sssd.git/src/responder, branch subdommem

SUDO: realloc with sizeof(uint32_t) when adding uint32_t

2013-07-22T11:51:31+00:00

Do not try to set password when authtok_length is zero

2013-07-18T14:04:42+00:00

https://fedorahosted.org/sssd/ticket/1814

When the authtok_length is zero, it shouldn't call
sss_authtok_set_password, because it tries to determine lenght of passed
string by itself and would read parts of DBus message behind boundaries
of authtok.

remove unused variable

2013-07-16T17:24:14+00:00

Remove unused function parameter

2013-07-16T09:01:39+00:00

Missing space in debug message

2013-07-15T14:07:58+00:00

Do not call sss_cmd_done in function check_cache.

2013-06-27T18:51:28+00:00

Function sysdb_getpwnam return more results than 1 and therefore sss_cmd_done
was called. Inside of function sss_cmd_done memory was freed,
but this freed memory was used in caller functions, therefore sssd crashed.

https://fedorahosted.org/sssd/ticket/1980

Handle too many results from getnetgr.

2013-06-27T18:51:28+00:00

SSH: Update known_hosts file after unsuccessful requests as well.

2013-06-27T17:02:50+00:00

https://fedorahosted.org/sssd/ticket/1949

sudo responder: use different callback for oob refresh

2013-06-27T11:50:48+00:00

https://fedorahosted.org/sssd/ticket/1693

Since we don't care about returned values from out of band refresh,
we do not need to set callback data. However, this caused talloc
to abort as it considers it as type mismatch when called from
tevent_req_callback_data().

PAC: do not delete originalDN or cached password if present

2013-06-24T13:17:20+00:00

If the PAC responder recognizes some attribute changes between the
cached user entry and the PAC data it quite crudely just removes the
cached entry and recreates it. While in most cases all needed data can
be recovered from the PAC data there is a case where it is not possible.

E.g the IPA HBAC code use the OriginalDN attribute to improve
performance when evaluating access rules. This patch makes sure this
attribute is not lost when the PAC responder updates the object.