sssd.git/src/util, branch sssctl

Fix minor spelling mistakes

2017-10-25T08:24:49+00:00

Merges: https://pagure.io/SSSD/sssd/pull-request/3556

Reviewed-by: Lukáš Slebodník

SELINUX: Use getseuserbyname to get IPA seuser

2017-09-06T06:17:53+00:00

The libselinux function getseuserbyname is more reliable method to retrieve
SELinux usernames then functions from libsemanage `semanage_user_query`
and is recommended by libsemanage developers.
Replace get_seuser function with getseuserbyname.

Resolves:
https://pagure.io/SSSD/sssd/issue/3308

Reviewed-by: Michal Židek 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Petr Lautrbach

UTIL: Add sss_create_dir()

2017-08-28T18:40:53+00:00

The newly added function helps us to create a new dir avoiding a
possible TUCTOU issue.

It's going to be used by the new session provider code.

A simple test for this new function has also been provided.

Related:
https://pagure.io/SSSD/sssd/issue/2995

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek

UTIL: move {files,selinux}.c under util directory

2017-08-28T18:40:43+00:00

files.c has at least one function that will be re-used for the new
session provider that's about to be added. Also, a few other functions
may be added and files.c seems the right place for those.

selinux.c has been moved together with files.c as the latter takes
advantage of some functions from the former and we do not want to always
link agains the tools code.

The public functions from files.c got a "sss_" prefix and it has been
changed whenever they're used.

Last but not least, all the places that included "tools/tools_util.h"
due to the functions on files.c had this include removed (as they were
already including "util/util.h".

Related:
https://pagure.io/SSSD/sssd/issue/2995

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek

UTIL: Set udp_preference_limit=0 in krb5 snippet

2017-08-14T13:26:29+00:00

We add udp_preference_limit = 0 to krb5 snippet if ad provider is
used. This option enable TCP connection before UDP, when sending
a message to the KDC.

Resolves:
https://pagure.io/SSSD/sssd/issue/3254

Signed-off-by: Jakub Hrozek 
Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Robbie Harwood

Moving headers used by both server and client to special folder

2017-08-03T09:08:15+00:00

These are the header files which are used by both client and server:
src/util/io.h
src/util/murmurhash3.h
src/util/util_safealign.h

This patch is about moving these header files to special folder
(src/shared). It will be easier to identify these headers when looking
for them in the src tree.
util_safalign.h is renamed as safalign.h because util_ namespace is
appropriate when this file belonged to the util's folder which is no
longer the case.

Resolves:
https://pagure.io/SSSD/sssd/issue/1898

Reviewed-by: Fabiano Fidêncio

UTIL: Add session recording conf management module

2017-07-27T08:32:30+00:00

Add an util module for loading session recording configuration.
To be used by responders and data provider.

Reviewed-by: Pavel Březina

CRYPTO: Do not call NSS_Shutdown after every operation

2017-07-24T19:39:38+00:00

Calling setup and teardown on every encryption cases issues like the one
described in https://bugzilla.redhat.com/show_bug.cgi?id=1456151
eventually.

Similarly to other crypto functions, don't tear down NSS by calling
NSS_Shutdown. Let the OS reclaim the resources.

Resolves:
https://pagure.io/SSSD/sssd/issue/3424

Reviewed-by: Lukáš Slebodník

KCM: temporary increase hardcoded buffers

2017-07-24T19:19:07+00:00

Temporary workaround:
https://pagure.io/SSSD/sssd/issue/3386

Reviewed-by: Jakub Hrozek

DOMAIN: Add sss_domain_info_{get,set}_output_fqnames()

2017-06-21T09:28:15+00:00

Let's avoid setting a domain's property directly from cr_domain code.

In order to do so, let's introduce a setter, which may help us in the
future whenever we decide to make sss_domain_info an opaque structure.

For completeness, a getter has also been introduced and used in the
usertools code.

Related:
https://pagure.io/SSSD/sssd/issue/3403

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek