sssd-devel November 2010

sssd-devel@lists.fedorahosted.org

13 participants
55 discussions

[PATCH] Add signal documentation to sssd(8)
by Stephen Gallagher 22 Nov '10

22 Nov '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Fixes https://fedorahosted.org/sssd/ticket/665 - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzmxl0ACgkQeiVVYja6o6PvAwCeLY6BO4K7XuUtId1VRb5gFGzp 2/QAn0V/TJuwjxveNvz24RSF/j/OaLxm =/Lb4 -----END PGP SIGNATURE-----

2 2

[PATCH] Add SIGUSR2 to reset offline status
by Sumit Bose 22 Nov '10

22 Nov '10

Hi, I have found this patch useful for testing, but it might be useful for other cases, too. bye, Sumit

2 3

[PATCH] Fix offline detection for LDAP auth/chpass
by Sumit Bose 19 Nov '10

19 Nov '10

Hi, this patch fixes the offline detection in the LDAP auth and chapss providers as reported in trac ticket #642. bye, Sumit

2 2

[PATCH] Fix man page
by Sumit Bose 19 Nov '10

19 Nov '10

Hi, I've found a misleading statement in the man page, this patch should fix it. bye, Sumit

3 4

[PATCH] Use a more efficient host search filter
by Sumit Bose 19 Nov '10

19 Nov '10

Hi, this patch should fix trac ticket #659. bye, Sumit

3 2

Re: [SSSD] [Freeipa-devel] Proposed changes to the HBAC grammar
by Stephen Gallagher 18 Nov '10

18 Nov '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 11/18/2010 09:55 AM, Dmitri Pal wrote: > Steve can you summarize where we are and what we agreed to, please, and > identify the questions that we need to answer. Simo, Adam and I had a long discussion on IRC regarding the time rules today (complete log attached). The short version is that we're going to continue (mostly) with the current grammar for the time rules, with a few changes. 1) We need to replace week-of-the-month with day-of-the-septet. This day should not be a range or multi-valued to eliminate confusion 2) We need to replace the time range with a duration 3) We should add startDate and endDate as attributes on the HBAC object (separate from the accessTime). I propose these should be in LDAP generalizedTime so that it's possible to construct filters around them. This effectively sets the beginning and end of a periodic schedule. I've drawn up a new grammar definition and published it to the SSSD wiki (not currently linked from anywhere): https://fedorahosted.org/sssd/wiki/HBAC_Grammar Please review and give feedback. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzllFMACgkQeiVVYja6o6PNIwCfQeLMCrWS0dW3t+pD8raTJ7d5 /7oAmwUAFMY1XAb289ysIGzSq3sPMjJF =a0mt -----END PGP SIGNATURE-----

1 0

[PATCH] Ensure that SSSD shuts down completely before restarting
by Stephen Gallagher 18 Nov '10

18 Nov '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I think this finally solves: https://bugzilla.redhat.com/show_bug.cgi?id=606887 killproc only sends SIGTERM, but doesn't check whether the process actually exited before returning success. So we were trying to start up a new SSSD process before the previous one had fully shut down. - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzj2nEACgkQeiVVYja6o6NsfACfaHXO+5z0iwjBqipQUc5YEFMk GW4AoJImxpFJc61WssedmRvPSC0Cwn9z =gNKu -----END PGP SIGNATURE-----

3 4

Proposed changes to the HBAC grammar
by Stephen Gallagher 18 Nov '10

18 Nov '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 During a discussion today about how to represent the HBAC grammar in the FreeIPA GUI, it became apparent that there was a limitation in the grammar. Specifically, it's not possible to describe in a non-ambiguous way "The first Wednesday of the month". Right now, this would be described by: accessTime: periodic monthly week 1 day 3 0800-1700 However, this literally means "Wednesdays that appear as the first week on a wall calendar". Meaning that if the month began on a Thursday, this rule would not fire this month. Thus it's not behaving in a way that would be reasonably expected by a user. After extended discussion, Simo, Ben and I discussed replacing this week-of-the-month concept with a septet-of-the-month concept instead. This would be described by: accessTime: periodic monthly septet 1 day 3 0800-1700 and would literally translate as "The wednesday that exists within the first septet of the month". The first septet being the range of day 1 through day 7, the second septet being day 8 through 14, and so forth. We all feel that this would map closer to a user's expectation when describing "the Nth Wednesday of the month", since it's a guarantee that Wednesday will appear only once within a septet. This will require two changes to the HBAC schema. First of all, we plan to drop the week-of-the-month concept entirely and replace it with septet-of-the-month. This is being done to eliminate the ambiguity entirely. Secondly, we will need to describe day-of-the-septet in the grammar (where the day of the septet describes the name of the weekday, and not its numerical position within the septet, as that would be a useless and complex duplication of the day-of-the-month concept). In a related note, we also discussed how to handle describing activity windows that cross the midnight boundary. It's my recommendation that we should handle examples like the following by breaking them into two separate accessTime attributes, one that describes the portion preceding midnight and describes the set of days wherein the block starts, and a second accessTime attribute that is offset by one day and describes the portion taking place after midnight. Second-shift (17:00-01:59, M-S*) *starts Monday, ends Saturday morning becomes accessTime: periodic weekly day 1-5 1700-2359 accessTime: periodic weekly day 2-6 0000-0159 - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzkRAwACgkQeiVVYja6o6NtHwCgi3Vk2Q2aZXKIRHM3fbWOsLHE X6UAn3zECofcDzG1+gJClyUlDVZvKnmS =+zfc -----END PGP SIGNATURE-----

5 9

[PATCH] Fix authentication queue code for proxy auth
by Stephen Gallagher 18 Nov '10

18 Nov '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We weren't decrementing the count of in-progress authentication request child processes when they completed successfully. With this patch, we will now guarantee that the process count is accurate and that queued requests will be started when a slot is freed up. Fixes https://fedorahosted.org/sssd/ticket/660 - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzi8xAACgkQeiVVYja6o6NNCACeIvmDO996YhUrA+qMXJ0K0ftn 6rgAn3k72jNZRSz2OQQec/0RUblGYQ+D =mdnh -----END PGP SIGNATURE-----

2 7

[PATCH] Wait for all children to exit
by Stephen Gallagher 18 Nov '10

18 Nov '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Previously, there was a race-condition where the monitor might terminate before its children. Resolves https://fedorahosted.org/sssd/ticket/555 - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzb+EUACgkQeiVVYja6o6NbAgCeJRn2o4WHjGKkQ8w/ezThS3lN R9AAnA3yTkPBCgkK069cG0n5XtzR9Oqw =DQHE -----END PGP SIGNATURE-----

2 7

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel November 2010