<feed xmlns='http://www.w3.org/2005/Atom'>
<title>sssd.git/src/responder, branch my-master</title>
<subtitle>Experimental work on SSSD - Systen Security Services Daemon</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/'/>
<entry>
<title>Add alias attribute to nss responder structures</title>
<updated>2013-01-04T19:40:52+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-10-16T22:07:42+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=c3b18225c79a1fd3c5e92aef97759b04daa5a5d6'/>
<id>c3b18225c79a1fd3c5e92aef97759b04daa5a5d6</id>
<content type='text'>
Add plumbing to allow to push down an alias attribute to be used by
the memory cache.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Add plumbing to allow to push down an alias attribute to be used by
the memory cache.
</pre>
</div>
</content>
</entry>
<entry>
<title>Add alias argument to mmap_cache account store fns</title>
<updated>2013-01-04T19:40:17+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-10-16T21:16:54+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=2d468a06e14672a3012f2cf55720903000061c7d'/>
<id>2d468a06e14672a3012f2cf55720903000061c7d</id>
<content type='text'>
Basic plumbing to allow passing an alias down to mmap cache functions.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Basic plumbing to allow passing an alias down to mmap cache functions.
</pre>
</div>
</content>
</entry>
<entry>
<title>Change memory cache layout to add optional key</title>
<updated>2013-01-04T19:39:23+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-10-16T19:32:48+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=b5a99bebff5f7455d9b8bd89f0a81de587c5a9c0'/>
<id>b5a99bebff5f7455d9b8bd89f0a81de587c5a9c0</id>
<content type='text'>
This bumps the cache major number to 1 as this change is incompatible
with current clients.
The addiotinal key is used to allow name aliases to be added to user
and group entries. Aliases are a string that can be looked up via the
getpwname and getgrnam calls, and are useful to to fetch entries by
alternate names.
Currently only one, optional alias is allowed.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This bumps the cache major number to 1 as this change is incompatible
with current clients.
The addiotinal key is used to allow name aliases to be added to user
and group entries. Aliases are a string that can be looked up via the
getpwname and getgrnam calls, and are useful to to fetch entries by
alternate names.
Currently only one, optional alias is allowed.
</pre>
</div>
</content>
</entry>
<entry>
<title>failover: Protect against empty host names</title>
<updated>2013-01-02T16:44:09+00:00</updated>
<author>
<name>Michal Zidek</name>
<email>mzidek@redhat.com</email>
</author>
<published>2012-10-15T10:21:00+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=04759b59e71c78ab23b84d13dd29d9c6dd680adb'/>
<id>04759b59e71c78ab23b84d13dd29d9c6dd680adb</id>
<content type='text'>
Added new parameter to split_on_separator that allows to skip
empty values.

The whole function was rewritten. Unit test case was added to
check the new implementation.

https://fedorahosted.org/sssd/ticket/1484
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Added new parameter to split_on_separator that allows to skip
empty values.

The whole function was rewritten. Unit test case was added to
check the new implementation.

https://fedorahosted.org/sssd/ticket/1484
</pre>
</div>
</content>
</entry>
<entry>
<title>mmap cache: invalidate cache on fatal error</title>
<updated>2012-12-20T18:55:19+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-12-20T02:17:40+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=0e6c9d03cacf24de4265ee0f902c216ba5a131c9'/>
<id>0e6c9d03cacf24de4265ee0f902c216ba5a131c9</id>
<content type='text'>
If a fatal EFAULT error is returned by the internal function that frees used
memory invalidate the whole cache and reinit it. This way we avoid further
corruption and insure clients see consistent data.

Also insure we use the right context in init() and we use talloc_zfree() in
reinit so that if the init() later fails we do not leave around a pointer
to free memory in the callers.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
If a fatal EFAULT error is returned by the internal function that frees used
memory invalidate the whole cache and reinit it. This way we avoid further
corruption and insure clients see consistent data.

