sssd.git/src/providers/ldap, branch sudo

sudo: always use srv_opts from id context

2017-10-31T09:48:55+00:00

Prior this patch, we remember id_ctx->srv_opts in sudo request to switch
the latest usn values. This works fine most of the time but it may cause
a crash.

If we have two concurrent sudo refresh and one of these fails, it causes
failover to try the next server and possibly replacing the old srv_opts
with new one and it causes an access after free in the other refresh.

ldap: Change ldap_user_certificate to userCertificate;binary

2017-10-04T06:54:41+00:00

IPA and AD providers default to userCertificate;binary for the
ldap_user_certificate option. It will be good to default that value
also for the generic LDAP provider.

Resolves:
https://pagure.io/SSSD/sssd/issue/3499

Reviewed-by: Jakub Hrozek

IPA: fix handling of certmap_ctx

2017-09-14T14:57:09+00:00

This patch fixes a use-after-free in the AD provider part and
initializes the certmap_ctx with data from the cache at startup.

Related to https://pagure.io/SSSD/sssd/issue/3508

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Jakub Hrozek

SDAP: Use sysdb_search_*_by_orig_dn() in sdap_async_groups.c

2017-09-05T09:13:50+00:00

Methods for searching the users, groups and entries by their orig dn
have been introduced in one of the previous commit.

Let's make use of those whenever it makes sense.

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

SDAP: Use sysdb_search_*_by_orig_dn() in sdap_async_nested_groups.c

2017-09-05T09:13:40+00:00

Methods for searching the users, groups and entries by their orig dn
have been introduced in one of the previous commit.

Let's make use of those whenever it makes sense.

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

SDAP: Don't call be_mark_offline() because sdap_id_conn_data_set_expire_timer() failed

2017-08-31T10:08:34+00:00

Marking the whole backend as offline because
sdap_id_conn_data_set_expire_timer() failed doesn't look any right and
from now on let's avoiding doing so.

Related: https://pagure.io/SSSD/sssd/issue/2976

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

SDAP: Add a debug message to explain why a backend was marked offline

2017-08-31T10:08:30+00:00

This new debug message may help us when debugging the cases where a
backend was marked offline but it shouldn't be.

Related: https://pagure.io/SSSD/sssd/issue/2976

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

ldap_child: Removing duplicate log message

2017-08-25T17:37:46+00:00

Duplicate log messages were getting logged if trust relationship
breaks for some reason from AD. That causes lot spam in syslog.
This PR removes duplicate log entry and keeps extended log entry.

Resolves:
https://pagure.io/SSSD/sssd/issue/3450

Reviewed-by: Lukáš Slebodník

Moving headers used by both server and client to special folder

2017-08-03T09:08:15+00:00

These are the header files which are used by both client and server:
src/util/io.h
src/util/murmurhash3.h
src/util/util_safealign.h

This patch is about moving these header files to special folder
(src/shared). It will be easier to identify these headers when looking
for them in the src tree.
util_safalign.h is renamed as safalign.h because util_ namespace is
appropriate when this file belonged to the util's folder which is no
longer the case.

Resolves:
https://pagure.io/SSSD/sssd/issue/1898

Reviewed-by: Fabiano Fidêncio

Revert "LDAP: Fix nesting level comparison"

2017-07-24T18:44:11+00:00

This reverts commit 925a14d50edf0e3b800ce659b10b771ae1cde293.

It broke a test for enumerate nested groups if they are part
of non POSIX groups https://pagure.io/SSSD/sssd/issue/2406

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek