sssd-devel December 2011

sssd-devel@lists.fedorahosted.org

27 participants
59 discussions

Start a nNew thread

[PATCH] Fix potential resource leak in backup_file.c
by Stephen Gallagher 09 Dec '11

09 Dec '11

Pushed to master under the one-liner rule. Fixes https://fedorahosted.org/sssd/ticket/1070

1 0

Announcing SSSD 1.6.4
by Stephen Gallagher 09 Dec '11

09 Dec '11

The SSSD team is proud to announce the version 1.6.4 bugfix release of the System Security Services Daemon. As always, it can be downloaded from https://fedorahosted.org/sssd/ == Highlights == * Fix for older openldap libraries that can fail setting the "no canonicalization" option * pam_sss will now return authinfo_unavail when the SSSD daemon is shut down, instead of PAM_SYSTEM_ERR * Fixes a regression in LDAP failover handling * Adds support for using Glib to provide unicode support instead of libunistring * SSSD must be built with the configure flag --with-unicode-lib=glib2 * All user/group/netgroup names passed to NSS/PAM are now validated to be valid UTF-8 strings == Detailed Changelog == Jakub Hrozek (2): * configAPI: Fix removing in old domain when saving a new domain * LDAP provider: Error while setting the nocanon option should not be fatal Jan Zeleny (2): * Fixed an error in macro for merging double linked lists * Fixed incorrect return code in PAM client Krzysztof Klimonda (1): * Fix FTBFS related to -Werror=format-security Stephen Gallagher (9): * Bumping version to 1.6.4 * RESPONDER: Ensure that all input strings are valid UTF-8 * Add -fno-strict-aliasing * LDAP: Try next failover server on any error * Allow using Glib for UTF8 support * Ignore NULL-terminator when checking UTF8-validity * DEBUG: fix bad backport containing new DEBUG representation * Ignore NULL-terminator when checking UTF8-validity for netgroups * Updating translation files

1 0

Announcing SSSD 1.5.16
by Stephen Gallagher 09 Dec '11

09 Dec '11

The SSSD team is proud to announce the version 1.5.16 bugfix release of the System Security Services Daemon. As always, it can be downloaded from https://fedorahosted.org/sssd/ == Highlights == * Fix for older openldap libraries that can fail setting the "no canonicalization" option * pam_sss will now return authinfo_unavail when the SSSD daemon is shut down, instead of PAM_SYSTEM_ERR * Fixes a regression in LDAP failover handling * Adds support for using Glib to provide unicode support instead of libunistring * SSSD must be built with the configure flag --with-unicode-lib=glib2 * All user/group/netgroup names passed to NSS/PAM are now validated to be valid UTF-8 strings == Detailed Changelog == Jakub Hrozek (1): * LDAP provider: Error while setting the nocanon option should not be fatal Jan Zeleny (2): * Fixed an error in macro for merging double linked lists * Fixed incorrect return code in PAM client Krzysztof Klimonda (1): * Fix FTBFS related to -Werror=format-security Simo Sorce (1): * Use neutral name for functions used by both pam and nss Stephen Gallagher (10): * Bumping version to 1.5.16 * RESPONDER: Ensure that all input strings are valid UTF-8 * Add -fno-strict-aliasing * LDAP: Try next failover server on any error * Allow using Glib for UTF8 support * Ignore NULL-terminator when checking UTF8-validity * DEBUG: fix bad backport containing new DEBUG representation * Ignore NULL-terminator when checking UTF8-validity for netgroups * Translation update * Adding new translation files

1 0

[PATCH] Fixed incorrect return code in PAM client
by Jan Zelený 09 Dec '11

09 Dec '11

The original return code of the PAM plugin in case of SSSD was not running was system_err, now it is authinfo_unavail. https://fedorahosted.org/sssd/ticket/1011 I also checked the sss_pam_make_request and its return codes as suggested in the ticket and everything seems to be correct. Thanks Jan

2 3

[PATCH] Fixed IPA netgroup processing
by Jan Zelený 09 Dec '11

09 Dec '11

In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future. Thanks Jan

2 1

[PATCHES] Support native IPA netgroups
by Jan Zelený 09 Dec '11

09 Dec '11

I'm sending couple patches which add support for IPA netgroups: #53 These routines were not static, so I renamed them in order to avoid confusion and possible collision with equivalent routines in IPA provider #54 Some new config options, please focus on this patch, I'm not entirely sure if my approach was the correct one. #55 This new context was necessary so I can pass ipa options to routine determining host search base. #56 This is netgroups support itself #57 IPA id provider which is utilizing previously added support of netgroup fetching Thanks Jan

3 15

[PATCH] Ignore NULL-terminator when checking UTF8-validity
by Stephen Gallagher 08 Dec '11

08 Dec '11

Glib fails if the NULL-terminator is included when a length is specified. I recently pushed "Allow using Glib for UTF8 support" after doing excessive negative testing. However, I forgot to do positive testing and therefore failed to discover that Glib treats a NULL-terminator as an error in validation. This patch changes our consumers to drop the NULL-terminator before passing it to validation. This works properly on both Glib and libunistring.

1 2

[PATCH] Added sssd --version option
by Pavel Březina 08 Dec '11

08 Dec '11

https://fedorahosted.org/sssd/ticket/953

5 11

[PATCH] Add ldap_sasl_minssf option
by Jan Zelený 08 Dec '11

08 Dec '11

https://fedorahosted.org/sssd/ticket/1075 The only thing is that I'm not sure if 72 is the right default minssf value for IPA provider, as default IPA installation works with 56 as the highest possible value for me. In default SSSD installation, this means that communication with IPA server will be rejected with no information about the reason being min SSF. I think this will be very confusing to SSSD users. Can anyone give me a hint how to proceed? Lower the default value in SSSD or do the change in IPA? Thanks Jan

5 12

[PATCH] LDAP: Fix missing break statements in force_tls
by Stephen Gallagher 08 Dec '11

08 Dec '11

Also add a default case to protect against bad input Detected by Coverity.

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel December 2011