March 2011 - YaST Commits - openSUSE Mailing Lists

[yast-commit] r63590 - /tags/branch-Code-11-SP2-2_17_3/
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 09:40:11 2011 New Revision: 63590 URL: http://svn.opensuse.org/viewcvs/yast?rev=63590&view=rev Log: Created tag branch-Code-11-SP2-2_17_3 Added: tags/branch-Code-11-SP2-2_17_3/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63589 - in /branches/SuSE-Code-11-SP2-Branch/pam: VERSION agents/etc_krb5_conf.scr agents/etc_sssd_conf.scr package/yast2-pam.changes yast2-pam.spec.in
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 09:40:06 2011 New Revision: 63589 URL: http://svn.opensuse.org/viewcvs/yast?rev=63589&view=rev Log: (backport from 11.4:) - agents for accessing krb5.conf and sssd.conf moved here, so they are available in more modules - 2.17.3 Added: branches/SuSE-Code-11-SP2-Branch/pam/agents/etc_krb5_conf.scr branches/SuSE-Code-11-SP2-Branch/pam/agents/etc_sssd_conf.scr Modified: branches/SuSE-Code-11-SP2-Branch/pam/VERSION branches/SuSE-Code-11-SP2-Branch/pam/package/yast2-pam.changes branches/SuSE-Code-11-SP2-Branch/pam/yast2-pam.spec.in Modified: branches/SuSE-Code-11-SP2-Branch/pam/VERSION URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/pam/V… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/pam/VERSION (original) +++ branches/SuSE-Code-11-SP2-Branch/pam/VERSION Fri Mar 18 09:40:06 2011 @@ -1 +1 @@ -2.17.2 +2.17.3 Added: branches/SuSE-Code-11-SP2-Branch/pam/agents/etc_krb5_conf.scr URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/pam/a… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/pam/agents/etc_krb5_conf.scr (added) +++ branches/SuSE-Code-11-SP2-Branch/pam/agents/etc_krb5_conf.scr Fri Mar 18 09:40:06 2011 @@ -0,0 +1,37 @@ +/** + * File: + * etc_krb5_conf.scr + * Summary: + * SCR Agent for reading/writing /etc/krb5.conf using the ini-agent + * + * $Id: etc_krb5_conf.scr 63250 2011-01-21 12:02:34Z jsuchome $ + * + * Read/Sets the values defined in <tt>/etc/krb5.conf</tt>. + * Warning! The file has 2 type of sections! + */ +.etc.krb5_conf + +`ag_ini( + `IniAgent( + "/etc/krb5.conf", + $[ + "options" : [ "global_values", "repeat_names" ], + "comments": [ "^[ \t]*#.*", "#.*", "^[ \t]*$" ], + "sections" : [ + $[ + "begin" : [ "^[ \t]*\\[[ \t]*(.*[^ \t])[ \t]*\\][ \t]*", "[%s]" ], + ], + $[ + "begin" : [ "^[ \t]*(.*[^ \t])[ \t]*=[ \t]*\\{[ \t]*", "%s = {" ], + "end" : [ "^[ \t]*[ \t]*\\}[ \t]*", "}" ] + ] + ], + "subindent": "\t", + "params" : [ + $[ + "match" : [ "^[ \t]*([^=]*[^ \t=])[ \t]*=[ \t]*(.*[^ \t]|)[ \t]*$" , "%s = %s"], + ], + ], + ] + ) +) Added: branches/SuSE-Code-11-SP2-Branch/pam/agents/etc_sssd_conf.scr URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/pam/a… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/pam/agents/etc_sssd_conf.scr (added) +++ branches/SuSE-Code-11-SP2-Branch/pam/agents/etc_sssd_conf.scr Fri Mar 18 09:40:06 2011 @@ -0,0 +1,25 @@ +# + +.etc.sssd_conf + +`ag_ini( + `IniAgent("/etc/sssd/sssd.conf", $[ + "options" : [ "ignore_case_regexps", "line_can_continue"], + "comments": [ + "^[ \t]*$", // empty line + "^[ \t]*[;#].*" + ], + "sections" : [ + $[ + "begin" : [ "^[ \t]*\\[[ \t]*(.*[^ \t])[ \t]*\\][ \t]*", "[%s]" ], + ] + ], + "params" : [ + $[ + "match" : [ "^[ \t]*([a-z0-9:_ ]*[a-z])[ \t]*=[ \t]*(.