sssd.git/src/tests/cmocka, branch sudo

IDMAP: add a unit test

2017-09-20T18:52:21+00:00

A unit test for the recent changes from
0526dde7f3d4089617c0f4a6a85f83e9d266c9f1 is added.

Reviewed-by: Fabiano Fidêncio

IPA: fix handling of certmap_ctx

2017-09-14T14:57:09+00:00

This patch fixes a use-after-free in the AD provider part and
initializes the certmap_ctx with data from the cache at startup.

Related to https://pagure.io/SSSD/sssd/issue/3508

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Jakub Hrozek

certmap: make sure eku_oid_list is always allocated

2017-09-14T14:57:04+00:00

If there are only OIDs in a  part of a matching rule a NULL pointer
dereference might occur.

Related to https://pagure.io/SSSD/sssd/issue/3508

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Jakub Hrozek

SUDO: Use initgr_with_views when looking up a sudo user

2017-09-08T15:02:49+00:00

The sudo responder code didn't take views into account when looking for
rules, which resulted in sudo rules being ignored if the user's name was
overriden.

Please see the ticket for a detailed info on how to reproduce the bug.

Resolves:
https://pagure.io/SSSD/sssd/issue/3488

Reviewed-by: Pavel Březina

TESTS: Use NULL for pointer, not 0

2017-09-08T15:02:45+00:00

Reviewed-by: Pavel Březina 
Reviewed-by: Lukáš Slebodník

certmap: add OpenSSL implementation

2017-09-05T13:04:00+00:00

The OpenSSL 1.1 API is used but there is a short macro block which
should added the needed compatibility if and older OpenSSL version is
used.

Related to https://pagure.io/SSSD/sssd/issue/3050

Reviewed-by: Lukáš Slebodník

tests: add unit tests for krb5 localauth plugin

2017-08-28T19:50:42+00:00

Reviewed-by: Jakub Hrozek 
Reviewed-by: Fabiano Fidêncio

TEST_NEGCACHE: Ensure root's uid and gid are always added to ncache

2017-08-28T18:55:29+00:00

In order to do so two new functions have been introduced and
test_sss_ncache_prepopulate() has been modified in order to ensure that
root's uid and gid are always added to the negative cache.

Related: https://pagure.io/SSSD/sssd/issue/3460

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

TEST_NEGCACHE: Test that "root" is always added to ncache

2017-08-28T18:54:55+00:00

Simply modify test_sss_ncache_prepopulate() in order to ensure that
"root" user and group are always added to the negative cache, no matter
whether they're set as part of the filter_users or filter_groups
options.

Related: https://pagure.io/SSSD/sssd/issue/3460

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

UTIL: Set udp_preference_limit=0 in krb5 snippet

2017-08-14T13:26:29+00:00

We add udp_preference_limit = 0 to krb5 snippet if ad provider is
used. This option enable TCP connection before UDP, when sending
a message to the KDC.

Resolves:
https://pagure.io/SSSD/sssd/issue/3254

Signed-off-by: Jakub Hrozek 
Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Robbie Harwood