<feed xmlns='http://www.w3.org/2005/Atom'>
<title>sssd.git/src, branch simo_ccname</title>
<subtitle>sssd with jhrozek's patches</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/'/>
<entry>
<title>krb5: Replace type-specific ccache/principal check</title>
<updated>2013-08-30T05:00:33+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-08-30T04:58:24+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=4b1e4af6b7d2e86f3bfaccba07acc9beb44b3182'/>
<id>4b1e4af6b7d2e86f3bfaccba07acc9beb44b3182</id>
<content type='text'>
Instead of having duplicate functions that are type custom use a signle common
function that also performs access to the cache as the user owner, implicitly
validating correctness of ownership.

Resolves:
https://fedorahosted.org/sssd/ticket/2061
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Instead of having duplicate functions that are type custom use a signle common
function that also performs access to the cache as the user owner, implicitly
validating correctness of ownership.

Resolves:
https://fedorahosted.org/sssd/ticket/2061
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Use krb5_cc_destroy to remove old ccaches</title>
<updated>2013-08-29T03:36:50+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-08-29T03:18:37+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=be894d65471bb6de25623f01a02c606a20b76468'/>
<id>be894d65471bb6de25623f01a02c606a20b76468</id>
<content type='text'>
This completely replaces the per-ccache-type custom code to remove old cacches
and instead uses libkrb5 base doperations (krb5_cc_destroy) and operating as
the user owner.

Resolves:
https://fedorahosted.org/sssd/ticket/2061
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This completely replaces the per-ccache-type custom code to remove old cacches
and instead uses libkrb5 base doperations (krb5_cc_destroy) and operating as
the user owner.

Resolves:
https://fedorahosted.org/sssd/ticket/2061
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Add helper to destroy ccache as user</title>
<updated>2013-08-29T02:28:35+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-08-29T02:12:07+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=c0b30b30d087cfa1051b86c432fdbda8c03e9f9d'/>
<id>c0b30b30d087cfa1051b86c432fdbda8c03e9f9d</id>
<content type='text'>
This function safely destroy a ccache given a cache name and user crdentials.
It becomes the user so no possible races can compromise the system, then
uses libkrb5 functions to properly destroy a ccache, independently of the
cache type.
Finally restores the original credentials after closing the ccache handlers.

Resolves:
https://fedorahosted.org/sssd/ticket/2061
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This function safely destroy a ccache given a cache name and user crdentials.
It becomes the user so no possible races can compromise the system, then
uses libkrb5 functions to properly destroy a ccache, independently of the
cache type.
Finally restores the original credentials after closing the ccache handlers.

Resolves:
https://fedorahosted.org/sssd/ticket/2061
</pre>
</div>
</content>
</entry>
<entry>
<title>krb5: Add calls to change and restore credentials</title>
<updated>2013-08-29T02:17:12+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-08-29T01:19:32+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=44a9fd23f1da009e03f60e4d297a5e1d51caa533'/>
<id>44a9fd23f1da009e03f60e4d297a5e1d51caa533</id>
<content type='text'>
In some cases we want to temporarily assume user credentials but allow the
process to regain back the original credentials (normally regaining uid 0).

Related:
https://fedorahosted.org/sssd/ticket/2061
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
In some cases we want to temporarily assume user credentials but allow the
process to regain back the original credentials (normally regaining uid 0).

Related:
https://fedorahosted.org/sssd/ticket/2061
</pre>
</div>
</content>
</entry>
<entry>
<title>Updating translations for the 1.11.0 release</title>
<updated>2013-08-28T20:40:00+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2013-08-28T20:40:00+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=a9228ebcce14888b3123bdf46e610e0900bcd2cc'/>
<id>a9228ebcce14888b3123bdf46e610e0900bcd2cc</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>IPA_HBAC: Explicitelly include header file time.h</title>
<updated>2013-08-28T20:02:49+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2013-08-28T06:31:18+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=7ef1ff8673668c5254db9194a125f58755e2d2b1'/>
<id>7ef1ff8673668c5254db9194a125f58755e2d2b1</id>
<content type='text'>
struct hbac_eval_req is defined in header file and it has attribute
request_time with type time_t, but header file "time.h" was not included.
It was not problem, because time.h was indirectly included by stdlib.h
(stdlib.h -&gt; sys/types.h -&gt; time.h) in implementation files,
but other platforms can have other dependencies among header files.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
struct hbac_eval_req is defined in header file and it has attribute
request_time with type time_t, but header file "time.h" was not included.
It was not problem, because time.h was indirectly included by stdlib.h
(stdlib.h -&gt; sys/types.h -&gt; time.h) in implementation files,
but other platforms can have other dependencies among header files.
</pre>
</div>
</content>
</entry>
<entry>
<title>MEMBEROF: Remove temporary workaround</title>
<updated>2013-08-28T20:02:49+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2013-08-28T06:31:18+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=47d35b3d6b0e1023c8dcdbc8371d6f3ca762dfe4'/>
<id>47d35b3d6b0e1023c8dcdbc8371d6f3ca762dfe4</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>UTIL: Explicitly include header file sys/socket.h</title>
<updated>2013-08-28T20:02:49+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2013-08-28T06:31:17+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=9d54fa809d7bf1b647e50081958ef33456c591bf'/>
<id>9d54fa809d7bf1b647e50081958ef33456c591bf</id>
<content type='text'>
We use constant AF_INET6 in util.c, but we do not explicitly include header
file sys/socket.h. This header file was indirectly incuded by another header
file netdb.h (netdb.h -&gt; netinet/in.h -&gt; sys/socket.h), but other platform can
have other dependencies among header files.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We use constant AF_INET6 in util.c, but we do not explicitly include header
file sys/socket.h. This header file was indirectly incuded by another header
file netdb.h (netdb.h -&gt; netinet/in.h -&gt; sys/socket.h), but other platform can
have other dependencies among header files.
</pre>
</div>
</content>
</entry>
<entry>
<title>MONITOR: Move function declaration out of conditional build</title>
<updated>2013-08-28T20:02:49+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2013-08-28T06:31:17+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=1bf580d3c6bbcfcff0c3dfd348e7c0a16d9d3d9e'/>
<id>1bf580d3c6bbcfcff0c3dfd348e7c0a16d9d3d9e</id>
<content type='text'>
Function monitor_config_file_fallback was defined inside of conditional
block "#ifdef HAVE_SYS_INOTIFY_H", but it was also used out of this block.
This patch move declaration of function before start of conditional build
section.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Function monitor_config_file_fallback was defined inside of conditional
block "#ifdef HAVE_SYS_INOTIFY_H", but it was also used out of this block.
This patch move declaration of function before start of conditional build
section.
</pre>
</div>
</content>
</entry>
<entry>
<title>CLIENT: Fix non gnu sss_strnlen implementation</title>
<updated>2013-08-28T20:02:49+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2013-08-28T06:31:17+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/jhrozek/public_git/sssd.git/commit/?id=c08e3aca5a8f3869e47c42bded962292cffccce6'/>
<id>c08e3aca5a8f3869e47c42bded962292cffccce6</id>
<content type='text'>
last argument of function sss_strnlen "size_t *len" is output variable.
We need to increment value of size_t being pointed to by pointer instead of
incrementing pointer.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
last argument of function sss_strnlen "size_t *len" is output variable.
We need to increment value of size_t being pointed to by pointer instead of
incrementing pointer.
</pre>
</div>
</content>
</entry>
</feed>
