sssd.git/src/providers/ldap, branch master

LDAP: end on ENOMEM

2015-08-31T16:36:34+00:00

Reviewed-by: Pavel Březina

sssd: incorrect checks on length values during packet decoding

2015-08-31T16:34:26+00:00

https://fedorahosted.org/sssd/ticket/1697

It is safer to isolate the checked (unknown/untrusted)
value on the left hand side in the conditions
to avoid overflows/underflows.

Reviewed-by: Petr Cech

sdap_async: Use specific errmsg when available

2015-08-19T15:58:27+00:00

Ticket:
https://fedorahosted.org/sssd/ticket/2762

Use specific errmsg when ldap returns
LDAP_CONSTRAINT_VIOLATION code if that specific
message is available.

Reviewed-by: Pavel Reichl

LDAP: Use sss_unique_filename in ldap_child

2015-08-17T13:22:12+00:00

Simplifies the code.

Reviewed-by: Pavel Březina

LDAP: minor improvements in ldap id cleanup

2015-08-17T13:10:23+00:00

Reviewed-by: Pavel Březina

LDAP: sanitize group name when used in filter

2015-08-17T13:10:14+00:00

cleanup_groups() uses DN of group in filter for ldbsearch. But the name
might contain characters with special meaning for filtering
like - "*()\/"

Resolves:
https://fedorahosted.org/sssd/ticket/2744

Reviewed-by: Pavel Březina

DYNDNS: rename field of sdap_dyndns_update_state

2015-08-14T21:54:48+00:00

Rename 'use_server_with_nsupdate' to more general name 'fallback_mode'.

Resolves:
https://fedorahosted.org/sssd/ticket/2495

Reviewed-by: Jakub Hrozek

DYNDNS: remove zone command

2015-08-14T21:54:44+00:00

Remove zone command from message to nsupsate. This command is generally
used to hint nsupdate. In correctly configured environment such
information should be obtained via DNS.

If DNS does not provide necessary information we give other hints.

For more details see:
https://fedorahosted.org/sssd/wiki/DesignDocs/DDNSMessagesUpdate

Resolves:
https://fedorahosted.org/sssd/ticket/2495

Reviewed-by: Jakub Hrozek

DYNDNS: Don't use server cmd in nsupdate by default

2015-08-14T21:54:32+00:00

nsupdate command `server` should not be used for the first attempt
to udpate DNS. It should be used only in subsequent attempts after the
first attempt failed.

Resolves:
https://fedorahosted.org/sssd/ticket/2495

Reviewed-by: Jakub Hrozek

DYNDNS: Add a new option dyndns_server

2015-08-14T21:51:02+00:00

Some environments use a different DNS server than identity server. For
these environments, it would be useful to be able to override the DNS
server used to perform DNS updates.

This patch adds a new option dyndns_server that, if set, would be used
to hardcode a DNS server address into the nsupdate message.

Reviewed-by: Pavel Reichl