrote: On 10/05/2016 04:18 PM, Michal Židek wrote: On 10/05/2016 03:47 PM, Philip Prindeville wrote: On Oct 5, 2016, at 7:18 AM, Michal Židek <mzi...@redhat.com> wrote: Hello Michal, I comment two

[SSSD] Re: [PATCH SET] AD_PROVIDER: ad_enabled_domains

, 2016 at 12:23:37PM +0200, Petr Cech wrote: Thanks Jakub, Lukas. CI tests almost passed, failure is not connected: http://sssd-ci.duckdns.org/logs/job/51/82/summary.html Fixed patch set attached. Regards ACK CI: http://sssd-ci.duckdns.org/logs/job/51/86/summary.html * master

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

bump -- Petr^4 Čech ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 09/22/2016 10:31 AM, Lukas Slebodnik wrote: On (22/09/16 10:00), Lukas Slebodnik wrote: On (16/09/16 16:19), Petr Cech wrote: On 09/14/2016 04:00 PM, Lukas Slebodnik wrote: Let's assume that we will add new type of cache in future (e.g. SSS_SYSDB_SECRET_CACHE) If the value of "state

[SSSD] Re: Question: LDAP provider doesn't show group member

On 09/22/2016 12:40 PM, Jakub Hrozek wrote: Yes, because your ldapsearch authenticates as a user DN, but sssd doesn't authenticate by default. Try adding: ldap_sasl_mech = gssapi krb5_server = algol.beta krb5_realm = BETA to your sssd.conf. I wonder if this is visible in server logs for

[SSSD] Re: Question: LDAP provider doesn't show group member

On 09/22/2016 12:48 PM, Sumit Bose wrote: Yes, you use an authenticated bind in the ldapsearch (-D uid=admin,cn=users,cn=accounts,dc=beta) while you anonymously bind with your ldap.beta configuration. IPA does not show group member for anonymousy binds, please add ldap_default_bind_dn =

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 09/14/2016 04:00 PM, Lukas Slebodnik wrote: On (06/09/16 13:15), Petr Cech wrote: On 09/05/2016 02:31 PM, Fabiano Fidêncio wrote: On Mon, Sep 5, 2016 at 11:59 AM, Fabiano Fidêncio <fiden...@example.com> wrote: Petr, I went through your patches and in general they look good to me. H

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 09/06/2016 01:18 PM, Petr Cech wrote: On 09/06/2016 01:15 PM, Petr Cech wrote: On 09/05/2016 02:31 PM, Fabiano Fidêncio wrote: On Mon, Sep 5, 2016 at 11:59 AM, Fabiano Fidêncio <fiden...@redhat.com> wrote: Petr, I went through your patches and in general they look good to me. Howe

[SSSD] Re: [PATCH SET] AD_PROVIDER: ad_enabled_domains

On 08/16/2016 08:30 PM, Jakub Hrozek wrote: On Tue, Aug 16, 2016 at 04:29:43PM +0200, Petr Cech wrote: On 08/16/2016 03:58 PM, Stephen Gallagher wrote: On 08/16/2016 09:26 AM, Jakub Hrozek wrote: On Tue, Aug 16, 2016 at 03:17:19PM +0200, Petr Cech wrote: From

[SSSD] Re: [PATCH] LDAP: Log autofs rfc2307 config changes only with enabled responder

On 08/16/2016 03:48 PM, Petr Cech wrote: On 08/16/2016 01:41 PM, Lukas Slebodnik wrote: ehlo, attached patch should fix annoying message with disabled autofs responder. LS Hi Lukas, LGTM, I am waiting for CI. CI tests passed: http://sssd-ci.duckdns.org/logs/job/51/72/summary.html

[SSSD] Re: [PATCH SET] AD_PROVIDER: ad_enabled_domains

After reading Lukas mail: self-NACK for this version. On 08/17/2016 09:57 AM, Petr Cech wrote: On 08/16/2016 08:30 PM, Jakub Hrozek wrote: On Tue, Aug 16, 2016 at 04:29:43PM +0200, Petr Cech wrote: On 08/16/2016 03:58 PM, Stephen Gallagher wrote: On 08/16/2016 09:26 AM, Jakub Hrozek wrote

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 08/16/2016 02:32 PM, Petr Cech wrote: On 08/16/2016 01:22 PM, Petr Cech wrote: On 08/16/2016 01:02 PM, Lukas Slebodnik wrote: On (16/08/16 12:52), Petr Cech wrote: On 08/16/2016 10:15 AM, Jakub Hrozek wrote: On Tue, Aug 16, 2016 at 09:50:19AM +0200, Petr Cech wrote: Hello list, I am

[SSSD] Re: [PATCH] sssd_netgroup.py: Resolve nested netgroups

On 08/18/2016 12:19 PM, Lukas Slebodnik wrote: ehlo, python wrapper for retrieving netgroups was push to early. Attached patch fixes it. LS Thanks, Lukas. I will take a look and I will try it with my tests :-) Reards -- Petr^4 Čech ___ sssd-devel

