sssd.git/src/providers/ipa/ipa_sudo_conversion.c, branch prompting

IPA_SUDO: Prevent dereference of NULL pointer

2016-04-18T16:17:51+00:00

Error: NULL_RETURNS (CWE-476): [#def31]
sssd-1.13.4/src/providers/ipa/ipa_sudo_conversion.c:964:
    returned_null: "ipa_sudo_conv_lookup" returns null.
sssd-1.13.4/src/providers/ipa/ipa_sudo_conversion.c:149:9:
    return_null: Explicitly returning null.
sssd-1.13.4/src/providers/ipa/ipa_sudo_conversion.c:964:
    var_assigned: Assigning: "cmdgroup" = null return value
                  from "ipa_sudo_conv_lookup".
sssd-1.13.4/src/providers/ipa/ipa_sudo_conversion.c:966:
    dereference: Dereferencing a null pointer "cmdgroup".
 #  964|           cmdgroup = ipa_sudo_conv_lookup(conv->cmdgroups, listitem->dn);
 #  965|
 #  966|->         ret = add_strings_lists(mem_ctx, values, cmdgroup->expanded,
 #  967|                                   false, discard_const(&values));
 #  968|           if (ret != EOK) {

Reviewed-by: Pavel Březina

IPA SUDO: support old ipasudocmd rdn

2016-03-14T16:55:20+00:00

FreeIPA versions older than 3.1 have rdn sudoCmd instead of ipaUniqueID.

Resolves:
https://fedorahosted.org/sssd/ticket/2969

Reviewed-by: Jakub Hrozek

IPA SUDO: fix typo

2016-03-14T16:55:15+00:00

Reviewed-by: Jakub Hrozek

IPA SUDO: download externalUser attribute

2016-03-09T14:24:43+00:00

This allows configuration with id_provider = proxy
and sudo_provider = ipa when someone needs to fetch
rules for local users.

https://fedorahosted.org/sssd/ticket/2972

Reviewed-by: Jakub Hrozek

IPA SUDO: Add support for ipaSudoRunAsExt* attributes

2016-01-19T13:34:02+00:00

Reviewed-by: Sumit Bose

IPA SUDO: Implement rules refresh

2016-01-19T13:33:38+00:00

Reviewed-by: Sumit Bose

IPA SUDO: Implement full refresh

2016-01-19T13:33:35+00:00

Reviewed-by: Sumit Bose