sssd.git/src/responder/common/negcache.c, branch prompting

NEGCACHE: Adding getter for timeout

2016-05-11T10:50:11+00:00

It adds new function to negative cache API:
* int sss_ncache_get_timeout(struct sss_nc_ctx *ctx);

Resolves:
https://fedorahosted.org/sssd/ticket/2317

Reviewed-by: Pavel Březina

NEGCACHE: Removing timeout from sss_ncache_check_*

2016-05-11T10:49:51+00:00

It removes timeout parameter from check functions of negative cache.
Timeout is set ny init function and it is handled internally.

API change:
 * int sss_ncache_check_...(struct sss_nc_ctx *ctx,
                            int ttl,      <----- timeout vanished
                            struct sss_domain_info *dom,
                            ...);

Resolves:
https://fedorahosted.org/sssd/ticket/2317

Reviewed-by: Pavel Březina

NEGCACHE: Adding timeout to struct sss_nc_ctx

2016-05-11T10:49:45+00:00

It adds timeout of negative cache to handling
struct sss_nc_ctx.

There is one change in API of negatice cache:
 * int sss_ncache_init(TALLOC_CTX *memctx,
                       uint32_t timeout,  <----- new
                       struct sss_nc_ctx **_ctx);

There is also one new function in common/responder:
*  errno_t responder_get_neg_timeout_from_confdb(struct confdb_ctx *cdb,
                                                 uint32_t *ncache_timeout);

Resolves:
https://fedorahosted.org/sssd/ticket/2317

Reviewed-by: Pavel Březina

NEGCACHE: Removing of condition for ttl = -1

2016-04-20T18:07:21+00:00

If ttl = -1 then function sss_ncache_check_str() returns EEXIST without
checking negcache. This behaviour is out of logic.

We use ttl = 0 for permanent caching.

Reviewed-by: Lukáš Slebodník

Fix typos reported by lintian

2016-02-23T11:04:42+00:00

Reviewed-by: Pavel Březina

util: Update get_next_domain's interface

2015-10-23T08:32:23+00:00

Update get next domain to be able to
include disbled domains and change the
interface to accept flags instead of
multiple booleans.

Ticket:
https://fedorahosted.org/sssd/ticket/2673

Reviewed-by: Jakub Hrozek

negcache: allow domain name for UID and GID

2015-07-27T20:03:42+00:00

Related to https://fedorahosted.org/sssd/ticket/2731

Reviewed-by: Jakub Hrozek

ncache: add calls for certificate based searches

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

negcache: Soften condition for expired entries

2015-05-22T10:26:59+00:00

Type of timestamp for entries in negative cache is time_t
which is number of *seconds* that have elapsed since 1 January 1970.

The condition for ttl was to strict so entry could be valid
 from  "ttl-1" to  ttl e.g.
 * ttl is 1 second
 * entry was stored to negative cache at 1432120871.999639
   stored_timestamp = 1432120871
 * entry was tested few miliseconds later 1432120872.001293
   current_time = 1432120872

Entry was marked as expired becuase result of condition was false
  stored_timestamp + ttl < current_time
          1432120871 + 1 < 1432120872

This is a reason why ./test-negcache sometime fails.
It's quite easily reproducible on slow machine or when valgrind was used.

sh$ while libtool --mode=execute valgrind ./test-negcache ; do echo OK: done

Reviewed-by: Pavel Reichl

ncache: Add sss_ncache_reset_repopulate_permanent

2015-04-09T06:35:20+00:00

This new function resets the negative cache and then re-adds the
permanent entries.

Reviewed-by: Lukáš Slebodník