sssd-devel October 2010

sssd-devel@lists.fedorahosted.org

14 participants
65 discussions

[PATCH] Allow authentication for referrals
by Sumit Bose 27 Oct '10

27 Oct '10

Hi, this patch add a rebind proc which uses the same credentials used for the primary server to authenticate to the second server when doing referral chasing. There are two important things to keep in mind: - as already mentioned we use the same credentials for both connections, i.e. if TLS is used on the first connection, it will be used un the second too. If GSSAPI is use for the first server it will be used for the second server with the same realm/KDC/keytab settings. If we want different credentials and authentication schemes for different server we should address this in a separate patch. - everything is synchronous, let me repeat: synchronous. From 'man ldap_set_rebind_proc': "The rebind function must use a synchronous bind method." I have tested this patch against an OpenLDAP server with GSSAPI and simple bind with and without TLS. This patch should fix ticket #495. bye, Sumit

2 2

[PATCHES] Fixes for nss responder
by Sumit Bose 26 Oct '10

26 Oct '10

Hi, if an nss provider dies during a request the nss responders dies due to a double free error minutes after the request was sent. The responder does not handle the unfinished request and so they stay around and the client has to wait for a response until SSS_CLI_SOCKET_TIMEOUT (5 minutes) is over. During the termination of the request the sss_dp_callback structure is free two times which lead to an abort in the nss responder. The first patch add a handler which removes all open requests after a reconnect. The second one is only marginally related to the described issue but makes sure that cmdctx, the parent or grand-parent memory context of the sss_dp_callback structure, is always allocate with talloc_zero. The third patch removes the explicit talloc_free of the sss_dp_callback structures, because they are already freed because cmdctx was freed during the callback. bye, Sumit

2 2

[PATCH] Always use uint32_t for UID/GID numbers (master)
by Jakub Hrozek 26 Oct '10

26 Oct '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 As discovered by QA, we were not consistent across architectures with our handling of UID numbers. This patch converts to strtouint32(), so we use the fixed-width uint32_t everywhere. Attached are patches for both master and 1.2, where the patch also fixes one additional place which was still using strtol(). Jakub -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzFidMACgkQHsardTLnvCWHegCfa7bj/AWnNa6nBjW9qzz3rA+H iykAnRYj/xtrnP3YLI+adJ1vLQc3Obc4 =CpSQ -----END PGP SIGNATURE-----

2 6

[PATCH] Minor improvements to the prerelease S/RPM builds
by Stephen Gallagher 26 Oct '10

26 Oct '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm doing some work to get the automated builds working again in the post-ding_libs world. This is just a minor patch to the Makefile to add the current minute to the timestamp. Also changes 'make srpms' to 'make srpm', since we're only creating one. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzFxtcACgkQeiVVYja6o6O4lwCgoqlVbXCOzADYloNK9keLQs8N SBIAn1oOfIkjE2nPqKmJsfM2iVJhtoXb =n6h/ -----END PGP SIGNATURE-----

2 2

[PATCHES] Netgroups for proxy provider
by Sumit Bose 25 Oct '10

25 Oct '10

Hi, there two patches add netgroups support for the proxy provider as requested in ticket #630. bye, Sumit

2 4

[PATCH] Use unsigned long for conversion to id_t (sssd 1.2 only)
by Jakub Hrozek 22 Oct '10

22 Oct '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We used strtol() on a number of places to convert into uid_t or gid_t from a string representation such as LDAP attribute, but on some platforms, unsigned long might be necessary to store big id_t values. This patch converts to using strtoul() instead. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAky8nN4ACgkQHsardTLnvCWRzQCcDqc0Wpf+5Dg7NsN6Jf/Bh43G rVMAoMJT5OHxSMgwWFDMMSXXusV9F/3n =hYrP -----END PGP SIGNATURE-----

4 4

[PATCH] Download only enabled IPA HBAC rules
by Sumit Bose 22 Oct '10

22 Oct '10

Hi, with this patch only enabled IPA HABC rules are loaded and saved in sysdb. This fixes ticket #530. bye, Sumit

2 3

[PATCH] Add ldap_deref option
by Sumit Bose 22 Oct '10

22 Oct '10

Hi, as requested by ticket #568 this patch adds the option ldap_deref to sssd.conf. This option controls how aliases are dereferenced. bye, Sumit

3 4

[Transifex] File submitted via email to SSSD | master
by admin＠transifex.net 22 Oct '10

22 Oct '10

Hello sssd, this is Transifex at http://www.transifex.net. The following attached files were submitted to SSSD | master by yurchor <yurchor(a)ukr.net> Please, visit Transifex at http://www.transifex.net/projects/p/sssd/c/master/ in order to see the component page. Thank you, Transifex

2 1

[PATCH] Add some missing ldap_memfree()
by Sumit Bose 22 Oct '10

22 Oct '10

Hi, I've found a few places where we do not free the error message returned by ldap_parse_result(). This patch should fix this. bye, Sumit

3 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel October 2010