sssd.git, branch reviews

sss_cache: fqdn not accepted

2013-01-04T16:00:04+00:00

sss_cache did not accept fully quaified domain names.

https://fedorahosted.org/sssd/ticket/1620

LDAP: initialize refresh function handler

2013-01-04T15:34:23+00:00

let krb5_backup_kpasswd failover work

2013-01-02T16:59:02+00:00

https://fedorahosted.org/sssd/ticket/1735

failover: Protect against empty host names

2013-01-02T16:44:09+00:00

Added new parameter to split_on_separator that allows to skip
empty values.

The whole function was rewritten. Unit test case was added to
check the new implementation.

https://fedorahosted.org/sssd/ticket/1484

set ret to EOK after for loop in sdap_sudo_purge_sudoers

2013-01-02T16:39:44+00:00

If we are unable to delete some rule from cache we print a debug
message and ignore the error. Thus we should set ret to EOK after
the for loop otherwise we return whether the last rule was deleted
successfully or not.

This also removes compilation warning that ret may be used
uninitialized (when we don't go inside the loop at all).

mmap cache: invalidate cache on fatal error

2012-12-20T18:55:19+00:00

If a fatal EFAULT error is returned by the internal function that frees used
memory invalidate the whole cache and reinit it. This way we avoid further
corruption and insure clients see consistent data.

Also insure we use the right context in init() and we use talloc_zfree() in
reinit so that if the init() later fails we do not leave around a pointer
to free memory in the callers.

Carefully check records when forcibly invalidating

2012-12-20T18:55:02+00:00

We should never try to invalidate an already invalid record as
internal pointers will not be consistent. Carefully test that the
record really is valid when we are fishing for free space, and
properly invalidate records or return a fatal error if something
goes wrong.
In order to make the code more robust always invalidate the whole
data space on initialization by setting all bits to 1, and make sure
to invalidate the whole last allocated slot by converting rec->len to
the number of slots instead of just the space used.

Update free table when records are invalidated.

2012-12-20T18:55:02+00:00

We were holding up slots when entries were invalidated directly an not through
our primitive garbage collection scheme.

nss_mc: Add extra checks when dereferencing records

2012-12-20T18:55:02+00:00

Although it should enver happen that we pass in an invalid hash it
is always better to just not do anything than access memory ouf of
the hash table. It can lead to segfaults, or worse referencing
memory that should not be touched.

krb5 tgt renewal: fix usage of ldb_dn_get_component_val()

2012-12-20T18:41:11+00:00

For some reason I was under the impression that the DN components are
counted backwards in libldb. This patch corrects this.