<feed xmlns='http://www.w3.org/2005/Atom'>
<title>sssd.git/src/db, branch 1.9.2-40</title>
<subtitle>sssd with jhrozek's patches</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/'/>
<entry>
<title>SYSDB: Move misplaced assignment</title>
<updated>2012-12-14T16:45:18+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-12-10T02:11:59+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=fb75b1f22d621de466092cad2a15f46b0598ced5'/>
<id>fb75b1f22d621de466092cad2a15f46b0598ced5</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Null pointer dereferenced.</title>
<updated>2012-11-28T13:45:56+00:00</updated>
<author>
<name>Michal Zidek</name>
<email>mzidek@redhat.com</email>
</author>
<published>2012-11-27T12:15:41+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=343fa08af09beaad71980d7a382036dd9a1dddde'/>
<id>343fa08af09beaad71980d7a382036dd9a1dddde</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1674
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1674
</pre>
</div>
</content>
</entry>
<entry>
<title>Uninitialized pointer read</title>
<updated>2012-11-28T13:44:16+00:00</updated>
<author>
<name>Michal Zidek</name>
<email>mzidek@redhat.com</email>
</author>
<published>2012-11-27T11:36:40+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=ba04f0b2e26e50af2598d02e2a9e9a56c47dce1f'/>
<id>ba04f0b2e26e50af2598d02e2a9e9a56c47dce1f</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1673
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1673
</pre>
</div>
</content>
</entry>
<entry>
<title>SYSDB: Don't operate with aliases same as name</title>
<updated>2012-11-27T10:21:38+00:00</updated>
<author>
<name>Ondrej Kos</name>
<email>okos@redhat.com</email>
</author>
<published>2012-11-23T09:21:45+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=f3d76a84c5cb9fe872114824018d9fbee52f691a'/>
<id>f3d76a84c5cb9fe872114824018d9fbee52f691a</id>
<content type='text'>
fixes https://fedorahosted.org/sssd/ticket/1628

When user's alias is same as it's name, don't use it for searching in
sysdb, and for deleting.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
fixes https://fedorahosted.org/sssd/ticket/1628

When user's alias is same as it's name, don't use it for searching in
sysdb, and for deleting.
</pre>
</div>
</content>
</entry>
<entry>
<title>LDAP: Only convert direct parents' ghost attribute to member</title>
<updated>2012-11-21T10:18:10+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-11-17T22:55:13+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=f9111f464376338317e30da637353e2c25869ce8'/>
<id>f9111f464376338317e30da637353e2c25869ce8</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1612

This patch changes the handling of ghost attributes when saving the
actual user entry. Instead of always linking all groups that contained
the ghost attribute with the new user entry, the original member
attributes are now saved in the group object and the user entry is only
linked with its direct parents.

As the member attribute is compared against the originalDN of the user,
if either the originalDN or the originalMember attributes are missing,
the user object is linked with all the groups as a fallback.

The original member attributes are only saved if the LDAP schema
supports nesting.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1612

This patch changes the handling of ghost attributes when saving the
actual user entry. Instead of always linking all groups that contained
the ghost attribute with the new user entry, the original member
attributes are now saved in the group object and the user entry is only
linked with its direct parents.

As the member attribute is compared against the originalDN of the user,
if either the originalDN or the originalMember attributes are missing,
the user object is linked with all the groups as a fallback.

