sssd.git/src/responder, branch sasl_ad_compat

PAM: Set negcache if user is not found after provider check

2013-08-07T22:44:19+00:00

PAM: Check negcache when searching for fully qualified users, too

2013-08-07T22:44:19+00:00

NSS: Clear cached netgroups if a request comes in from the sss_cache

2013-08-07T22:38:31+00:00

In order for sss_cache to work correctly, we must also signal the nss
responder to invalidate the hash table requests.

https://fedorahosted.org/sssd/ticket/1759

NSS: allow removing entries from netgroup hash table

2013-08-07T22:38:31+00:00

There is a timed desctructor in the nss responder that, when the
entry timeout passes, removes the netgroup from the hash table while
the netgroup is freed. This patch adds a hash delete callback so that if the
netgroup is removed from the hash table with hash_delete, its hash table
pointer will be invalidated. Later, when the entry is being freed, the
destructor won't attempt to remove it from the hash table.

SSH: Ensure that cmd_ctx->name will not be NULL.

2013-08-05T14:48:23+00:00

If cmd_ctx->name was not initialized by sss_parse_name
then copy of name will be used.

https://fedorahosted.org/sssd/ticket/1970
Coverity ID: 11647

Fix netgroup lookup when using fully qualified name

2013-07-31T09:00:55+00:00

Netgroups should ignore the 'use_fully_qualified_names' setting

2013-07-29T10:59:17+00:00

Netgroups often have memberNisNetgroup entries included in them
that will never process correctly if we require fully-qualified
names on the nested lookup. This patch alters the behavior of
netgroup lookups to check *all* domains for an unqualified
netgroup name, instead of only the ones not requiring fully-
qualified names.

https://fedorahosted.org/sssd/ticket/2013

Remove unused memory context

2013-07-29T10:57:31+00:00

SUDO: realloc with sizeof(uint32_t) when adding uint32_t

2013-07-22T11:51:31+00:00

Do not try to set password when authtok_length is zero

2013-07-18T14:04:42+00:00

https://fedorahosted.org/sssd/ticket/1814

When the authtok_length is zero, it shouldn't call
sss_authtok_set_password, because it tries to determine lenght of passed
string by itself and would read parts of DBus message behind boundaries
of authtok.