<feed xmlns='http://www.w3.org/2005/Atom'>
<title>sssd2.git/src/db, branch sssd-1-8</title>
<subtitle>System Security Services Daemon [okos' clone]</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/'/>
<entry>
<title>sysdb: try dealing with binary-content attributes</title>
<updated>2013-02-26T16:22:16+00:00</updated>
<author>
<name>Jan Engelhardt</name>
<email>jengelh@inai.de</email>
</author>
<published>2013-02-21T12:12:25+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=7cd86ef19cdde175f318aeca4ef2530d33158342'/>
<id>7cd86ef19cdde175f318aeca4ef2530d33158342</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1818

I have here a LDAP user entry which has this attribute

	loginAllowedTimeMap::
	 AAAAAAAAAP///38AAP///38AAP///38AAP///38AAP///38AAAAAAAAA

In the function sysdb_attrs_add_string(), called from
sdap_attrs_add_ldap_attr(), strlen() is called on this blob, which is
the wrong thing to do. The result of strlen is then used to populate
the .v_length member of a struct ldb_val - and this will set it to
zero in this case. (There is also the problem that there may not be
a '\0' at all in the blob.)

Subsequently, .v_length being 0 makes ldb_modify(), called from
sysdb_set_entry_attr(), return LDB_ERR_INVALID_ATTRIBUTE_SYNTAX. End
result is that users do not get stored in the sysdb, and programs like
`id` or `getent ...` show incomplete information.

The bug was encountered with sssd-1.8.5. sssd-1.5.11 seemed to behave
fine, but that may not mean that is the absolute lower boundary of
introduction of the problem.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1818

I have here a LDAP user entry which has this attribute

	loginAllowedTimeMap::
	 AAAAAAAAAP///38AAP///38AAP///38AAP///38AAP///38AAAAAAAAA

In the function sysdb_attrs_add_string(), called from
sdap_attrs_add_ldap_attr(), strlen() is called on this blob, which is
the wrong thing to do. The result of strlen is then used to populate
the .v_length member of a struct ldb_val - and this will set it to
zero in this case. (There is also the problem that there may not be
a '\0' at all in the blob.)

Subsequently, .v_length being 0 makes ldb_modify(), called from
sysdb_set_entry_attr(), return LDB_ERR_INVALID_ATTRIBUTE_SYNTAX. End
result is that users do not get stored in the sysdb, and programs like
`id` or `getent ...` show incomplete information.

The bug was encountered with sssd-1.8.5. sssd-1.5.11 seemed to behave
fine, but that may not mean that is the absolute lower boundary of
introduction of the problem.
</pre>
</div>
</content>
</entry>
<entry>
<title>SYSDB: Make sysdb_attrs_get_el_int() public</title>
<updated>2012-08-21T10:33:15+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-08-21T10:33:15+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=e6709b54aae7cde6a3d6c73c756cb220a8129e2a'/>
<id>e6709b54aae7cde6a3d6c73c756cb220a8129e2a</id>
<content type='text'>
Also rename it to sysdb_attrs_get_el_ext()
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Also rename it to sysdb_attrs_get_el_ext()
</pre>
</div>
</content>
</entry>
<entry>
<title>SYSDB: Handle user and group renames better</title>
<updated>2012-05-11T16:17:16+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-05-11T14:27:46+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=4f2d70c17a68868b1295f2d6d7bf9e4acea3ae19'/>
<id>4f2d70c17a68868b1295f2d6d7bf9e4acea3ae19</id>
<content type='text'>
Fixes a regression in the local domain tools where sss_groupadd no longer
detected a GID duplicate. The check for EEXIST is moved one level up into
more high level function.

The patch also adds the same rename support for users. I found it odd that
we allowed a rename of groups but not users. There is a catch when storing
a user -- his cached password would be gone. I think that renaming a user
is such a rare operation that it's not severe, plus there is a warning in
the logs.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fixes a regression in the local domain tools where sss_groupadd no longer
detected a GID duplicate. The check for EEXIST is moved one level up into
more high level function.

The patch also adds the same rename support for users. I found it odd that
we allowed a rename of groups but not users. There is a catch when storing
a user -- his cached password would be gone. I think that renaming a user
is such a rare operation that it's not severe, plus there is a warning in
the logs.
</pre>
</div>
</content>
</entry>
<entry>
<title>Save alias of the primary name, too</title>
<updated>2012-03-21T15:22:39+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-03-19T07:03:32+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=6d46dc4f1d46ba4a3c568e41b62b6832474cb0e8'/>
<id>6d46dc4f1d46ba4a3c568e41b62b6832474cb0e8</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>SYSDB: Save only lowercased aliases in case-insensitive domains</title>
<updated>2012-03-16T18:06:50+00:00</updated>
<author>
<name>Stephen Gallagher</name>
<email>sgallagh@redhat.com</email>
</author>
<published>2012-03-15T19:43:34+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=2293a41a4c534ad0db42038628dbe6171a08819d'/>
<id>2293a41a4c534ad0db42038628dbe6171a08819d</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1253
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1253
</pre>
</div>
</content>
</entry>
<entry>
<title>Search netgroups by alias, too</title>
<updated>2012-03-06T20:29:40+00:00</updated>
<author>
<name>Jakub Hrozek</name>
<email>jhrozek@redhat.com</email>
</author>
<published>2012-03-06T17:47:15+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=9027034fcfe8d967c9250eb78a78edcc0811c805'/>
<id>9027034fcfe8d967c9250eb78a78edcc0811c805</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1228
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1228
</pre>
</div>
</content>
</entry>
<entry>
<title>SSH: Add more debugging messages</title>
<updated>2012-02-27T16:52:50+00:00</updated>
<author>
<name>Jan Cholasta</name>
<email>jcholast@redhat.com</email>
</author>
<published>2012-02-27T09:43:34+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=3684f53f50bc8c07d3e8975ba0037ef77242c55e'/>
<id>3684f53f50bc8c07d3e8975ba0037ef77242c55e</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>SSH: Save SSH host name aliases</title>
<updated>2012-02-27T16:52:50+00:00</updated>
<author>
<name>Jan Cholasta</name>
<email>jcholast@redhat.com</email>
</author>
<published>2012-02-24T17:48:08+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=b193250ca7b71e4f07f3016e0addbc4ba521c6a5'/>
<id>b193250ca7b71e4f07f3016e0addbc4ba521c6a5</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Delete missing attributes from netgroups to be stored</title>
<updated>2012-02-24T19:58:15+00:00</updated>
<author>
<name>Jan Zeleny</name>
<email>jzeleny@redhat.com</email>
</author>
<published>2012-02-21T12:07:30+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=720396bedc032e2c3d6fd48b4f7913fcb0429641'/>
<id>720396bedc032e2c3d6fd48b4f7913fcb0429641</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1136
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1136
</pre>
</div>
</content>
</entry>
<entry>
<title>Redesign purging of the sudo cache</title>
<updated>2012-02-17T16:10:04+00:00</updated>
<author>
<name>Pavel Březina</name>
<email>pbrezina@redhat.com</email>
</author>
<published>2012-02-07T13:08:55+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/okos/public_git/sssd2.git/commit/?id=061b0eaa22291bd1be59be43bf2c7aadf92a24c9'/>
<id>061b0eaa22291bd1be59be43bf2c7aadf92a24c9</id>
<content type='text'>
https://fedorahosted.org/sssd/ticket/1173
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/sssd/ticket/1173
</pre>
</div>
</content>
</entry>
</feed>