*[^ \t])[ \t]*$" , "%s = %s"], + ] + ] + ] + ) +) + Modified: branches/SuSE-Code-11-SP2-Branch/pam/package/yast2-pam.changes URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/pam/p… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/pam/package/yast2-pam.changes (original) +++ branches/SuSE-Code-11-SP2-Branch/pam/package/yast2-pam.changes Fri Mar 18 09:40:06 2011 @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Fri Mar 18 09:31:58 CET 2011 - jsuchome(a)suse.cz + +- agents for accessing krb5.conf and sssd.conf moved here, + so they are available in more modules +- 2.17.3 + +------------------------------------------------------------------- Thu Dec 10 14:01:00 CET 2009 - jsuchome(a)suse.cz - kde4-kdm is now kdm (bnc#561900) Modified: branches/SuSE-Code-11-SP2-Branch/pam/yast2-pam.spec.in URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/pam/y… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/pam/yast2-pam.spec.in (original) +++ branches/SuSE-Code-11-SP2-Branch/pam/yast2-pam.spec.in Fri Mar 18 09:40:06 2011 @@ -1,6 +1,8 @@ @HEADER-COMMENT@ @HEADER@ +Group: System/YaST +License: GPL v2 or later BuildRequires: yast2-devtools doxygen yast2-core-devel perl-XML-Writer yast2 yast2-testsuite Requires: yast2 -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63588 - /tags/branch-Code-11-SP2-2_17_4/ldap/
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 08:55:07 2011 New Revision: 63588 URL: http://svn.opensuse.org/viewcvs/yast?rev=63588&view=rev Log: Created tag branch-Code-11-SP2-2_17_4 for ldap Added: tags/branch-Code-11-SP2-2_17_4/ldap/ (props changed) - copied from r63587, branches/SuSE-Code-11-SP2-Branch/ldap/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63587 - /tags/branch-Code-11-SP2-2_17_4/
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 08:55:02 2011 New Revision: 63587 URL: http://svn.opensuse.org/viewcvs/yast?rev=63587&view=rev Log: Created tag branch-Code-11-SP2-2_17_4 Added: tags/branch-Code-11-SP2-2_17_4/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63586 - in /branches/SuSE-Code-11-SP2-Branch/ldap: VERSION doc/ldap.html package/yast2-ldap.changes src/LdapAgent.cc src/LdapAgent.h yast2-ldap.spec.in
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 08:54:54 2011 New Revision: 63586 URL: http://svn.opensuse.org/viewcvs/yast?rev=63586&view=rev Log: - added support for setting TLS options - added command to close the connection - 2.17.4 Modified: branches/SuSE-Code-11-SP2-Branch/ldap/VERSION branches/SuSE-Code-11-SP2-Branch/ldap/doc/ldap.html branches/SuSE-Code-11-SP2-Branch/ldap/package/yast2-ldap.changes branches/SuSE-Code-11-SP2-Branch/ldap/src/LdapAgent.cc branches/SuSE-Code-11-SP2-Branch/ldap/src/LdapAgent.h branches/SuSE-Code-11-SP2-Branch/ldap/yast2-ldap.spec.in Modified: branches/SuSE-Code-11-SP2-Branch/ldap/VERSION URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap/… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap/VERSION (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap/VERSION Fri Mar 18 08:54:54 2011 @@ -1 +1 @@ -2.17.3 +2.17.4 Modified: branches/SuSE-Code-11-SP2-Branch/ldap/doc/ldap.html URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap/… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap/doc/ldap.html (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap/doc/ldap.html Fri Mar 18 08:54:54 2011 @@ -450,6 +450,15 @@ </td> </tr> + <tr><td><tt>.ldap.close</td> + <td align="left">none</td> + <td>Closes current connection: does UNBIND and destroys current object.<br> + <pre> + Execute (.ldap.close) + </pre> + + </td> + </tr> </table> Modified: branches/SuSE-Code-11-SP2-Branch/ldap/package/yast2-ldap.changes URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap/… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap/package/yast2-ldap.changes (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap/package/yast2-ldap.changes Fri Mar 18 08:54:54 2011 @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Fri Mar 18 08:25:57 CET 2011 - jsuchome(a)suse.cz + +- added support for setting TLS options +- added command to close the connection +- 2.17.4 + +------------------------------------------------------------------- Wed Sep 3 14:34:14 CEST 2008 - jsuchome(a)suse.cz - LdapServerAccess.pm: adapted to new LdapServer API Modified: branches/SuSE-Code-11-SP2-Branch/ldap/src/LdapAgent.cc URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap/… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap/src/LdapAgent.cc (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap/src/LdapAgent.cc Fri Mar 18 08:54:54 2011 @@ -500,6 +500,33 @@ } /** + * Adapt TLS Settings of existing LDAP connection + * args is argument map got from YCP call + * tls is string, values are "yes" and "try" + */ +void LdapAgent::set_tls_options (YCPMap args, string set_tls) +{ + string cacertfile = getValue (args, "cacertfile"); + string cacertdir = getValue (args, "cacertdir"); + + TlsOptions tls = ldap->getTlsOptions(); + if (cacertfile != "") { + tls.setOption (TlsOptions::CACERTFILE, cacertfile); + } + if (cacertdir != "") { + tls.setOption (TlsOptions::CACERTDIR, cacertdir); + } + + if (set_tls == "yes") { + tls.setOption (TlsOptions::REQUIRE_CERT, TlsOptions::DEMAND); + } + if (set_tls == "try") { + tls.setOption (TlsOptions::REQUIRE_CERT, TlsOptions::TRY); + } +} + + +/** * Dir */ YCPList LdapAgent::Dir(const YCPPath& path) @@ -1230,7 +1257,6 @@ } port = getIntValue (argmap, "port", DEFAULT_PORT); - // int version = getIntValue (argmap, "version", 3); TODO // TODO how/where to set this? cons = new LDAPConstraints; @@ -1248,6 +1274,7 @@ // start TLS if proper parameter is given string tls = getValue (argmap, "use_tls"); + set_tls_options (argmap, tls); if (tls == "try" || tls == "yes") { try { @@ -1402,6 +1429,16 @@ ldap->unbind(); return YCPBoolean(true); } + /** + * close the connection, delete object + */ + else if (PC(0) == "close") { + ldap->unbind(); + delete ldap; + ldap = NULL; + ldap_initialized = false; + return YCPBoolean(true); + } /** * Initialize schema: read and parse it */ @@ -1436,6 +1473,7 @@ } else if (PC(0) == "start_tls") { + set_tls_options (argmap, "yes"); try { ldap->start_tls (); } @@ -1446,6 +1484,7 @@ } return YCPBoolean(true); } + else { y2error("Wrong path '%s' in Execute().", path->toString().c_str()); } Modified: branches/SuSE-Code-11-SP2-Branch/ldap/src/LdapAgent.h URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap/… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap/src/LdapAgent.h (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap/src/LdapAgent.h Fri Mar 18 08:54:54 2011 @@ -157,6 +157,11 @@ void debug_referral (LDAPReferralException e, string action); /** + * Adapt TLS Settings of existing LDAP connection + */ + void set_tls_options (YCPMap args, string tls); + + /** * creates attributes for new LDAP object and fills their values */ void generate_attr_list (LDAPAttributeList* attrs, YCPMap map); Modified: branches/SuSE-Code-11-SP2-Branch/ldap/yast2-ldap.spec.in URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap/… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap/yast2-ldap.spec.in (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap/yast2-ldap.spec.in Fri Mar 18 08:54:54 2011 @@ -1,6 +1,8 @@ @HEADER-COMMENT@ @HEADER@ +Group: System/YaST +License: GPL v2 or later BuildRequires: gcc-c++ libldapcpp-devel libxcrypt-devel yast2-devtools doxygen yast2-core-devel yast2 Summary: SCR agent for accessing LDAP. Requires: ldapcpplib yast2 -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63585 - /branches/SuSE-Code-11-SP2-Branch/ldap/
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 08:19:20 2011 New Revision: 63585 URL: http://svn.opensuse.org/viewcvs/yast?rev=63585&view=rev Log: backports for SLE11SP2 Added: branches/SuSE-Code-11-SP2-Branch/ldap/ (props changed) - copied from r63584, branches/SuSE-Code-11-SP1-Branch/ldap/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63584 - /tags/stable-2_21_1/ldap-client/
by jsuchome＠svn2.opensuse.org 17 Mar '11

