[PATCH] Add dummy credentials to an empty ccache file
by Sumit Bose
Hi,
this patch is the first step to solve #304. It adds some more
information into an empty ticket. I think this is as much we can do to
make krb5-auth-dialog happy, because krb5-auth-dialog overwrites the
client principal found in the ccache with its own data in
ka_parse_name(). This data is either just the user name, and the realm
is added by the kerberos libraries is default_realm from krb5.conf, or
if set the principal set with krb5-auth-dialog-preferences is taken.
For a quick fix there are two possibilites
- set the default_realm in krb5.conf or
- set the principal with krb5-auth-dialog-preferences
Additionally I'll try to contact the authors of krb5-auth-dialog to see
if they agree to try with the principal found in the ccache file if the
principal is not explictly and use the user name as a fallback.
bye,
Sumit
14 years, 5 months
[PATCHES] Fix several warnings/potential bugs
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Patch 0001: We weren't checking that the asprintf was successfully
allocating memory. I converted it to talloc_asprintf() for uniformity as
well.
Patch 0002: If grouplist was a zero-length array, we would return ret
unitialized.
Patch 0003: If we jumped to the end before the for-loop, it was possible
that we would return an unitialized value of count. It's unlikely that
we would ever trust this value, but this patch eliminates the compiler
warning.
Patch 0004: If we fell into the default case of the switch statement, we
would attempt to talloc_free() a random memory location. This patch
guarantees that sdp_req is NULL if it has not been initialized.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAksefmsACgkQeiVVYja6o6OX2ACffgVI2msGTgnSwAmHIo4/uwyj
T+EAoKRMMclIykrOEPYfDACQCuAEFtww
=pLsZ
-----END PGP SIGNATURE-----
14 years, 5 months
[PATCH] two fixes for the upgrade/changeconf script
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[PATCH 1/2] Handle spaces in config parser
Fixes: #301
Per discussion on #freeipa, the code now allows an arbitrary number of
spaces around the equal sign.
[PATCH 2/2] Fail on nonexistent input file
The openLocked function used to use os.O_CREAT by default, creating a
minimal config file when the v1 config file did not exist
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAksdbPwACgkQHsardTLnvCX9wwCcD0+xIlO4mEOCXjdZeD4CC7IV
jg8AnRyzhorHi3ha3MciDxTSzVU0ioV5
=VbNk
-----END PGP SIGNATURE-----
14 years, 5 months
[PATCH] allow ev nesting
by Simo Sorce
This is a temporary fix for #310 so that we can release v1.0
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 5 months
[PATCH] fix #311
by Simo Sorce
I forgot to set the callback's svc element and so the callabcks were not
being removed as be_svc_data_destroy() expects.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
14 years, 5 months
[PATCH] Fix segfault with RFC2307bis servers
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
We were constructing the member_users list for RFC2307bis without
null-terminating it. When we went to iterate through that list, we were
accessing illegal memory and crashing.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAksZd9AACgkQeiVVYja6o6MWAgCcCD//vvQwchHTibV9FkHjR0e9
fvcAnRFjXnbJH4jKqHQckYXdQEQQRpTa
=ODUu
-----END PGP SIGNATURE-----
14 years, 5 months
[PATCH] ipa_access offline support
by Sumit Bose
Hi,
I realized that although all attributes are saved the offline support
the for ipa_access module was not present. These two patches should fix it.
0001 adds a general search request for custom attributes
0002 adds sysdb calls to ipa_access if the provider is offline
bye,
Sumit
14 years, 5 months