sssd.git/src/krb5_plugin, branch ad_domain_local_groups

localauth: make plugin non-authoritative on failures

2016-07-06T17:12:04+00:00

According to the documentation in localauth_plugin.h "aname will be
considered authorized if at least one module returns 0 and all other
modules return KRB5_PLUGIN_NO_HANDLE." So it is safe to always return
KRB5_PLUGIN_NO_HANDLE because a different plugin has to return 0 to
allow access to the given principal.

Resolves https://fedorahosted.org/sssd/ticket/2788

Reviewed-by: Jakub Hrozek

localauth plugin: fix coverity warning

2015-05-26T08:36:13+00:00

Error: FORWARD_NULL (CWE-476): [#def1]
sssd-1.12.90/src/krb5_plugin/sssd_krb5_localauth_plugin.c:111: assign_zero: Assigning: "pwd.pw_name" = "NULL".
sssd-1.12.90/src/krb5_plugin/sssd_krb5_localauth_plugin.c:142: var_deref_model: Passing null pointer "pwd.pw_name" to "strdup", which dereferences it.
  140|       }
  141|
  142|->     str = strdup(pwd.pw_name);
  143|       if (str == NULL) {
  144|           ret = ENOMEM;

Reviewed-by: Pavel Březina

Remove useless assignment to function parameter

2015-03-02T14:29:17+00:00

Reported by: cppcheck

void free_fun(struct info *info)
     free(info->name);
     free(info);
     info = NULL;
     ^^^^^^^^^^^
Assignment to function parameter has no effect outside the function.

Reviewed-by: Pavel Reichl

Implement MIT Kerberos localauth plugin

2014-09-02T08:39:42+00:00

The MIT Kerberos localauth pluing interface defines two different calls.

The first checks if a given Kerberos principal relates to a given name
of a local user (userok). The implementation lets SSSD resolve the
principal and the user name and if the returned user entries both have
the same UID success is returned.

The second translates a given Kerberos principal to a local user name
(a2l). Here SSSD is only called once to resolve the principal and the
user name is returned.

Resolves https://fedorahosted.org/sssd/ticket/1835

Reviewed-by: Jakub Hrozek

Add conditional build for MIT Kerberos localauth plugin

2014-09-02T08:39:24+00:00

This patch adds everything what is needed to build the MIT Kerberos
localauth plugin if the used version of MIT Kerberos supports it. It
does not implement the plugin.

Reviewed-by: Jakub Hrozek

Move DEBUG macro body to debug_fn

2014-02-12T21:30:44+00:00

Move DEBUG macro body to the debug_fn function, adding "function"
argument to the latter.
Rename "debug_fn" in sssd_krb5_locator_plugin.c to "plugin_debug_fn" to
remove conflict with the sssd debug_fn.
Replace DEBUG_MSG macro usage with debug_fn function usage.
Remove DEBUG_MSG macro along with tests.

The above makes the total size of binaries drop by 20% for the standard
Fedora build and by 44% for a build configured according to Debian
packaging script.

Reviewed-by: Jakub Hrozek 
Reviewed-by: Stephen Gallagher 
Reviewed-by: Simo Sorce

Fix formating of variables with type: long

2013-09-11T17:44:53+00:00

KRB5_LOCATOR: Print the filename that couldn't be opened

2012-07-06T15:44:45+00:00

krb5 locator: Do not leak addrinfo

2012-05-07T18:35:49+00:00

Kerberos locator: Include the correct krb5.h header file

2012-05-07T18:35:49+00:00

https://fedorahosted.org/sssd/ticket/1325