Also insure we use the right context in init() and we use talloc_zfree() in
reinit so that if the init() later fails we do not leave around a pointer
to free memory in the callers.
</pre>
</div>
</content>
</entry>
<entry>
<title>Carefully check records when forcibly invalidating</title>
<updated>2012-12-20T18:55:02+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-12-20T04:10:25+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=6acf7c92ab38ad388295b2d57cc97c4598aa95cc'/>
<id>6acf7c92ab38ad388295b2d57cc97c4598aa95cc</id>
<content type='text'>
We should never try to invalidate an already invalid record as
internal pointers will not be consistent. Carefully test that the
record really is valid when we are fishing for free space, and
properly invalidate records or return a fatal error if something
goes wrong.
In order to make the code more robust always invalidate the whole
data space on initialization by setting all bits to 1, and make sure
to invalidate the whole last allocated slot by converting rec-&gt;len to
the number of slots instead of just the space used.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We should never try to invalidate an already invalid record as
internal pointers will not be consistent. Carefully test that the
record really is valid when we are fishing for free space, and
properly invalidate records or return a fatal error if something
goes wrong.
In order to make the code more robust always invalidate the whole
data space on initialization by setting all bits to 1, and make sure
to invalidate the whole last allocated slot by converting rec-&gt;len to
the number of slots instead of just the space used.
</pre>
</div>
</content>
</entry>
<entry>
<title>Update free table when records are invalidated.</title>
<updated>2012-12-20T18:55:02+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-12-20T04:10:24+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=da4c23b6670adb45f71cf51aaeca8df30c2144be'/>
<id>da4c23b6670adb45f71cf51aaeca8df30c2144be</id>
<content type='text'>
We were holding up slots when entries were invalidated directly an not through
our primitive garbage collection scheme.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We were holding up slots when entries were invalidated directly an not through
our primitive garbage collection scheme.
</pre>
</div>
</content>
</entry>
<entry>
<title>nss_mc: Add extra checks when dereferencing records</title>
<updated>2012-12-20T18:55:02+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-12-19T16:56:27+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=8437e782fdf97945e9e0c2a793ffaf49abc2c0ca'/>
<id>8437e782fdf97945e9e0c2a793ffaf49abc2c0ca</id>
<content type='text'>
Although it should enver happen that we pass in an invalid hash it
is always better to just not do anything than access memory ouf of
the hash table. It can lead to segfaults, or worse referencing
memory that should not be touched.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Although it should enver happen that we pass in an invalid hash it
is always better to just not do anything than access memory ouf of
the hash table. It can lead to segfaults, or worse referencing
memory that should not be touched.
</pre>
</div>
</content>
</entry>
<entry>
<title>sssd_nss: Plug memory leaks</title>
<updated>2012-12-19T17:39:52+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-12-19T13:48:06+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=1f15b746e77f54ad82e1cb5c74f29d327b851c5a'/>
<id>1f15b746e77f54ad82e1cb5c74f29d327b851c5a</id>
<content type='text'>
A recent patch introduced a glaring memory leak in the routines that clean up
memcache memory on initgroups calls.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
A recent patch introduced a glaring memory leak in the routines that clean up
memcache memory on initgroups calls.
</pre>
</div>
</content>
</entry>
<entry>
<title>responder_dp: Add timeout to side requets</title>
<updated>2012-12-18T17:42:11+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2012-12-14T19:59:21+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/sssd.git/commit/?id=185dcb88690f45c7886c95076bd189877aef2289'/>
<id>185dcb88690f45c7886c95076bd189877aef2289</id>
<content type='text'>
This is an additional proteciont in case the provider misbheaves to avoid
having requests pending forever.

Fixes: https://fedorahosted.org/sssd/ticket/1717
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This is an additional proteciont in case the provider misbheaves to avoid
having requests pending forever.

Fixes: https://fedorahosted.org/sssd/ticket/1717
</pre>
</div>
</content>
</entry>
</feed>
