sssd.git/src/util, branch memberof

simple-access-provider: make user grp res more robust

2015-04-28T09:58:53+00:00

Not all user groups need to be resolved if group deny list is empty.

Resolves:
https://fedorahosted.org/sssd/ticket/2519

Reviewed-by: Jakub Hrozek

selinux: Only call semanage if the context actually changes

2015-04-14T17:58:30+00:00

https://fedorahosted.org/sssd/ticket/2624

Add a function to query the libsemanage database for a user context and
only update the database if the context differes from the one set on the
server.

Adds talloc dependency to libsss_semanage.

Reviewed-by: Michal Židek

selinux: Begin and end the transaction on the same nesting level

2015-04-14T17:58:21+00:00

Transaction should be started and commited on the same code nesting or
abstraction level. Also, transactions are really costly with libselinux
and splitting them from initialization will make init function reusable
by read-only libsemanage functions.

Reviewed-by: Michal Židek

selinux: Disconnect before closing the handle

2015-04-14T17:58:13+00:00

libsemanage documentation says:
~~~~
be sure that a semanage_disconnect() was previously called if the handle
was connected.
~~~~

Otherwise we get a memory leak.

Reviewed-by: Michal Židek

UTIL: Add a simple function to get the fd of debug_file

2015-04-14T09:35:31+00:00

Reviewed-by: Pavel Reichl

ncache: Silence critical error from filter_users when default_domain_suffix is set

2015-04-09T06:35:16+00:00

When default_domain_suffix is used and filter_users is set (at least
root is always, by default), SSSD tried to add the negcache entry to the
default domain. But since the default domain is not known after start
up, adding the entries fail with a verbose error message.

This patch handles EAGAIN returned from the parsing function while
setting negcache entries gracefully and also makes the debug message in
parsing function more precise.

Reviewed-by: Lukáš Slebodník

IPA: Use custom error codes when validating HBAC rules

2015-03-24T20:03:26+00:00

https://fedorahosted.org/sssd/ticket/2603

Instead of reusing EINVAL/ENOENT, use more descriptive error codes. This
will be useful in the next patch where we act on certain codes.

Reviewed-by: Pavel Březina

sdap: properly handle binary objectGuid attribute

2015-03-20T11:26:47+00:00

Although in the initial processing SSSD treats the binary value right at
some point it mainly assumes that it is a string. Depending on the value
this might end up with the correct binary value stored in the cache but
in most cases there will be only a broken entry in the cache.

This patch converts the binary value into a string representation which
is described in [MS-DTYP] and stores the result in the cache.

Resolves https://fedorahosted.org/sssd/ticket/2588

Reviewed-by: Jakub Hrozek

Add missing new lines to debug messages

2015-03-17T13:40:19+00:00

Reviewed-by: Jakub Hrozek

test: Check ERR_LAST

2015-03-13T08:34:10+00:00

Check if number of error codes and messages is the same.

Reviewed-by: Lukáš Slebodník