sssd2.git/src/db/sysdb.c, branch sssd-1-9

sysdb: try dealing with binary-content attributes

2013-02-26T16:18:04+00:00

https://fedorahosted.org/sssd/ticket/1818

I have here a LDAP user entry which has this attribute

	loginAllowedTimeMap::
	 AAAAAAAAAP///38AAP///38AAP///38AAP///38AAP///38AAAAAAAAA

In the function sysdb_attrs_add_string(), called from
sdap_attrs_add_ldap_attr(), strlen() is called on this blob, which is
the wrong thing to do. The result of strlen is then used to populate
the .v_length member of a struct ldb_val - and this will set it to
zero in this case. (There is also the problem that there may not be
a '\0' at all in the blob.)

Subsequently, .v_length being 0 makes ldb_modify(), called from
sysdb_set_entry_attr(), return LDB_ERR_INVALID_ATTRIBUTE_SYNTAX. End
result is that users do not get stored in the sysdb, and programs like
`id` or `getent ...` show incomplete information.

The bug was encountered with sssd-1.8.5. sssd-1.5.11 seemed to behave
fine, but that may not mean that is the absolute lower boundary of
introduction of the problem.

Translate LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS to EEXIST

2013-01-08T13:57:29+00:00

Currently only the LDB error code indicating that an entry already
exists is translated to EEXIST. To make debugging easier and return a
better indication of the reason for an error in the logs this patch
translates the LDB error code for an already existing attribute or value
to EEXIST as well.

Null pointer dereferenced.

2012-11-28T12:48:48+00:00

https://fedorahosted.org/sssd/ticket/1674

Handle conversion to fully qualified usernames

2012-11-19T14:14:31+00:00

In subdomains we have to use fully qualified usernames.
Unfortunately we have no other good option than simply removing
caches for users of subdomains.
This is because the memberof plugin does not support the rename operation.

Display more information on DB version crash

2012-11-19T12:39:52+00:00

https://fedorahosted.org/sssd/ticket/1589

Added check for determining, whether database version is higher or
lower than expected. To distinguish it from other errors it uses
following retun values (further used for appropriate error message):
EMEDIUMTYPE for lower version than expected
EUCLEAN for higher version than expected

When SSSD or one of it's tools fails on DB version mismatch, new error
message is showed suggesting how to proceed.

sysdb: add sysdb_base_dn()

2012-10-26T16:10:23+00:00

Add a help function which returns the ldb_dn object for the base dn of
the cache.

SSH: Expire hosts in known_hosts

2012-10-05T08:51:55+00:00

SYSDB: Remove unnecessary domain parameter from several sysdb calls

2012-09-24T16:23:15+00:00

The domain can be read from the sysdb object. Removing the domain string
makes the API more self-contained.

AUTOFS: convert the existing autofs entries during a sysdb upgrade

2012-09-24T16:18:30+00:00

LDB_ERR_INVALID_ATTRIBUTE_SYNTAX added to sysdb_error_to_errno.

2012-09-20T08:13:53+00:00