sssd.git/src/responder/secrets, branch certificate_mapping

RESPONDER: Make clear {reset_,}idle_timer() are related to client

2017-01-23T17:46:37+00:00

Those public functions dealing with idle_timer are related to the
client's timeout. Let's make it explicit as we will introduce more
timeout handlers (this time, related to the responder itself).

Related:
https://fedorahosted.org/sssd/ticket/3245

Signed-off-by: Fabiano Fidêncio 
Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

RESPONDER: Make responders' common code ready for socket activation

2017-01-23T17:46:37+00:00

Instead of simply setting the unix socket during the process
initialization, let's make it socket-activatable. It's the first step in
order to have socket-activated responders and doesn't introduce any kind
of regression with the current code.

Also, we must avoid setting the responders fds to -1 in all cases as it
may have cause the socket to be unreachable in case the administrator
decides to move back from socket-activation to using the services line
in sssd.conf. With this change, the responders will have to activelly
set their sockets fd to -1 before calling activate_unix_sockets(), which
is already done everyone but in Secrets and in one piece of PAM
responder.

Related:
https://fedorahosted.org/sssd/ticket/2243

Signed-off-by: Fabiano Fidêncio 
Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

SECRETS: Add configurable payload size limit of a secret

2016-11-24T08:55:45+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/3169

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

SECRETS: Add a configurable limit of secrets that can be stored

2016-10-05T09:57:20+00:00

Related:
https://fedorahosted.org/sssd/ticket/3169

Reviewed-by: Jakub Hrozek

SECRETS: Use HTTP error code 504 when a proxy server cannot be reached

2016-10-04T19:26:09+00:00

Previously, a generic 500 error code was returned. This patch adds a new
error message on a failure to contact the proxy server and returns 504,
"Gateway timeout" instead.

Resolves:
    https://fedorahosted.org/sssd/ticket/3212

Reviewed-by: Fabiano Fidêncio

SECRETS: Fix a typo in function name

2016-10-04T19:26:06+00:00

s/filed/field/

Reviewed-by: Fabiano Fidêncio

SECRETS: Use a better data type for ret

2016-10-04T19:26:02+00:00

Normally we use errno_t for return codes and size_t for counting
objects.

Reviewed-by: Fabiano Fidêncio

SECRETS: Add DEBUG messages to the sssd-secrets provider

2016-10-04T19:25:57+00:00

Previously, it was not possible to follow the flow of the secrets
responder or find out what went wrong on error. This patch adds DEBUG
messages so that most failure cases have their own message. At the same
time, running sssd-secrets with debug_level <= 3 does not emit any
messages at all.

Reviewed-by: Fabiano Fidêncio

SECRETS: Add a configurable depth limit for nested containers

2016-10-03T13:32:33+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/3168

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

SECRETS: Use a tmp_context on local_db_check_containers()

2016-10-03T13:32:29+00:00

Otherwise the struct ldb_dn will be hanging on the mem_ctx till it gets
freed.

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek