<feed xmlns='http://www.w3.org/2005/Atom'>
<title>sssd.git/src/responder/common, branch token3</title>
<subtitle>System Security Services Daemon [okos' clone]</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/'/>
<entry>
<title>DP: Use the correct type for DBus boolean</title>
<updated>2013-08-28T17:28:22+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2013-08-26T14:47:58+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=46c5deedec570bb5f99702a933ba99d76f9f09cb'/>
<id>46c5deedec570bb5f99702a933ba99d76f9f09cb</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/2057
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/2057
</pre>
</div>
</content>
</entry>
<entry>
<title>sss_packet_grow: correctly pad packet length to 512B</title>
<updated>2013-08-28T14:21:22+00:00</updated>
<author>
<name>Pavel Březina</name>
<email>pbrezina@redhat.com</email>
</author>
<published>2013-08-22T12:38:54+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=3575235d62fa242d9a650ee54425f42b19533cb0'/>
<id>3575235d62fa242d9a650ee54425f42b19533cb0</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/2059

If len % SSSSRV_PACKET_MEM_SIZE == 0 or some low number,
we can end up with totlen &lt; len and return EINVAL.

It also does not pad the length, but usually allocates
much more memory than is desired.

len = 1024
n = 1024 % 512 + 1 = 0 + 1 = 1
totlen = 1 * 512 = 512
=&gt; totlen &lt; len

len = 511
n = 511 % 512 + 1 = 511 + 1
totlen = 512 * 512 = 262144
totlen is way bigger than it was supposed to be
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/2059

If len % SSSSRV_PACKET_MEM_SIZE == 0 or some low number,
we can end up with totlen &lt; len and return EINVAL.

It also does not pad the length, but usually allocates
much more memory than is desired.

len = 1024
n = 1024 % 512 + 1 = 0 + 1 = 1
totlen = 1 * 512 = 512
=&gt; totlen &lt; len

len = 511
n = 511 % 512 + 1 = 511 + 1
totlen = 512 * 512 = 262144
totlen is way bigger than it was supposed to be
</pre>
</div>
</content>
</entry>
<entry>
<title>Missing space in debug message</title>
<updated>2013-07-15T14:07:58+00:00</updated>
<author>
<name>Michal Zidek</name>
<email>mzidek@redhat.com</email>
</author>
<published>2013-07-15T11:03:04+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=1d4293f36695daab5909b9eaa670e8e23db548aa'/>
<id>1d4293f36695daab5909b9eaa670e8e23db548aa</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Lookup domains at startup</title>
<updated>2013-06-04T15:24:13+00:00</updated>
<author>
<name>Sumit Bose</name>
<email>sbose@redhat.com</email>
</author>
<published>2013-05-31T08:52:05+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=909a86af4eb99f5d311d7136cab78dca535ae304'/>
<id>909a86af4eb99f5d311d7136cab78dca535ae304</id>
<content type='text'>
To make sure that e.g. the short/NetBIOS domain name is available this
patch make sure that the responders send a get_domains request to their
backends at startup the collect the domain information or read it from
the cache if the backend is offline.

For completeness I added this to all responders even if they do not need
the information at the moment.

Fixes https://fedorahosted.org/sssd/ticket/1951
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
To make sure that e.g. the short/NetBIOS domain name is available this
patch make sure that the responders send a get_domains request to their
backends at startup the collect the domain information or read it from
the cache if the backend is offline.

For completeness I added this to all responders even if they do not need
the information at the moment.

