[SSSD] [sssd PR#655][comment] Invalid id provider prevents other domains to start

2018-09-12 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/655 Title: #655: Invalid id provider prevents other domains to start jhrozek commented: """ I'm sorry, but I don't think this is the right way to fix the issue. The providers should be pluggable, so in theory a third party can contribute one. I think a

[SSSD] [sssd PR#457][comment] ipa: Removal of umask(0) in selinux_child

2018-09-12 Thread vmojzis
URL: https://github.com/SSSD/sssd/pull/457 Title: #457: ipa: Removal of umask(0) in selinux_child vmojzis commented: """ The issue is fixed in libsemanage-2.5-13.el7. The fix it is upstream and there is a pull-request waiting for inclusion in Fedora

[SSSD] [sssd PR#655][+Changes requested] Invalid id provider prevents other domains to start

2018-09-12 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/655 Title: #655: Invalid id provider prevents other domains to start Label: +Changes requested ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to

[SSSD] [sssd PR#656][opened] Add certificate matching rules for files, AD and LDAP provider

2018-09-12 Thread sumit-bose
URL: https://github.com/SSSD/sssd/pull/656 Author: sumit-bose Title: #656: Add certificate matching rules for files, AD and LDAP provider Action: opened PR body: """ The certificate mapping and matching rules currently only available for the IPA provider can new be used with the files, AD and

[SSSD] [sssd PR#653][comment] sbus: dectect python binary for sbus_generate.sh

2018-09-12 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/653 Title: #653: sbus: dectect python binary for sbus_generate.sh jhrozek commented: """ I submitted the patch to CI before giving the final ACK """ See the full comment at https://github.com/SSSD/sssd/pull/653#issuecomment-420546268

[SSSD] [sssd PR#655][comment] Invalid id provider prevents other domains to start

2018-09-12 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/655 Title: #655: Invalid id provider prevents other domains to start mzidek-rh commented: """ But I think it is really convenient to detect this error in this part of the code (where current patches do it) because detecting the error here will make the

[SSSD] [sssd PR#655][comment] Invalid id provider prevents other domains to start

2018-09-12 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/655 Title: #655: Invalid id provider prevents other domains to start jhrozek commented: """ I would like to hear @pbrezina's opinon on this, but surviving that the dlopen does not exist sounds like a good approach to me. """ See the full comment at

[SSSD] [sssd PR#655][comment] Invalid id provider prevents other domains to start

2018-09-12 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/655 Title: #655: Invalid id provider prevents other domains to start mzidek-rh commented: """ Just a small update. We had a debug seesion with jhrozek today and the observation is following: The reason why SSSD is terminating is because the responders

[SSSD] [sssd PR#655][comment] Invalid id provider prevents other domains to start

2018-09-12 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/655 Title: #655: Invalid id provider prevents other domains to start mzidek-rh commented: """ In that case we probably could detect only that the module (.so) failed to load and make that non fatal. I looked into that part of code and it is tevent

[SSSD] [sssd PR#646][synchronized] proxy: access provider directly not through be_ctx

2018-09-12 Thread pbrezina
URL: https://github.com/SSSD/sssd/pull/646 Author: pbrezina Title: #646: proxy: access provider directly not through be_ctx Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/646/head:pr646 git checkout pr646 From

[SSSD] [sssd PR#655][comment] Invalid id provider prevents other domains to start

2018-09-12 Thread pbrezina
URL: https://github.com/SSSD/sssd/pull/655 Title: #655: Invalid id provider prevents other domains to start pbrezina commented: """ I do not think that the problem lies in backend. If it fails to dlopen a module, the whole backend should fail to start. This is fatal for the backend. But sssd

[SSSD] [sssd PR#646][comment] proxy: access provider directly not through be_ctx

2018-09-12 Thread pbrezina
URL: https://github.com/SSSD/sssd/pull/646 Title: #646: proxy: access provider directly not through be_ctx pbrezina commented: """ I pushed new patches after debugging session with Jakub. """ See the full comment at https://github.com/SSSD/sssd/pull/646#issuecomment-420624542

[SSSD] [sssd PR#649][+Accepted] sudo: respect case sensitivity in sudo responder

2018-09-12 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/649 Title: #649: sudo: respect case sensitivity in sudo responder Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to

[SSSD] [sssd PR#649][comment] sudo: respect case sensitivity in sudo responder

2018-09-12 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/649 Title: #649: sudo: respect case sensitivity in sudo responder mzidek-rh commented: """ ACK. """ See the full comment at https://github.com/SSSD/sssd/pull/649#issuecomment-420656810 ___ sssd-devel mailing

[SSSD] [sssd PR#656][synchronized] Add certificate matching rules for files, AD and LDAP provider

2018-09-12 Thread sumit-bose
URL: https://github.com/SSSD/sssd/pull/656 Author: sumit-bose Title: #656: Add certificate matching rules for files, AD and LDAP provider Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/656/head:pr656 git checkout

[SSSD] [sssd PR#649][comment] sudo: respect case sensitivity in sudo responder

2018-09-12 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/649 Title: #649: sudo: respect case sensitivity in sudo responder mzidek-rh commented: """ Sorry for the delay I ran into some issues while setting up the sudo. The patch works as expected. Code looks good to me. When CI finishes I will ACK this. """

[SSSD] [sssd PR#655][comment] Invalid id provider prevents other domains to start

2018-09-12 Thread mzidek-rh
URL: https://github.com/SSSD/sssd/pull/655 Title: #655: Invalid id provider prevents other domains to start mzidek-rh commented: """ TLDR: I will update the PR :) Actually I think there are two issues here. One is that the domain has invalid config that prevents it to start (bad id

[SSSD] [sssd PR#653][+Accepted] sbus: dectect python binary for sbus_generate.sh

2018-09-12 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/653 Title: #653: sbus: dectect python binary for sbus_generate.sh Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to

[SSSD] [sssd PR#654][+Accepted] intg: flush the SSSD caches to sync with files

2018-09-12 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/654 Title: #654: intg: flush the SSSD caches to sync with files Label: +Accepted ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to