sssd.git/src/responder/common, branch f23

IFP: add FindByCertificate method for User objects

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

ncache: add calls for certificate based searches

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

negcache: Soften condition for expired entries

2015-05-22T10:26:59+00:00

Type of timestamp for entries in negative cache is time_t
which is number of *seconds* that have elapsed since 1 January 1970.

The condition for ttl was to strict so entry could be valid
 from  "ttl-1" to  ttl e.g.
 * ttl is 1 second
 * entry was stored to negative cache at 1432120871.999639
   stored_timestamp = 1432120871
 * entry was tested few miliseconds later 1432120872.001293
   current_time = 1432120872

Entry was marked as expired becuase result of condition was false
  stored_timestamp + ttl < current_time
          1432120871 + 1 < 1432120872

This is a reason why ./test-negcache sometime fails.
It's quite easily reproducible on slow machine or when valgrind was used.

sh$ while libtool --mode=execute valgrind ./test-negcache ; do echo OK: done

Reviewed-by: Pavel Reichl

responders: reset ncache after domains are discovered during startup

2015-04-09T06:35:23+00:00

After responders start, they add a lookup operation that discovers the
subdomains so that qualifying users works. After this operation is
finishes, we need to reset negcache to allow users to be added into the
newly discovered domains.

Reviewed-by: Lukáš Slebodník

ncache: Add sss_ncache_reset_repopulate_permanent

2015-04-09T06:35:20+00:00

This new function resets the negative cache and then re-adds the
permanent entries.

Reviewed-by: Lukáš Slebodník

ncache: Silence critical error from filter_users when default_domain_suffix is set

2015-04-09T06:35:16+00:00

When default_domain_suffix is used and filter_users is set (at least
root is always, by default), SSSD tried to add the negcache entry to the
default domain. But since the default domain is not known after start
up, adding the entries fail with a verbose error message.

This patch handles EAGAIN returned from the parsing function while
setting negcache entries gracefully and also makes the debug message in
parsing function more precise.

Reviewed-by: Lukáš Slebodník

ncache: Fix sss_ncache_reset_permanent

2015-04-09T06:35:10+00:00

There was an off-by-one error in sss_ncache_reset_permanent that
prevented the reset from working.

Reviewed-by: Lukáš Slebodník

Add missing new lines to debug messages

2015-03-17T13:40:19+00:00

Reviewed-by: Jakub Hrozek

responder_cache: Fix warning may be used uninitialized

2015-03-17T10:46:16+00:00

There is a warning with gcc-5.0 and enabled optimization.
Warning is not visible with "-O0".

  CC       src/responder/common/responder_cache_req.o
src/responder/common/responder_cache_req.c: In function ‘cache_req_next_domain’:
src/responder/common/responder_cache_req.c:296:160: error: ‘ret’ may be used uninitialized in this function [-Werror=maybe-uninitialized]
src/responder/common/responder_cache_req.c:277:13: note: ‘ret’ was declared here
     errno_t ret;
             ^
cc1: all warnings being treated as errors

Reviewed-by: Jakub Hrozek

cache_req: return ERR_INTERNAL if more than one entry is found

2015-03-13T08:56:26+00:00

This means that the db is not in the expected format thus we should
make the error more visible.

Reviewed-by: Jakub Hrozek