The original member attributes are only saved if the LDAP schema
supports nesting.
</pre>
</div>
</content>
</entry>
<entry>
<title>SYSDB: Use the add_string convenience functions for managing ghost user attribute</title>
<updated>2012-11-21T10:18:06+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-11-17T22:00:03+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=fcea2fb0044b50b54bb02238782b6631dbc9bb90'/>
<id>fcea2fb0044b50b54bb02238782b6631dbc9bb90</id>
<content type='text'>
Using the convenience function instead of low-level ldb calls makes the
code more compact and more readable.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Using the convenience function instead of low-level ldb calls makes the
code more compact and more readable.
</pre>
</div>
</content>
</entry>
<entry>
<title>Handle conversion to fully qualified usernames</title>
<updated>2012-11-19T14:31:04+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-11-16T20:25:44+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=d993dc0a566dbf79f808d0ec35c8e61806f34e40'/>
<id>d993dc0a566dbf79f808d0ec35c8e61806f34e40</id>
<content type='text'>
In subdomains we have to use fully qualified usernames.
Unfortunately we have no other good option than simply removing
caches for users of subdomains.
This is because the memberof plugin does not support the rename operation.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
In subdomains we have to use fully qualified usernames.
Unfortunately we have no other good option than simply removing
caches for users of subdomains.
This is because the memberof plugin does not support the rename operation.
</pre>
</div>
</content>
</entry>
<entry>
<title>Refactor the way subdomain accounts are saved</title>
<updated>2012-11-19T14:30:57+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-11-16T20:25:42+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=9342c9bfb794bde7c54928d73cb41d33e3b4917f'/>
<id>9342c9bfb794bde7c54928d73cb41d33e3b4917f</id>
<content type='text'>
The original sysdb code had a strong assumption that only users from one
domain are saved in the databse, with the subdomain feature, we have
changed reality, but have not adjusted all the code arund the sysdb calls
to not rely on the original assumption.

One of the side effects of this incongrunece is that currently group
memberships do not return fully qualified names for subdomain users as they
should.

In oreder to fix this and other potential issues surrounding the violation
of the original assumption, we need to fully qualify subdomain user names.
By savin them fully qualified we do not risk aliasing local users and have
group memberhips or other name based matching code mistake a domain user
with subdomain usr or vice versa.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The original sysdb code had a strong assumption that only users from one
domain are saved in the databse, with the subdomain feature, we have
changed reality, but have not adjusted all the code arund the sysdb calls
to not rely on the original assumption.

One of the side effects of this incongrunece is that currently group
memberships do not return fully qualified names for subdomain users as they
should.

In oreder to fix this and other potential issues surrounding the violation
of the original assumption, we need to fully qualify subdomain user names.
By savin them fully qualified we do not risk aliasing local users and have
group memberhips or other name based matching code mistake a domain user
with subdomain usr or vice versa.
</pre>
</div>
</content>
</entry>
<entry>
<title>Simplify writing db update functions</title>
<updated>2012-11-19T14:30:53+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-11-14T13:17:54+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=39d3e4a184fc64c252ea276e1319ed6377d245ff'/>
<id>39d3e4a184fc64c252ea276e1319ed6377d245ff</id>
<content type='text'>
Add functions to automate setting versions numbers in the db, also
decrease chances of error in copying and pasting code, by setting
the version number only once when we commence the upgrade.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Add functions to automate setting versions numbers in the db, also
decrease chances of error in copying and pasting code, by setting
the version number only once when we commence the upgrade.
</pre>
</div>
</content>
</entry>
<entry>
<title>Display more information on DB version crash</title>
<updated>2012-11-19T13:02:19+00:00</updated>
<author>
<name>Ondrej Kos</name>
<email>okos@redhat.com</email>
</author>
<published>2012-11-08T13:34:36+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=6642637ef37258686c34f5b630d5fcba99bea3ee'/>
<id>6642637ef37258686c34f5b630d5fcba99bea3ee</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1589

Added check for determining, whether database version is higher or
lower than expected. To distinguish it from other errors it uses
following retun values (further used for appropriate error message):
EMEDIUMTYPE for lower version than expected
EUCLEAN for higher version than expected

When SSSD or one of it's tools fails on DB version mismatch, new error
message is showed suggesting how to proceed.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1589

Added check for determining, whether database version is higher or
lower than expected. To distinguish it from other errors it uses
following retun values (further used for appropriate error message):
EMEDIUMTYPE for lower version than expected
EUCLEAN for higher version than expected

When SSSD or one of it's tools fails on DB version mismatch, new error
message is showed suggesting how to proceed.
</pre>
</div>
</content>
</entry>
</feed>