17 Mar '11

Author: jsuchome Date: Thu Mar 17 09:14:50 2011 New Revision: 63584 URL: http://svn.opensuse.org/viewcvs/yast?rev=63584&view=rev Log: Created tag stable-2_21_1 for ldap-client Added: tags/stable-2_21_1/ldap-client/ - copied from r63583, trunk/ldap-client/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63583 - in /trunk/ldap-client: VERSION package/yast2-ldap-client.changes src/Ldap.ycp
by jsuchome＠svn2.opensuse.org 17 Mar '11

17 Mar '11

Author: jsuchome Date: Thu Mar 17 09:14:40 2011 New Revision: 63583 URL: http://svn.opensuse.org/viewcvs/yast?rev=63583&view=rev Log: - if sssd is removed in GUI, remove also the pam module (bnc#680184) - 2.21.1 Modified: trunk/ldap-client/VERSION trunk/ldap-client/package/yast2-ldap-client.changes trunk/ldap-client/src/Ldap.ycp Modified: trunk/ldap-client/VERSION URL: http://svn.opensuse.org/viewcvs/yast/trunk/ldap-client/VERSION?rev=63583&r1… ============================================================================== --- trunk/ldap-client/VERSION (original) +++ trunk/ldap-client/VERSION Thu Mar 17 09:14:40 2011 @@ -1 +1 @@ -2.21.0 +2.21.1 Modified: trunk/ldap-client/package/yast2-ldap-client.changes URL: http://svn.opensuse.org/viewcvs/yast/trunk/ldap-client/package/yast2-ldap-c… ============================================================================== --- trunk/ldap-client/package/yast2-ldap-client.changes (original) +++ trunk/ldap-client/package/yast2-ldap-client.changes Thu Mar 17 09:14:40 2011 @@ -1,4 +1,10 @@ ------------------------------------------------------------------- +Thu Mar 17 09:12:33 CET 2011 - jsuchome(a)suse.cz + +- if sssd is removed in GUI, remove also the pam module (bnc#680184) +- 2.21.1 + +------------------------------------------------------------------- Fri Mar 11 15:02:00 CET 2011 - jsuchome(a)suse.cz - check if OES is there during autoinstallation (bnc#670288) Modified: trunk/ldap-client/src/Ldap.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/ldap-client/src/Ldap.ycp?rev=635… ============================================================================== --- trunk/ldap-client/src/Ldap.ycp (original) +++ trunk/ldap-client/src/Ldap.ycp Thu Mar 17 09:14:40 2011 @@ -2672,6 +2672,11 @@ { Pam::Add ("ldap"); } + // sss was removed, using pam_ldap (bnc#680184) + if (Pam::Enabled ("sss")) + { + Pam::Remove ("sss"); + } // modify sources in /etc/nsswitch.conf Nsswitch::WriteDb ("passwd", ["compat"]); -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63582 - /branches/SuSE-Code-11-SP2-Branch/kerberos-client/
by jsuchome＠svn2.opensuse.org 17 Mar '11

17 Mar '11

Author: jsuchome Date: Thu Mar 17 08:40:30 2011 New Revision: 63582 URL: http://svn.opensuse.org/viewcvs/yast?rev=63582&view=rev Log: yast2-kerberos-client for SP2 (fate#308902) Added: branches/SuSE-Code-11-SP2-Branch/kerberos-client/ (props changed) - copied from r63581, branches/SuSE-Code-11-SP1-Branch/kerberos-client/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63581 - /branches/SuSE-Code-11-SP2-Branch/ldap-client/
by jsuchome＠svn2.opensuse.org 17 Mar '11

17 Mar '11

Author: jsuchome Date: Thu Mar 17 08:40:08 2011 New Revision: 63581 URL: http://svn.opensuse.org/viewcvs/yast?rev=63581&view=rev Log: yast2-ldap-client for SP2 (fate#308902) Added: branches/SuSE-Code-11-SP2-Branch/ldap-client/ (props changed) - copied from r63580, branches/SuSE-Code-11-SP1-Branch/ldap-client/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0