Fixes https://fedorahosted.org/sssd/ticket/1951
</pre>
</div>
</content>
</entry>
<entry>
<title>Fixing critical format string issues.</title>
<updated>2013-05-20T20:37:25+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2013-05-17T15:36:38+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=7486dea9f5f7b2a6fbbacc6db740a82140b6377c'/>
<id>7486dea9f5f7b2a6fbbacc6db740a82140b6377c</id>
<content type='text'>
--missing arguments.
--format '%s', but argument is integer.
--wrong format string, examle: '%\n'
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
--missing arguments.
--format '%s', but argument is integer.
--wrong format string, examle: '%\n'
</pre>
</div>
</content>
</entry>
<entry>
<title>Add sss_ncache_set_sid() and sss_ncache_check_sid()</title>
<updated>2013-05-02T17:33:56+00:00</updated>
<author>
<name>Sumit Bose</name>
<email>sbose@redhat.com</email>
</author>
<published>2013-04-22T14:26:56+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=b5afbc39c09baaef57b5300b636307e277c59d66'/>
<id>b5afbc39c09baaef57b5300b636307e277c59d66</id>
<content type='text'>
Two new calls are added to allow to add SID based lookups to the
negative cache.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Two new calls are added to allow to add SID based lookups to the
negative cache.
</pre>
</div>
</content>
</entry>
<entry>
<title>Add responder_get_domain_by_id()</title>
<updated>2013-05-02T17:33:56+00:00</updated>
<author>
<name>Sumit Bose</name>
<email>sbose@redhat.com</email>
</author>
<published>2013-04-19T09:54:14+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=498dcbdfdfffa1aee65d53e83c7eafd5e3b084a5'/>
<id>498dcbdfdfffa1aee65d53e83c7eafd5e3b084a5</id>
<content type='text'>
This new call is similar to responder_get_domain() but uses the domain
SID as search parameter. Since the length of the stored domain SID is
used in the comparison, SIDs of users and groups and be used directly
without stripping the RID component.

The functionality is not merged into responder_get_domain() to allow to
calculate the timeout correctly and return a specific error code if the
entry is expired.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This new call is similar to responder_get_domain() but uses the domain
SID as search parameter. Since the length of the stored domain SID is
used in the comparison, SIDs of users and groups and be used directly
without stripping the RID component.

The functionality is not merged into responder_get_domain() to allow to
calculate the timeout correctly and return a specific error code if the
entry is expired.
</pre>
</div>
</content>
</entry>
<entry>
<title>Add two new request types to the data-provider interface</title>
<updated>2013-05-02T17:33:56+00:00</updated>
<author>
<name>Sumit Bose</name>
<email>sbose@redhat.com</email>
</author>
<published>2013-04-22T14:29:51+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=f0944fdd627bd684ff36c9670dc857ffdedc343f'/>
<id>f0944fdd627bd684ff36c9670dc857ffdedc343f</id>
<content type='text'>
The patch adds two new request types for SID related requests. The first
one is used if a SID is given and the corresponding object should be
found. The second one can be used if the SID for an object is requested
but it is not clear if the object is a user or a group.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The patch adds two new request types for SID related requests. The first
one is used if a SID is given and the corresponding object should be
found. The second one can be used if the SID for an object is requested
but it is not clear if the object is a user or a group.
</pre>
</div>
</content>
</entry>
<entry>
<title>Add secid filter to responder-dp protocol</title>
<updated>2013-05-02T17:33:56+00:00</updated>
<author>
<name>Sumit Bose</name>
<email>sbose@redhat.com</email>
</author>
<published>2013-04-11T16:23:27+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=206329d3901738036352f2ac1e8d7804f728861d'/>
<id>206329d3901738036352f2ac1e8d7804f728861d</id>
<content type='text'>
This patch add a new filter type to the data-provider interface which
can be used for SID-based lookups.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This patch add a new filter type to the data-provider interface which
can be used for SID-based lookups.
</pre>
</div>
</content>
</entry>
<entry>
<title>responder_get_domain(): remove timeout calculation</title>
<updated>2013-05-02T17:33:56+00:00</updated>
<author>
<name>Sumit Bose</name>
<email>sbose@redhat.com</email>
</author>
<published>2013-04-18T14:29:21+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd.git/commit/?id=5a6e3cb57cf2d8d4118b58be0574cccea171ca19'/>
<id>5a6e3cb57cf2d8d4118b58be0574cccea171ca19</id>
<content type='text'>
The current timout calculation code in responder_get_domain() is flawed
and I think it always was. I removed the related code because
- it currently has no effect, a match is returned even if it is expired
- that callers do not have any code to handle expired domains.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The current timout calculation code in responder_get_domain() is flawed
and I think it always was. I removed the related code because
- it currently has no effect, a match is returned even if it is expired
- that callers do not have any code to handle expired domains.
</pre>
</div>
</content>
</entry>
</feed>
