sssd.git/contrib, branch sysdb

SPEC: Change package ownership of %{pubconfpath}/krb5.include.d

2016-01-11T10:09:37+00:00

krb5 domain mapping files are stored to the directory
%{pubconfpath}/krb5.include.d. It can be stored by ipa or ad provider.
However this directory was owned by sub-package sssd-ipa. And ad provider
can be installed without this package. Therefore %{pubconfpath}/krb5.include.d
should be owned by common dependency.

The owner of this directory was also fixed to sssd.
It's already done by make install. It was changed only in spec file.

Reviewed-by: Jakub Hrozek

BUILD: Only install polkit rules if the directory is available

2015-11-26T11:07:17+00:00

Reviewed-by: Lukáš Slebodník

CONTRIB: Add a gdb pretty-printer for ldb and sysdb_attrs

2015-11-23T12:47:52+00:00

Printing ldb structures and sysdb_attrs can be a pain. This patch adds a
gdb pretty-printer to help

SSSD and LDB debugging plugins

Activate them by putting:
  source /path/to/this/file.py
to your .gdbinit file

To bypass the pretty printer and print the raw values, use the "/r" option:
  print /r foobar

Reviewed-by: Lukáš Slebodník

CI: Update suppression file for 32bit el6

2015-11-20T17:40:19+00:00

Some extra functions were in stack trace on 32 bit architecture.
It might be caused by different optimisation on different platforms.
As a result of this mismatch, the suppression did not match
on 32 bit architecture and it was reported as new memory related error.

Reviewed-by: Jakub Hrozek

p11: allow p11_child to run completely unprivileged

2015-11-20T13:56:34+00:00

To only operation of p11_child which requires special privileges is the
communication to pcscd which handles the Smartcard access. pcscd uses
policy-kit for access control so access can easily be configured by
dropping config snippets into the right directory.

If SSSD is configured to run as un-privileged user this patch creates
the needed config snippet for policy-kit and installs it in a suitable
directory. As a result p11_child does not have to be installed with
SETUID or SETGID bits set.

Resolves https://fedorahosted.org/sssd/ticket/2755 by making it obsolete

Reviewed-by: Jakub Hrozek

CI: Enforce coverage make check failures

2015-11-09T13:38:48+00:00

Fail CI coverage build, if make-check stage fails. Previously make-check
stage failures were ignored for coverage build for the sake of
collecting coverage data in any case. However, catching extra test
failures seems more important than getting coverage data in all cases,
thus the change.

Reviewed-by: Lukáš Slebodník

CI: Workaroung for code coverage with old gcc

2015-11-09T13:30:44+00:00

It's fixed in upstream gcc >= 4.6.0

Resolves:
https://fedorahosted.org/sssd/ticket/2819

Reviewed-by: Nikolai Kondrashov

spec: Missing initgroups mmap file

2015-10-22T07:06:37+00:00

Reviewed-by: Lukáš Slebodník

CI: Handle dashes in valgrind-condense

2015-10-20T10:53:51+00:00

Make valgrind-condense work on program names which start with a dash
character.

Reviewed-by: Lukáš Slebodník

CI: Do not skip tests not checked with Valgrind

2015-10-20T10:53:46+00:00

Make contrib/ci/valgrind-condense execute programs not matching the
supplied PATH_PATTERN without Valgrind, instead of simply exiting
successfully.

This makes the make-check-valgrind stage actually run the tests not
checked with Valgrind, instead of skipping them.

Reviewed-by: Lukáš Slebodník