Author: Dan Lavu
Author Date: 2024-04-16 18:05:37 UTC

tests: updating makefile.am to include tests

Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>

Author: Alexey Tikhonov
Author Date: 2024-04-19 13:08:28 UTC

CI: remove unused stuff (lcov, ...)

Reviewed-by: Andre Boscatto <aboscatt@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit 65ca6725f6326481b7bb98c2a762c462f12cc8a8)

Author: Sumit Bose
Author Date: 2023-11-08 13:50:24 UTC

ad-gpo: use hash to store intermediate results

Currently after the evaluation of a single GPO file the intermediate
results are stored in the cache and this cache entry is updated until
all applicable GPO files are evaluated. Finally the data in the cache is
used to make the decision of access is granted or rejected.

If there are two or more access-control request running in parallel one
request might overwrite the cache object with intermediate data while
another request reads the cached data for the access decision and as a
result will do this decision based on intermediate data.

To avoid this the intermediate results are not stored in the cache
anymore but in hash tables which are specific to the request. Only the
final result is written to the cache to have it available for offline
authentication.

Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit d7db7971682da2dbf7642ac94940d6b0577ec35a)

Author: shridhargadekar
Author Date: 2024-03-22 05:59:06 UTC

Tests: sudo defaults rule

Changed doc-strings and steps for more clarity

Author: shridhargadekar
Author Date: 2024-03-22 05:39:08 UTC

Tests: sudo rule defaults

A sudo rule defaults (special condition) is tested here. The rule
with 'defaults' cn is added and additional option of '!authenticate'

Author: shridhargadekar
Author Date: 2024-02-15 17:41:26 UTC

Test: files_provider replaced with proxy

fixing sssd.conf domain-section update action

Author: shridhargadekar
Author Date: 2024-02-07 19:06:45 UTC

Tests: sssctl_analyze diff location

Corrected the log assertions for 'id' command
passed to the sssctl analyze <>

Author: Sumit Bose
Author Date: 2023-06-07 08:45:59 UTC

ad: use sAMAccountName to lookup hosts

To determine which GPOs apply to the host running SSSD the full DN of
the host object in AD is needed. To fine this object we use the NetBIOS
name of the host which is stored in AD in the sAMAccountName attribute.
Using other attributes, e.g. if ldap_user_name is set to a different
attribute, will most probably cause a failure since those attributes are
not managed as expected for host object. As a result sAMAccountName
should be hardcoded here to avoid issues.

Resolves: https://github.com/SSSD/sssd/issues/6766

Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 67c11c2ebae843f7ddd6b857efa2e1f6449986f3)

Reviewed-by: Tomáš Halman <thalman@redhat.com>

Author: =?utf-8?q?Pavel_B=C5=99ezina?=
Author Date: 2023-10-25 14:12:58 UTC

ci: get frozen Fedora releases in the matrix

A Fedora release may be in a frozen state (beta freeze, final freeze),
in such case, it is not temporarily visible under "pending"
but under "frozen".

Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit 17cf4bbb7e7969d6cba4e1a61ef2bb7b6a879c50)

Author: Lukas Slebodnik
Author Date: 2018-07-31 20:44:06 UTC

CRYPTO: Save prefix in s3crypt_sha512

Since commit 2951a9a84bd85f384213a3e071ffc167907df2d7 where we switched from
stpncpy to memcpy the salt prefix "$6$" is not stored at all.
This broke offline authentication if someone upgraded from old version
that stored the prefix to one that doesn't store it.

Resolves:
https://pagure.io/SSSD/sssd/issue/3791

Merges: https://pagure.io/SSSD/sssd/pull-request/3792

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
(cherry picked from commit f62d2af0c270a4f6143264a6cf3ce618f4a9ba80)
(cherry picked from commit 89a05bdaec89a8ee651836f11872d810bf0641fa)

Author: Lukas Slebodnik
Author Date: 2018-07-31 20:44:16 UTC

crypto-tests: Add unit test for s3crypt_sha512

Resolves:
https://pagure.io/SSSD/sssd/issue/3791

Merges: https://pagure.io/SSSD/sssd/pull-request/3792

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
(cherry picked from commit 8e1576b1ce7548530bba6efaa43b321d70707a1d)

Author: Jakub Hrozek
Author Date: 2016-02-17 08:56:58 UTC

Updating the version for the 1.11.9 release

Author: Pavel Reichl
Author Date: 2015-11-20 15:31:49 UTC

sysdb-tests: Fix warning - incompatible pointer type

Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 1352cf0d037c21eb6245fed17f1e6596ea3a3ccd)

Author: Jakub Hrozek
Author Date: 2014-12-05 12:20:03 UTC

Updating version for 1.9.8

Author: Michal Zidek
Author Date: 2013-09-13 15:41:28 UTC

Check slot validity before MC_SLOT_TO_PTR.

resolves:
https://fedorahosted.org/sssd/ticket/2049

Author: Pavel Březina
Author Date: 2013-08-27 09:11:05 UTC

SIGCHLD handler: do not call callback when pvt data where freed

https://fedorahosted.org/sssd/ticket/1992

Author: Jan Engelhardt
Author Date: 2013-02-21 12:12:25 UTC

sysdb: try dealing with binary-content attributes

https://fedorahosted.org/sssd/ticket/1818

I have here a LDAP user entry which has this attribute

 loginAllowedTimeMap::
  AAAAAAAAAP///38AAP///38AAP///38AAP///38AAP///38AAAAAAAAA

In the function sysdb_attrs_add_string(), called from
sdap_attrs_add_ldap_attr(), strlen() is called on this blob, which is
the wrong thing to do. The result of strlen is then used to populate
the .v_length member of a struct ldb_val - and this will set it to
zero in this case. (There is also the problem that there may not be
a '\0' at all in the blob.)

Subsequently, .v_length being 0 makes ldb_modify(), called from
sysdb_set_entry_attr(), return LDB_ERR_INVALID_ATTRIBUTE_SYNTAX. End
result is that users do not get stored in the sysdb, and programs like
`id` or `getent ...` show incomplete information.

The bug was encountered with sssd-1.8.5. sssd-1.5.11 seemed to behave
fine, but that may not mean that is the absolute lower boundary of
introduction of the problem.

Author: Stephen Gallagher
Author Date: 2011-12-22 18:39:17 UTC

Importing new translations for 1.7.0 release

Author: Stephen Gallagher
Author Date: 2011-12-09 18:38:31 UTC

Fix potential resource leak in backup_file.c

Author: Sumit Bose
Author Date: 2011-02-17 08:47:30 UTC

Change hbacservices/groups container

The containers store store hbacservices and hbacservicegroups
definitions were changed in recent versions of FreeIPA.

Author: Sumit Bose
Author Date: 2010-12-07 16:01:04 UTC

Add overflow check to SAFEALIGN_COPY_*_CHECK macros

Author: Sumit Bose
Author Date: 2010-12-07 16:01:04 UTC

Add overflow check to SAFEALIGN_COPY_*_CHECK macros

Author: Stephen Gallagher
Author Date: 2010-08-24 16:57:53 UTC

Updating version to 1.1.2

Author: Stephen Gallagher
Author Date: 2010-08-24 16:53:47 UTC

Updating to version 1.0.7 for security update

Author: Stephen Gallagher
Author Date: 2009-10-27 17:32:37 UTC

Update version to 0.7.1

No string changes have occurred.

Author: Stephen Gallagher
Author Date: 2009-09-29 14:11:37 UTC

Updating release script to use the VERSION file