sssd.git/src/responder/pam, branch token2

pam: Bad debug message format and parameter.

2013-08-22T18:11:51+00:00

PAM: Set negcache if user is not found after provider check

2013-08-07T22:44:19+00:00

PAM: Check negcache when searching for fully qualified users, too

2013-08-07T22:44:19+00:00

Remove unused memory context

2013-07-29T10:57:31+00:00

Do not try to set password when authtok_length is zero

2013-07-18T14:04:42+00:00

https://fedorahosted.org/sssd/ticket/1814

When the authtok_length is zero, it shouldn't call
sss_authtok_set_password, because it tries to determine lenght of passed
string by itself and would read parts of DBus message behind boundaries
of authtok.

Lookup domains at startup

2013-06-04T15:24:13+00:00

To make sure that e.g. the short/NetBIOS domain name is available this
patch make sure that the responders send a get_domains request to their
backends at startup the collect the domain information or read it from
the cache if the backend is offline.

For completeness I added this to all responders even if they do not need
the information at the moment.

Fixes https://fedorahosted.org/sssd/ticket/1951

Fixing critical format string issues.

2013-05-20T20:37:25+00:00

--missing arguments.
--format '%s', but argument is integer.
--wrong format string, examle: '%\n'

Remove unused TALLOC_CTX from responder_get_domain()

2013-05-02T17:33:56+00:00

Recent refactoring removed the need to copy the domain info data of
sub-domains because the related objects will not be removed from memory
anymore.

Allocate PAM DP request data on responder context

2013-04-08T21:47:23+00:00

https://fedorahosted.org/sssd/ticket/1869

Currently the private data passed to the PAM request is a structure
allocated on the client context. But in the odd case where the back end
would be stopped or stuck until the idle timeout hits, the DP callback
would access data that were freed when the client timed out.

This patch introduces a new structure allocated on responder context,
whose only purpose is to live as long as the request is active.

Making the authtok structure really opaque.

2013-04-02T15:01:08+00:00

Definition of structure sss_auth_token was removed from header file
authtok.h and there left only declaration of this structure.
Therefore only way how to use this structure is to use accessory function from
same header file.

To creating new empty authotok can only be used newly created function
sss_authtok_new(). TALLOC context was removed from copy and setter functions,
because pointer to stuct sss_auth_token is used as a memory context.

All declaration of struct sss_auth_token variables was replaced with
pointer to this structure and related changes was made in source code.

Function copy_pam_data can copy from argument src which was dynamically
allocated with function create_pam_data() or zero initialized struct pam_data
allocated on stack.

https://fedorahosted.org/sssd/ticket/1830