[SSSD] [sssd PR#616][comment] become_user: add supplementary groups so ad provider can access keytab

2018-07-14 Thread asheplyakov
URL: https://github.com/SSSD/sssd/pull/616 Title: #616: become_user: add supplementary groups so ad provider can access keytab asheplyakov commented: """ > become_user() is also used in krb5_child to switch to the user trying to log > in to create the ccache with the right permissions. Yep, c

[SSSD] [sssd PR#616][comment] become_user: add supplementary groups so ad provider can access keytab

2018-07-14 Thread asheplyakov
URL: https://github.com/SSSD/sssd/pull/616 Title: #616: become_user: add supplementary groups so ad provider can access keytab asheplyakov commented: """ > I wonder if you wouldn't be able to achieve the same by setting the primary > group of the _sssd user to _keytab? This way other daemons

[SSSD] [sssd PR#616][comment] become_user: add supplementary groups so ad provider can access keytab

2018-07-11 Thread sumit-bose
URL: https://github.com/SSSD/sssd/pull/616 Title: #616: become_user: add supplementary groups so ad provider can access keytab sumit-bose commented: """ On Wed, Jul 11, 2018 at 12:19:33PM -0700, Jakub Hrozek wrote: > On Wed, Jul 11, 2018 at 11:42:44AM -0700, sumit-bose wrote: > > Thank you for

[SSSD] [sssd PR#616][comment] become_user: add supplementary groups so ad provider can access keytab

2018-07-11 Thread jhrozek
URL: https://github.com/SSSD/sssd/pull/616 Title: #616: become_user: add supplementary groups so ad provider can access keytab jhrozek commented: """ On Wed, Jul 11, 2018 at 11:42:44AM -0700, sumit-bose wrote: > Thank you for the patch it looks quite interesting. > > I wonder if you wouldn't b

[SSSD] [sssd PR#616][comment] become_user: add supplementary groups so ad provider can access keytab

2018-07-11 Thread sumit-bose
URL: https://github.com/SSSD/sssd/pull/616 Title: #616: become_user: add supplementary groups so ad provider can access keytab sumit-bose commented: """ Thank you for the patch it looks quite interesting. I wonder if you wouldn't be able to achieve the same by setting the primary group of the

[SSSD] [sssd PR#616][comment] become_user: add supplementary groups so ad provider can access keytab

2018-07-11 Thread fidencio
URL: https://github.com/SSSD/sssd/pull/616 Title: #616: become_user: add supplementary groups so ad provider can access keytab fidencio commented: """ ok to test """ See the full comment at https://github.com/SSSD/sssd/pull/616#issuecomment-404221858 __

[SSSD] [sssd PR#616][comment] become_user: add supplementary groups so ad provider can access keytab

2018-07-11 Thread centos-ci
URL: https://github.com/SSSD/sssd/pull/616 Title: #616: become_user: add supplementary groups so ad provider can access keytab centos-ci commented: """ Can one of the admins verify this patch? """ See the full comment at https://github.com/SSSD/sssd/pull/616#issuecomment-404174418 ___

[SSSD] [sssd PR#616][comment] become_user: add supplementary groups so ad provider can access keytab

2018-07-11 Thread centos-ci
URL: https://github.com/SSSD/sssd/pull/616 Title: #616: become_user: add supplementary groups so ad provider can access keytab centos-ci commented: """ Can one of the admins verify this patch? """ See the full comment at https://github.com/SSSD/sssd/pull/616#issuecomment-404174417 ___