<feed xmlns='http://www.w3.org/2005/Atom'>
<title>sssd.git/src/db/sysdb.c, branch token3</title>
<subtitle>System Security Services Daemon [okos' clone]</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/'/>
<entry>
<title>Remove the alt_db_path parameter of sysdb_init</title>
<updated>2013-03-05T16:41:56+00:00</updated>
<author>
<name>Michal Zidek</name>
<email>mzidek@redhat.com</email>
</author>
<published>2013-03-05T15:23:14+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=2ba16c5a5c4b6d3cd2a44179186ec60eda828bcd'/>
<id>2ba16c5a5c4b6d3cd2a44179186ec60eda828bcd</id>
<content type='text'>
This parameter was never used.

https://fedorahosted.org/sssd/ticket/1765
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This parameter was never used.

https://fedorahosted.org/sssd/ticket/1765
</pre>
</div>
</content>
</entry>
<entry>
<title>sysdb: try dealing with binary-content attributes</title>
<updated>2013-02-26T16:16:58+00:00</updated>
<author>
<name>Jan Engelhardt</name>
<email>jengelh@inai.de</email>
</author>
<published>2013-02-21T12:12:25+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=956309e24c32cd0886736bf065a27d5bdd200a77'/>
<id>956309e24c32cd0886736bf065a27d5bdd200a77</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1818

I have here a LDAP user entry which has this attribute

	loginAllowedTimeMap::
	 AAAAAAAAAP///38AAP///38AAP///38AAP///38AAP///38AAAAAAAAA

In the function sysdb_attrs_add_string(), called from
sdap_attrs_add_ldap_attr(), strlen() is called on this blob, which is
the wrong thing to do. The result of strlen is then used to populate
the .v_length member of a struct ldb_val - and this will set it to
zero in this case. (There is also the problem that there may not be
a '\0' at all in the blob.)

Subsequently, .v_length being 0 makes ldb_modify(), called from
sysdb_set_entry_attr(), return LDB_ERR_INVALID_ATTRIBUTE_SYNTAX. End
result is that users do not get stored in the sysdb, and programs like
`id` or `getent ...` show incomplete information.

The bug was encountered with sssd-1.8.5. sssd-1.5.11 seemed to behave
fine, but that may not mean that is the absolute lower boundary of
introduction of the problem.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1818

I have here a LDAP user entry which has this attribute

	loginAllowedTimeMap::
	 AAAAAAAAAP///38AAP///38AAP///38AAP///38AAP///38AAAAAAAAA

In the function sysdb_attrs_add_string(), called from
sdap_attrs_add_ldap_attr(), strlen() is called on this blob, which is
the wrong thing to do. The result of strlen is then used to populate
the .v_length member of a struct ldb_val - and this will set it to
zero in this case. (There is also the problem that there may not be
a '\0' at all in the blob.)

Subsequently, .v_length being 0 makes ldb_modify(), called from
sysdb_set_entry_attr(), return LDB_ERR_INVALID_ATTRIBUTE_SYNTAX. End
result is that users do not get stored in the sysdb, and programs like
`id` or `getent ...` show incomplete information.

The bug was encountered with sssd-1.8.5. sssd-1.5.11 seemed to behave
fine, but that may not mean that is the absolute lower boundary of
introduction of the problem.
</pre>
</div>
</content>
</entry>
<entry>
<title>Kill sysdb-&gt;domain</title>
<updated>2013-01-15T09:53:03+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-01-08T18:57:51+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=b353437811527daf305fceef5f07e990c50d62ca'/>
<id>b353437811527daf305fceef5f07e990c50d62ca</id>
<content type='text'>
Finally remove this upside-down dependency.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Finally remove this upside-down dependency.
</pre>
</div>
</content>
</entry>
<entry>
<title>Move mpg flag to the domain where it belongs</title>
<updated>2013-01-15T09:53:03+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-01-08T18:45:55+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=c14184c07634801cda7864aa17c6fa8dc9ab43d1'/>
<id>c14184c07634801cda7864aa17c6fa8dc9ab43d1</id>
<content type='text'>
A sysdb contains now multiple domains, but the mpg property is a
property of a specific domain not of the underlying database.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
A sysdb contains now multiple domains, but the mpg property is a
property of a specific domain not of the underlying database.
</pre>
</div>
</content>
</entry>
<entry>
<title>Pass the domain to upgrade functions</title>
<updated>2013-01-15T09:53:03+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-01-08T06:55:56+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=46675b5033169e1e954cd570413ce85b2c5e11fc'/>
<id>46675b5033169e1e954cd570413ce85b2c5e11fc</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Add domain arguemnt to sysdb_get_real_name()</title>
<updated>2013-01-15T09:53:02+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-01-08T05:06:24+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=043bda72889e9ef0c48b80b21c99e9e18c5f49d7'/>
<id>043bda72889e9ef0c48b80b21c99e9e18c5f49d7</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Add domain argument to sysdb_has/set_enumerated()</title>
<updated>2013-01-15T09:53:02+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-01-08T04:53:02+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=80c6afa474d8a1e0198832bddfe5da75a9818b29'/>
<id>80c6afa474d8a1e0198832bddfe5da75a9818b29</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Pass domain to sysdb_get&lt;pw/gr&gt;nam() functions</title>
<updated>2013-01-15T09:49:20+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-01-06T22:17:25+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=58fd3aa25c5292bc67432647ab7e5059439fcc6d'/>
<id>58fd3aa25c5292bc67432647ab7e5059439fcc6d</id>
<content type='text'>
Also allows us to remove sysdb_subdom_get&lt;pw/gr&gt;nam() wrappers and restore
fqnames proper value in subdomains, by testing for a parent domain being
present or not.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Also allows us to remove sysdb_subdom_get&lt;pw/gr&gt;nam() wrappers and restore
fqnames proper value in subdomains, by testing for a parent domain being
present or not.
</pre>
</div>
</content>
</entry>
<entry>
<title>Upgrade DB and move ranges into top level object</title>
<updated>2013-01-15T09:49:20+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-01-09T03:33:48+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=73120327cc136229d56d08f7f8c5e8df4129c1e3'/>
<id>73120327cc136229d56d08f7f8c5e8df4129c1e3</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Make sysdb_custom_subtree_dn() require a domain.</title>
<updated>2013-01-15T09:49:20+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-01-06T07:04:58+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=9675bccabff4e79d224f64611ad9ff3e073b488e'/>
<id>9675bccabff4e79d224f64611ad9ff3e073b488e</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
