sssd.git/src/providers/ldap/sdap_sudo.c, branch reviews

LDAP: initialize refresh function handler

2013-01-04T15:34:23+00:00

Add default section to switch statement

2012-12-19T17:42:58+00:00

switch statements should always have a default section. In this
particular case gcc gave a "'send_fn' may be used uninitialized in this
function" warning.

sudo: do full refresh when data provider is back online

2012-12-18T16:15:22+00:00

https://fedorahosted.org/sssd/ticket/1689

Add a online callback if the first full refresh fails due to the
provider beeing offline so we can perform the refresh as soon as
possible.

sudo: schedule another full refresh in short interval if the first fails

2012-12-18T16:15:22+00:00

https://fedorahosted.org/sssd/ticket/1689

If the first full refresh of sudo rules fails because the data provider
is offline, we will schedule another one in 2, 4, ... minutes.

check dp error in sdap_sudo_full_refresh_done()

2012-12-18T16:15:22+00:00

https://fedorahosted.org/sssd/ticket/1689

add sdap_sudo_schedule_refresh()

2012-12-18T16:15:22+00:00

Reduces amount of code duplication.

sudo: don't get stuck in rules and smart refresh when offline

2012-12-11T15:10:32+00:00

https://fedorahosted.org/sssd/ticket/1682

The problem was in following code:
if (ret != EOK || state->dp_error != DP_ERR_OK || state->error != EOK) {
    tevent_req_error(req, ret);
    return;
}

In situation when data provider error occurs (e.g. when offline),
ret == EOK but dp_error != DP_ERR_OK and we take the true branch.
This results in calling tevent_req_error(req, EOK).

Unfortunately, with EOK tevent_req_error only returns false, but
does not trigger callback and this tevent request hangs forever,
because no tevent_req_done(req) is called.

SUDO: strdup the input variable

2012-12-07T16:25:22+00:00

https://fedorahosted.org/sssd/ticket/1701

fix -O3 variable may be uninitialized warnings

2012-11-16T16:54:46+00:00

sudo: store rules with no sudoHost attribute

2012-11-15T19:09:43+00:00

https://fedorahosted.org/sssd/ticket/1640

Normal rules requires that sudoHost attribute is present. But this
attribute is not mandatory for a special rule named cn=defaults.

This patch modifies filter so that we store even rules that doesn't
have sudoHost attribute specified. SUDO will then decide whether it
is allowed or not.