sssd.git/src, branch sudo

sudo: always use srv_opts from id context

2017-10-31T09:48:55+00:00

Prior this patch, we remember id_ctx->srv_opts in sudo request to switch
the latest usn values. This works fine most of the time but it may cause
a crash.

If we have two concurrent sudo refresh and one of these fails, it causes
failover to try the next server and possibly replacing the old srv_opts
with new one and it causes an access after free in the other refresh.

DP: Log to syslog whether it's online or offline

2017-10-18T19:06:24+00:00

Instead of requiring that admins enable and look at our logs, let's log
to syslog what's the DP status.

Resolves:
https://pagure.io/SSSD/sssd/issue/3307

Signed-off-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Pavel Březina

DP: Fix the output type used in dp_req_recv_ptr()

2017-10-18T19:06:15+00:00

Related: https://pagure.io/SSSD/sssd/issue/3307

Signed-off-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Pavel Březina

IPA: sanitize name in override search filter

2017-10-18T10:35:59+00:00

Resolves:
https://pagure.io/SSSD/sssd/issue/3545

Reviewed-by: Fabiano Fidêncio

intg: Add sanity tests for pysss_nss_idmap

2017-10-16T13:11:52+00:00

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek

intg: Create FakeAD class based on openldap

2017-10-16T13:11:47+00:00

FakeAD is openldap with ldif schema which allows to load static data
from real AD. Instance of class will also contain some predefined
users/groups which can be used for basic sanity testing in sssd of AD features.

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek

ds_openldap: Extract functionality to protected methods

2017-10-16T13:11:43+00:00

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek

intg: Prefer locally built python modules

2017-10-16T13:11:39+00:00

Patch prepends path to sssd python modules; so we will be
able to import them without any issue and they will be preferred over
system modules.

sh$[/tmp/sssd-intg.3gb4hzpn/var/log/sssd] python2
Python 2.7.13 (default, Aug 16 2017, 12:56:26)
[GCC 7.1.1 20170802 (Red Hat 7.1.1-7)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import SSSDConfig
>>> print(SSSDConfig.__file__)
/tmp/sssd-intg.3gb4hzpn/lib/python2.7/site-packages/SSSDConfig/__init__.pyc
>>> import pyhbac
>>> print(pyhbac.__file__)
/tmp/sssd-intg.3gb4hzpn/lib64/python2.7/site-packages/pyhbac.so

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek

intg: prevent "TypeError: must be type, not classobj"

2017-10-16T13:11:29+00:00

http://stackoverflow.com/questions/9698614/super-raises-typeerror-must-be-type-not-classobj-for-new-style-class

========================== ERRORS ===========================
_______ ERROR at setup of test_regression_ticket2163 ________
Traceback (most recent call last):
  File "src/tests/intg/test_pysss_nss_idmap.py", line 48, in ad_inst
    instance.teardown()
  File "src/tests/intg/ds_openldap.py", line 371, in teardown
    super(FakeAD, self).teardown()
TypeError: super() argument 1 must be type, not classobj

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek

intg: Let python paths be configurable

2017-10-16T13:11:25+00:00

It will allow to prefer locally built python modules
in integration tests.

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek