sssd.git/src/util, branch openssl

crypto: Port libcrypto code to openssl-1.1

2016-10-20T09:45:30+00:00

SECRETS: Add a configurable limit of secrets that can be stored

2016-10-05T09:57:20+00:00

Related:
https://fedorahosted.org/sssd/ticket/3169

Reviewed-by: Jakub Hrozek

SECRETS: Use HTTP error code 504 when a proxy server cannot be reached

2016-10-04T19:26:09+00:00

Previously, a generic 500 error code was returned. This patch adds a new
error message on a failure to contact the proxy server and returns 504,
"Gateway timeout" instead.

Resolves:
    https://fedorahosted.org/sssd/ticket/3212

Reviewed-by: Fabiano Fidêncio

SECRETS: Add a configurable depth limit for nested containers

2016-10-03T13:32:33+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/3168

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

Remove double semicolon at the end of line

2016-09-21T13:10:11+00:00

Reviewed-by: Pavel Březina

DEBUG: Apend line feed to messages from libsemanage

2016-09-01T11:09:39+00:00

It wasn't simple to read log files from libsemanage
because they were on single line.

Reviewed-by: Fabiano Fidêncio

WATCHDOG: define and use _MAX_TICKS as 3

2016-08-30T08:07:25+00:00

Instead of using the number 3 directly, let's introduce and use
WATCHDOG_MAX_TICKS.

Reviewed-by: Petr Čech

watchdog: cope with time shift

2016-08-25T13:58:23+00:00

When a time is changed into the past during sssd runtime
(e.g. on boot during time correction), it is possible that
we never hit watchdog tevent timer since it is based on
system time.

This patch adds a past-time shift detection mechanism. If a time
shift is detected we restart watchdog.

Resolves:
https://fedorahosted.org/sssd/ticket/3154

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Fabiano Fidêncio

UTIL: Use sss_atomic_read_s in generate_csprng_buffer

2016-08-17T14:55:15+00:00

There was a bug in generate_csprng_buffer() where if we read the exact
amount of bytes from /dev/urandom, we would always return EIO. Instead,
let's reuse the existing code from sss_atomic_read_s() which fixes this
bug and reduces code duplication.

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Fabiano Fidêncio

LDAP: Adding SIGTERM signal before SIGKILL

2016-08-17T14:17:07+00:00

We add better termination of ldap_child. If ldap_child reaches
the timeout for termination parent sents SIGTERM signal. Child
has 2 seconds for removing temporary file and exit.
If it is not sufficient there is SIGKILL send to the child.

Resolves:
https://fedorahosted.org/sssd/ticket/3106

Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek