<feed xmlns='http://www.w3.org/2005/Atom'>
<title>sssd.git/src/ldb_modules, branch ccname</title>
<subtitle>Experimental work on SSSD - Systen Security Services Daemon</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/'/>
<entry>
<title>MEMBEROF: Remove temporary workaround</title>
<updated>2013-08-28T20:02:49+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2013-08-28T06:31:18+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=47d35b3d6b0e1023c8dcdbc8371d6f3ca762dfe4'/>
<id>47d35b3d6b0e1023c8dcdbc8371d6f3ca762dfe4</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Every time use permissive control in function memberof_mod.</title>
<updated>2013-07-17T12:51:28+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2013-07-15T09:00:04+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=aab77886be61d915805bf16500e06fab6a5a7e4f'/>
<id>aab77886be61d915805bf16500e06fab6a5a7e4f</id>
<content type='text'>
Storing cyclic groups into sysdb can cause adding ghost members,
which has already been stored. Function ldb_modify will fail
with error [Attribute or value exists].

With permisive control, duplicated attributes will be skipped
as if it was never added.

https://fedorahosted.org/sssd/ticket/1846
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Storing cyclic groups into sysdb can cause adding ghost members,
which has already been stored. Function ldb_modify will fail
with error [Attribute or value exists].

With permisive control, duplicated attributes will be skipped
as if it was never added.

https://fedorahosted.org/sssd/ticket/1846
</pre>
</div>
</content>
</entry>
<entry>
<title>Making the ldb check configurable</title>
<updated>2013-03-20T11:28:55+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2013-03-13T10:09:11+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=ec26d836b1b2a41ec2692976a539da51f261412b'/>
<id>ec26d836b1b2a41ec2692976a539da51f261412b</id>
<content type='text'>
It is possible to enable/disable checking in LDB memberof plugin
whether it was built against the same version of LDB that is present
on the system. This feature is turned off by default
and enabled in Fedora/RHEL spec file.

https://fedorahosted.org/sssd/ticket/1813
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
It is possible to enable/disable checking in LDB memberof plugin
whether it was built against the same version of LDB that is present
on the system. This feature is turned off by default
and enabled in Fedora/RHEL spec file.

https://fedorahosted.org/sssd/ticket/1813
</pre>
</div>
</content>
</entry>
<entry>
<title>memberof: Prevent unneded failure case</title>
<updated>2012-12-19T17:35:20+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-12-19T01:52:02+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=aed6196263ebddb6f8ffb12eace11539f5941662'/>
<id>aed6196263ebddb6f8ffb12eace11539f5941662</id>
<content type='text'>
When deleting a user we would fail the operation completely if the member
attribute was not found on one of the groups it was allegedly member of.
Failing in this case is unnecessary, and can cause issues.
Found trying to upgrade db versione (and failing) on one of my RHEL machines.
Also removed a tray \ in the companion function that removes ghost members,
that function needs no changes as it was already ignoring this kind of
failure.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
When deleting a user we would fail the operation completely if the member
attribute was not found on one of the groups it was allegedly member of.
Failing in this case is unnecessary, and can cause issues.
Found trying to upgrade db versione (and failing) on one of my RHEL machines.
Also removed a tray \ in the companion function that removes ghost members,
that function needs no changes as it was already ignoring this kind of
failure.
</pre>
</div>
</content>
</entry>
<entry>
<title>MEMBEROF: silence compilation warnings</title>
<updated>2012-12-17T09:05:24+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-12-16T16:10:32+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=b1c0ad085fbfd9d2e29de15b131d2ff642b15708'/>
<id>b1c0ad085fbfd9d2e29de15b131d2ff642b15708</id>
<content type='text'>
src/ldb_modules/memberof.c: In function ‘mbof_get_ghost_from_parent_cb’:
src/ldb_modules/memberof.c:3085: warning: declaration of ‘dup’ shadows a global declaration
/usr/include/unistd.h:528: warning: shadowed declaration is here
src/ldb_modules/memberof.c: In function ‘mbof_inherited_mod’:
src/ldb_modules/memberof.c:3253: warning: declaration of ‘dup’ shadows a global declaration
/usr/include/unistd.h:528: warning: shadowed declaration is here
src/ldb_modules/memberof.c: In function ‘mbof_fill_vals_array’:
src/ldb_modules/memberof.c:3786: warning: declaration of ‘index’ shadows a global declaration
/usr/include/string.h:489: warning: shadowed declaration is here
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
src/ldb_modules/memberof.c: In function ‘mbof_get_ghost_from_parent_cb’:
src/ldb_modules/memberof.c:3085: warning: declaration of ‘dup’ shadows a global declaration
/usr/include/unistd.h:528: warning: shadowed declaration is here
src/ldb_modules/memberof.c: In function ‘mbof_inherited_mod’:
src/ldb_modules/memberof.c:3253: warning: declaration of ‘dup’ shadows a global declaration
/usr/include/unistd.h:528: warning: shadowed declaration is here
src/ldb_modules/memberof.c: In function ‘mbof_fill_vals_array’:
src/ldb_modules/memberof.c:3786: warning: declaration of ‘index’ shadows a global declaration
/usr/include/string.h:489: warning: shadowed declaration is here
</pre>
</div>
</content>
</entry>
<entry>
<title>MEMBEROF: Fix copy-n-paste error</title>
<updated>2012-12-10T18:37:52+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-12-09T13:25:15+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=cecec6c15d51544a7365459d14ebf87200eaed54'/>
<id>cecec6c15d51544a7365459d14ebf87200eaed54</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1703
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1703
</pre>
</div>
</content>
</entry>
<entry>
<title>MEMBEROF: Keep inherited ghost users around on modify operation</title>
<updated>2012-12-05T22:32:18+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-12-03T22:03:35+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=a7b0fa042d58c31140eee6927585c70c18f61584'/>
<id>a7b0fa042d58c31140eee6927585c70c18f61584</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1652