[SSSD] Re: [PATCH] sssd_netgroup.py: Resolve nested netgroups

On 08/24/2016 07:30 AM, Lukas Slebodnik wrote: On (19/08/16 12:35), Petr Cech wrote: On 08/19/2016 11:42 AM, Petr Cech wrote: On 08/19/2016 11:24 AM, Lukas Slebodnik wrote: On (19/08/16 08:55), Petr Cech wrote: On 08/18/2016 12:22 PM, Petr Cech wrote: On 08/18/2016 12:19 PM, Lukas Slebodnik

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 08/23/2016 10:58 AM, Petr Cech wrote: Hello, there is new patch number 3 which is a WIP. I would like to ask you which version of ldif printing do you prefer. You can see [1] which shows the outputs. Difference is that version A is step by step reading of ldb messsage. But, version B uses

[SSSD] [PATCH] WIP: PROXY: Adding proxy_max_children option

to the fight? Please, see attached patch. Regards -- Petr^4 Čech >From 252b62b56d0079323dc6771907d76f4f883ffbe4 Mon Sep 17 00:00:00 2001 From: Petr Cech <pc...@redhat.com> Date: Wed, 24 Aug 2016 14:41:09 +0200 Subject: [PATCH] WIP: PROXY: Adding proxy_max_children option Resolv

[SSSD] Re: [PATCH] SYSDB: Fix error handling in sysdb_get_user_members_recursively

bump -- Petr^4 Čech ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] [Q] t3222 sssd still showing ipa user after removed from last group

Hi all, I came back to ticket #3222 "sssd still showing ipa user after removed from last group" [1]. And I have new knowledge. But I still do not see the light at the end of the tunnel. [1] https://fedorahosted.org/sssd/ticket/3222 I attached patch which enables some basic debug on using of

[SSSD] [Q] t3222 sssd still showing ipa user after removed from last group

Hi all, I came back to ticket #3222 "sssd still showing ipa user after removed from last group" [1]. And I have new knowledge. But I still do not see the light at the end of the tunnel. [1] https://fedorahosted.org/sssd/ticket/3222 I attached patch which enables some basic debug on using of

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

Hi all, after chat with Lukas I attached only first two patches. Author of the third one is Lukas and I am not sure if he is finished. (There was question of LD_PRELOAD.) Regards -- Petr^4 Čech >From c67ccc872eb5dacc98f626c10740424cef205334 Mon Sep 17 00:00:00 2001 From: Petr Cech

[SSSD] Re: [sssd PR#13][comment] MEMBEROF: Don't resolve members if they are removed

On 10/19/2016 07:45 AM, Lukas Slebodnik wrote: On (18/10/16 09:35), Petr Cech wrote: On 10/17/2016 07:06 PM, Lukas Slebodnik wrote: On (14/10/16 13:54), lslebodn wrote: URL: https://github.com/SSSD/sssd/pull/13 Title: #13: MEMBEROF: Don't resolve members if they are removed lslebodn

[SSSD] Re: [sssd PR#13][comment] MEMBEROF: Don't resolve members if they are removed

On 10/17/2016 07:06 PM, Lukas Slebodnik wrote: On (14/10/16 13:54), lslebodn wrote: URL: https://github.com/SSSD/sssd/pull/13 Title: #13: MEMBEROF: Don't resolve members if they are removed lslebodn commented: """ On (14/10/16 04:48), celestian wrote: I did manual testing with reproducer

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

is silent :-( I propose to change the commit message of the third patch to `export LD_PRELAOD=...` instead of `/etc/sysconfig/sssd`. So it should work. Any other idea? Regards -- Petr^4 Čech >From 15b113dcea02e445dc297f336c543d71cb4ea338 Mon Sep 17 00:00:00 2001 From: Petr Cech <pc...@redh

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

On 10/20/2016 01:14 PM, Petr Cech wrote: On 09/22/2016 01:04 PM, Lukas Slebodnik wrote: Attached is an alternative solution for debugging ldb functions How to test: LD_PRELOAD=.libs/sss_ldb_debug.so ./sysdb-tests -d 10 The only think would be to find out why LD_PRELOAD in /etc/sysconfig/sssd

[SSSD] WIP: sssd still showing ipa user after removed from last group

Hello list, I have worked on ticket #3222 [1]. The reproducer mentioned on this ticket doesn't work for 100%. After some investigation and discussion with SSSD team I recognized that the issue is caused by memory cache (fast cache). This memcache saves users and groups. Default timeout is

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

Bump. -- Petr^4 Čech ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: [PATCH SET] SYSDB: Adding message to inform about cache

Bump. -- Petr^4 Čech ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

[SSSD] Re: sssd-1.14.3 milestone cleanup

On 01/12/2017 02:02 PM, Pavel Březina wrote: * https://fedorahosted.org/sssd/ticket/3113 - Please move sudo_timed option to sssd-sudo man page - 5 minutes patch and George is unlikely to send a patch, any takers? I looked at this ticket and I saw that we have no configuration options

[SSSD] Re: sssd-1.14.3 milestone cleanup

On 01/11/2017 04:31 PM, Jakub Hrozek wrote: Hi, despite new development happening in the sssd-1-15 branch (aka master), there are still too many tickets in the 1.14.3 milestone. The tickets should be moved out to current milestones unless someone is really working on them. These are: *

<    1   2   3   4