sssd.git/src/responder/secrets, branch openssl

SECRETS: Add a configurable limit of secrets that can be stored

2016-10-05T09:57:20+00:00

Related:
https://fedorahosted.org/sssd/ticket/3169

Reviewed-by: Jakub Hrozek

SECRETS: Use HTTP error code 504 when a proxy server cannot be reached

2016-10-04T19:26:09+00:00

Previously, a generic 500 error code was returned. This patch adds a new
error message on a failure to contact the proxy server and returns 504,
"Gateway timeout" instead.

Resolves:
    https://fedorahosted.org/sssd/ticket/3212

Reviewed-by: Fabiano Fidêncio

SECRETS: Fix a typo in function name

2016-10-04T19:26:06+00:00

s/filed/field/

Reviewed-by: Fabiano Fidêncio

SECRETS: Use a better data type for ret

2016-10-04T19:26:02+00:00

Normally we use errno_t for return codes and size_t for counting
objects.

Reviewed-by: Fabiano Fidêncio

SECRETS: Add DEBUG messages to the sssd-secrets provider

2016-10-04T19:25:57+00:00

Previously, it was not possible to follow the flow of the secrets
responder or find out what went wrong on error. This patch adds DEBUG
messages so that most failure cases have their own message. At the same
time, running sssd-secrets with debug_level <= 3 does not emit any
messages at all.

Reviewed-by: Fabiano Fidêncio

SECRETS: Add a configurable depth limit for nested containers

2016-10-03T13:32:33+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/3168

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

SECRETS: Use a tmp_context on local_db_check_containers()

2016-10-03T13:32:29+00:00

Otherwise the struct ldb_dn will be hanging on the mem_ctx till it gets
freed.

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

SECRETS: Make functions from local.c static

2016-10-03T13:32:27+00:00

There's no reason for those functions to be exposed.

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

SECRETS: Don't remove a container when it has children

2016-09-16T13:14:04+00:00

Let's return and log an error in case the container to be removed has
children.

The approach taken introduced at least one new search in every delete
operation. As far as I understand searching in the BASE scope is quite
cheap and that's the reason I decided to just do the search in the
ONELEVEL scope when the requested to be deleted dn is for sure a
container.

Resolves:
https://fedorahosted.org/sssd/ticket/3167

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

SECRETS: Search by the right type when checking containers

2016-09-13T14:36:52+00:00

We've been searching for the wrong type ("simple") in
local_db_check_containers(), which always gives us a NULL result.

Let's introduce the new LOCAL_CONTAINER_FILTER and do the search for the
right type ("container") from now on.

Resolves:
https://fedorahosted.org/sssd/ticket/3137

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek