sssd.git/src/responder, branch openssl

cache_req: delete old code

2016-10-20T07:56:41+00:00

Reviewed-by: Jakub Hrozek

cache_req: switch to new code

2016-10-20T07:56:38+00:00

This patch switch the old switch-based cache req code to
the new plugin-based.

Reviewed-by: Jakub Hrozek

cache_req: move from switch to plugins, add plugins

2016-10-20T07:56:35+00:00

This patch adds all existing functionality into plugins.

Reviewed-by: Jakub Hrozek

cache_req: move from switch to plugins; add logic

2016-10-20T07:56:08+00:00

cache_req grown quite big from the original code and it turned out
that using switch statements to branch code for different cases
makes the code quite hard to read and further extend and any
modification to the logic itself is difficult.

This patch changes the switch statements to plugins with small
functions and separates logic into multiple modules. This gives
us better control over the code and improves readability and
maintainability while keeping code duplication to minimum.

Reviewed-by: Jakub Hrozek 
Reviewed-by: Petr Cech

nss: allow UPNs in SSS_NSS_GETSIDBYNAME and SSS_NSS_GETORIGBYNAME

2016-10-10T10:31:33+00:00

When adding support for UPNs, email addresses and aliases the
SSS_NSS_GETSIDBYNAME and SSS_NSS_GETORIGBYNAME request were forgotten.
This patch adds the missing support because it might be irritating if
getpwnam() can resolve the name but the other requests fail. The same
logic as for the plain user lookup is used, this add some code
duplication which is expected to be removed when the nss responder will
be switched to use the new cache_req code.

Resolves https://fedorahosted.org/sssd/ticket/3194

Reviewed-by: Jakub Hrozek

SECRETS: Add a configurable limit of secrets that can be stored

2016-10-05T09:57:20+00:00

Related:
https://fedorahosted.org/sssd/ticket/3169

Reviewed-by: Jakub Hrozek

SECRETS: Use HTTP error code 504 when a proxy server cannot be reached

2016-10-04T19:26:09+00:00

Previously, a generic 500 error code was returned. This patch adds a new
error message on a failure to contact the proxy server and returns 504,
"Gateway timeout" instead.

Resolves:
    https://fedorahosted.org/sssd/ticket/3212

Reviewed-by: Fabiano Fidêncio

SECRETS: Fix a typo in function name

2016-10-04T19:26:06+00:00

s/filed/field/

Reviewed-by: Fabiano Fidêncio

SECRETS: Use a better data type for ret

2016-10-04T19:26:02+00:00

Normally we use errno_t for return codes and size_t for counting
objects.

Reviewed-by: Fabiano Fidêncio

SECRETS: Add DEBUG messages to the sssd-secrets provider

2016-10-04T19:25:57+00:00

Previously, it was not possible to follow the flow of the secrets
responder or find out what went wrong on error. This patch adds DEBUG
messages so that most failure cases have their own message. At the same
time, running sssd-secrets with debug_level <= 3 does not emit any
messages at all.

Reviewed-by: Fabiano Fidêncio