<feed xmlns='http://www.w3.org/2005/Atom'>
<title>sssd.git/src/man, branch token</title>
<subtitle>System Security Services Daemon [okos' clone]</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/'/>
<entry>
<title>krb5: Fetch ccname template from krb5.conf</title>
<updated>2013-08-28T09:00:03+00:00</updated>
<author>
<name>Stephen Gallagher</name>
<email>sgallagh@redhat.com</email>
</author>
<published>2013-08-27T17:36:41+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=dcc6877aa2e2dd63a9dc9c411a9c58feaeb36b9a'/>
<id>dcc6877aa2e2dd63a9dc9c411a9c58feaeb36b9a</id>
<content type='text'>
In order to use the same defaults in all system daemons that needs to know how
to generate or search for ccaches we introduce ode here to take advantage of
the new option called default_ccache_name provided by libkrb5.

If set this variable we establish the same default for all programs that surce
it out of krb5.conf therefore providing a consistent experience across the
system.

Related:
https://fedorahosted.org/sssd/ticket/2036
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
In order to use the same defaults in all system daemons that needs to know how
to generate or search for ccaches we introduce ode here to take advantage of
the new option called default_ccache_name provided by libkrb5.

If set this variable we establish the same default for all programs that surce
it out of krb5.conf therefore providing a consistent experience across the
system.

Related:
https://fedorahosted.org/sssd/ticket/2036
</pre>
</div>
</content>
</entry>
<entry>
<title>KRB5: Add support for KEYRING cache type</title>
<updated>2013-08-27T15:05:15+00:00</updated>
<author>
<name>Stephen Gallagher</name>
<email>sgallagh@redhat.com</email>
</author>
<published>2013-08-15T23:36:26+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=aeb1e654c337037b6bdb350e1ec8aaa065e86794'/>
<id>aeb1e654c337037b6bdb350e1ec8aaa065e86794</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/2036
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/2036
</pre>
</div>
</content>
</entry>
<entry>
<title>MAN: AD provider only supports trusted domains from the same forest</title>
<updated>2013-08-24T16:04:48+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2013-08-11T22:19:42+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=728a1812b7c5f70febb522342c5b357da598acfe'/>
<id>728a1812b7c5f70febb522342c5b357da598acfe</id>
<content type='text'>
Resolves:
https://fedorahosted.org/sssd/ticket/2044
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Resolves:
https://fedorahosted.org/sssd/ticket/2044
</pre>
</div>
</content>
</entry>
<entry>
<title>Netgroups should ignore the 'use_fully_qualified_names' setting</title>
<updated>2013-07-29T10:59:17+00:00</updated>
<author>
<name>Stephen Gallagher</name>
<email>sgallagh@redhat.com</email>
</author>
<published>2013-07-11T14:06:09+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=1933ff17513da1d979dd22776a03478341ef5e6b'/>
<id>1933ff17513da1d979dd22776a03478341ef5e6b</id>
<content type='text'>
Netgroups often have memberNisNetgroup entries included in them
that will never process correctly if we require fully-qualified
names on the nested lookup. This patch alters the behavior of
netgroup lookups to check *all* domains for an unqualified
netgroup name, instead of only the ones not requiring fully-
qualified names.

https://fedorahosted.org/sssd/ticket/2013
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Netgroups often have memberNisNetgroup entries included in them
that will never process correctly if we require fully-qualified
names on the nested lookup. This patch alters the behavior of
netgroup lookups to check *all* domains for an unqualified
netgroup name, instead of only the ones not requiring fully-
qualified names.

https://fedorahosted.org/sssd/ticket/2013
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix two minor typos</title>
<updated>2013-07-25T15:43:05+00:00</updated>
<author>
<name>Yuri Chornoivan</name>
<email>yurchor@ukr.net</email>
</author>
<published>2013-07-24T13:28:13+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=898c4f965aeea2aa029ad56b9e9f48abce17a582'/>
<id>898c4f965aeea2aa029ad56b9e9f48abce17a582</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Updating translations for the 1.11 beta2 release</title>
<updated>2013-07-24T12:26:52+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2013-07-24T12:26:52+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=d6d50c17e94dc0d3000345e8a933311c14bbb828'/>
<id>d6d50c17e94dc0d3000345e8a933311c14bbb828</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Set default DNS resolution timeout to 6 seconds.</title>
<updated>2013-07-24T11:54:33+00:00</updated>
<author>
<name>Michal Zidek</name>
<email>mzidek@redhat.com</email>
</author>
<published>2013-07-04T11:32:07+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=6176eeeae6e75d3ce78eb98d46dc478541ba6282'/>
<id>6176eeeae6e75d3ce78eb98d46dc478541ba6282</id>
<content type='text'>
Partially solves ticket:
https://fedorahosted.org/sssd/ticket/1966

To avoid the problem mentioned in the ticket above, option
dns_discovery_domain must be set properly.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Partially solves ticket:
https://fedorahosted.org/sssd/ticket/1966

To avoid the problem mentioned in the ticket above, option
dns_discovery_domain must be set properly.
</pre>
</div>
</content>
</entry>
<entry>
<title>MAN: Clarify the min_id/max_id limits further</title>
<updated>2013-07-17T13:06:30+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2013-07-12T14:55:47+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=d1ccb40d426d7c67dfa0c86cdabbb3ed9a7585eb'/>
<id>d1ccb40d426d7c67dfa0c86cdabbb3ed9a7585eb</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/2005

Some users were confused by our description of min_id/max_id and thought
the limits only applied to returning entries from the NSS responder.
However, the limits are actually enforced on the back end side, so the
entries are not even saved to cache.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/2005

Some users were confused by our description of min_id/max_id and thought
the limits only applied to returning entries from the NSS responder.
However, the limits are actually enforced on the back end side, so the
entries are not even saved to cache.
</pre>
</div>
</content>
</entry>
<entry>
<title>MAN: IP addresss does not work when used for ad_server</title>
<updated>2013-07-17T13:06:30+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2013-07-12T14:44:39+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=02ec52b73c1714b877b0b7bc43fbc8d36ad8ca40'/>
<id>02ec52b73c1714b877b0b7bc43fbc8d36ad8ca40</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1998

Currently using IP address as value of ad_server is not supported, so
the man pages should not mention that as an option.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1998

Currently using IP address as value of ad_server is not supported, so
the man pages should not mention that as an option.
</pre>
</div>
</content>
</entry>
<entry>
<title>MAN: clarify the default access provider for AD</title>
<updated>2013-07-17T13:06:30+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2013-07-12T14:41:49+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=8cc00c355862f5573f884efe828aa4c0f855376a'/>
<id>8cc00c355862f5573f884efe828aa4c0f855376a</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1965

After we added a section that clarified what access_provider=ad did,
some users were confused and thought that "ad" was also the default
access provider if "id_provider=ad" was specified.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1965

After we added a section that clarified what access_provider=ad did,
some users were confused and thought that "ad" was also the default
access provider if "id_provider=ad" was specified.
</pre>
</div>
</content>
</entry>
</feed>
