ehlo,
You can see a leak in talloc report.
But it was ignored. So we didn't notice it for long time.
http://sssd-ci.duckdns.org/logs/job/29/90/rhel7/ci-build-debug/src/tests/...
The first patch fixes the leak and the last one is prevention
for such mistakes in future.
LS