sssd.git/src/responder/nss, branch token

mmap_cache: Use sss_atomic_write_s instead of write.

2013-08-22T17:42:31+00:00

Use sss_atomic_write_s() instead of write() in
sss_mc_save_corrupted(). Also unlink() the file if no data
were written.

It is better to use sss_atomic_write_s instead of write

mmap_cache: Store corrupted mmap cache before reset

2013-08-19T20:24:41+00:00

This patch adds function to store corrupted mmap cache file to
disk for further analysis.

mmap_cache: Use better checks for corrupted mc in responder

2013-08-19T18:51:03+00:00

We introduced new way to check integrity of memcache in the
client code. We should use similiar checks in the responder.

mmap_cache: Off by one error.

2013-08-19T18:51:03+00:00

Removes off by one error when using macro MC_SIZE_TO_SLOTS
and adds new macro MC_SLOT_WITHIN_BOUNDS.

fill_initgr: add original primary GID if available

2013-08-19T10:53:49+00:00

In some cases when MPG domains are used the information about the
original primary group of a user cannot be determined by looking at
the explicit group memberships. In those cases the GID related to the
original primary group is stored in a special attribute of the user
object.

This patch adds the GID of the original primary group when available and
needed.

Fixes https://fedorahosted.org/sssd/ticket/2027

mmap_cache: Check if slot and name_ptr are not invalid.

2013-08-11T18:36:21+00:00

This patch prevents jumping outside of allocated memory in
case of corrupted slot or name_ptr values. It is not proper
solution, just hotfix until we find out what is the root cause
of ticket https://fedorahosted.org/sssd/ticket/2018

NSS: Clear cached netgroups if a request comes in from the sss_cache

2013-08-07T22:38:31+00:00

In order for sss_cache to work correctly, we must also signal the nss
responder to invalidate the hash table requests.

https://fedorahosted.org/sssd/ticket/1759

NSS: allow removing entries from netgroup hash table

2013-08-07T22:38:31+00:00

There is a timed desctructor in the nss responder that, when the
entry timeout passes, removes the netgroup from the hash table while
the netgroup is freed. This patch adds a hash delete callback so that if the
netgroup is removed from the hash table with hash_delete, its hash table
pointer will be invalidated. Later, when the entry is being freed, the
destructor won't attempt to remove it from the hash table.

Fix netgroup lookup when using fully qualified name

2013-07-31T09:00:55+00:00

Netgroups should ignore the 'use_fully_qualified_names' setting

2013-07-29T10:59:17+00:00

Netgroups often have memberNisNetgroup entries included in them
that will never process correctly if we require fully-qualified
names on the nested lookup. This patch alters the behavior of
netgroup lookups to check *all* domains for an unqualified
netgroup name, instead of only the ones not requiring fully-
qualified names.

https://fedorahosted.org/sssd/ticket/2013