It is possible to simply reset the list of ghost users to a different one
during a modify operation. It is also actually how we update entries that
are expired in the SSSD cache.

In this case, we must be careful and retain the ghost users that are not
native to the group we are processing but are rather inherited from child
groups. The intention of the replace operation after all is to set the
list of direct members of that group, not direct and indirect.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1652

It is possible to simply reset the list of ghost users to a different one
during a modify operation. It is also actually how we update entries that
are expired in the SSSD cache.

In this case, we must be careful and retain the ghost users that are not
native to the group we are processing but are rather inherited from child
groups. The intention of the replace operation after all is to set the
list of direct members of that group, not direct and indirect.
</pre>
</div>
</content>
</entry>
<entry>
<title>MEMBEROF: Implement the modify operation for ghost users</title>
<updated>2012-12-05T22:32:18+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-11-27T15:09:23+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=521bc8907ac558320042f229691274d5aa7e55f0'/>
<id>521bc8907ac558320042f229691274d5aa7e55f0</id>
<content type='text'>
Similar to the add and delete operation, we also need to propagate the
changes of the ghost user attribute to the parent groups so that if a
nested group updates memberships, its parents also get the membership
updated.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Similar to the add and delete operation, we also need to propagate the
changes of the ghost user attribute to the parent groups so that if a
nested group updates memberships, its parents also get the membership
updated.
</pre>
</div>
</content>
</entry>
<entry>
<title>MEMBEROF: Split the add ghost operation into a separate function</title>
<updated>2012-12-05T22:32:18+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-11-27T15:06:42+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=562021e560a3be3f996551b297cada3cf8ce6cab'/>
<id>562021e560a3be3f996551b297cada3cf8ce6cab</id>
<content type='text'>
This new function will be reused by the modify operation later
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This new function will be reused by the modify operation later
</pre>
</div>
</content>
</entry>
<entry>
<title>MEMBEROF: Split the del ghost attribute op into a reusable function</title>
<updated>2012-12-05T22:32:18+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-11-26T17:22:12+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=08500fd7b7d64c26289a62772d433ea5bf578482'/>
<id>08500fd7b7d64c26289a62772d433ea5bf578482</id>
<content type='text'>
This new function is going to be reused by the modify operation
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This new function is going to be reused by the modify operation
</pre>
</div>
</content>
</entry>
</feed>
