sssd.git/src/providers/krb5, branch refactor

Only call krb5_set_trace_callback on platforms that support it

2012-10-12T18:49:24+00:00

Collect krb5 trace on high debug levels

2012-10-12T07:56:54+00:00

If the debug level contains SSSDBG_TRACE_ALL, then the logs would also
include tracing information from libkrb5.

https://fedorahosted.org/sssd/ticket/1539

Two fixes to child processes

2012-10-12T07:56:54+00:00

There was an unused structure member in the krb5_child.

Declaration of __krb5_error_msg was shadowing the same variable from
sss_krb5.h which is not nice. Also we might actually use the error
context directly instead of passing it as parameter.

Add more info about ticket validation

2012-10-10T20:32:47+00:00

https://fedorahosted.org/sssd/ticket/1499

Adds log message about not finding appropriate entry in keytab and using
the last keytab entry when validation is enabled.

Adds more information about validation into manpage.

Log possibly non-randomizable ccache file template

2012-10-04T17:43:23+00:00

fixes https://fedorahosted.org/sssd/ticket/1533

ccache file template is now checked for appended XXXXXX for use with
mkstemp. When those characters are not present, warning is written to log.

KRB5: Recover gracefully if the ccache file could not be reused

2012-09-24T16:30:18+00:00

https://fedorahosted.org/sssd/ticket/1384

KRB5 child: handle more error codes gracefully

2012-09-20T08:11:47+00:00

This patch changes handling of krb5 child error codes so that it's on
par with the 1.8 branch after Joschi Brauchle reviewed the 1.8 backport.

KRB5 child: Don't return System Error on empty password

2012-09-20T08:07:43+00:00

https://fedorahosted.org/sssd/ticket/1310

Failover: use _srv_ when no primary server is defined

2012-09-17T13:03:14+00:00

https://fedorahosted.org/sssd/ticket/1521

FO: Check server validity before setting status

2012-09-13T14:51:38+00:00

The list of resolved servers is allocated on the back end context and
kept in the fo_service structure. However, a single request often
resolves a server and keeps a pointer until the end of a request and
only then gives feedback about the server based on the request result.

This presents a big race condition in case the SRV resolution is used.
When there are requests coming in in parallel, it is possible that an
incoming request will invalidate a server until another request that
holds a pointer to the original server is able to give a feedback.

This patch simply checks if a server is in the list of servers
maintained by a service before reading its status.

https://fedorahosted.org/sssd/ticket/1364