{"push_id":1085963877,"size":107,"distinct_size":107,"ref":"refs/heads/url_in_hbac","head":"c0f28877ecd24f61fc3971468c019278ceb49e72","before":"abfda09e69becdebc4cb8521512b334b9b56be79","commits":[{"sha":"0e799bc491f636c69657d1678af13d23bf7b7c10","author":{"email":"ff239cad7a3e5aa2b398edf92aa8c4be6690609b@redhat.com","name":"Stephen Gallagher"},"message":"GPO: Add Cockpit to the Remote Interactive defaults\n\nThe Cockpit Project is an administrative console that is gaining in\npopularity and is a default component on some operating systems (such\nas Fedora Server). Since it is becoming more common, we should ensure\nthat it is part of the standard mapping.\n\nReviewed-by: Lukáš Slebodník <lslebodn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/0e799bc491f636c69657d1678af13d23bf7b7c10"},{"sha":"293cf52a00c9c67f0ad8f264027f81c020854f66","author":{"email":"ff239cad7a3e5aa2b398edf92aa8c4be6690609b@redhat.com","name":"Stephen Gallagher"},"message":"GPO: Add other display managers to interactive logon\n\nGone are the days when all systems used GDM or KDM. We need to support\nother display managers in the default configuration to avoid issues\nwhen enrolled in AD domains.\n\nReviewed-by: Lukáš Slebodník <lslebodn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/293cf52a00c9c67f0ad8f264027f81c020854f66"},{"sha":"73585f9af928913200999c5b3b983bb9266ee266","author":{"email":"c8ebd57a6866419c878c96a72702791f0ba50219@redhat.com","name":"Lukas Slebodnik"},"message":"CI: Use yum-deprecated instead of dnf\n\n/usr/bin/yum is provided by the dnf-yum package and call /usr/bin/dnf\non new fedora distributions. We should directly use old style yum\nwhich was renamed to /usr/bin/yum-deprecated and is still part of\nthe yum package.\n\nReviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/73585f9af928913200999c5b3b983bb9266ee266"},{"sha":"012d334cec221d8abf86dffbbaf9649ec0a4b585","author":{"email":"b2b2ddcbadde0c641bc642dd577c49dac875807a@redhat.com","name":"Pavel Reichl"},"message":"IDMAP: Add minor performance improvements\n\nSome ID ranges are precalculated when ID mapping is being initialized.\nThis patch utilizes these (helper) ranges when new domains are generated\nif appropriate.\n\nReviewed-by: Sumit Bose <sbose@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/012d334cec221d8abf86dffbbaf9649ec0a4b585"},{"sha":"659232f194f83ec7c450ce89c3fd41e4e74409f2","author":{"email":"4216f6a46a88696a590371bf3b2ebb9473dd44c5@redhat.com","name":"Pavel Březina"},"message":"remove user certificate if not found on the server\n\nIf the user is not found by cert lookup when the user is already\ncached, two things may happen:\n1) cert was removed from the user object\n2) user was removed\n\nInstead of issuing another cert lookup we will just remove cert\nattribute from the cache not touching the expiration timestamp so\nthe user may be updated later when needed.\n\nResolves:\nhttps://fedorahosted.org/sssd/ticket/2934\n\nReviewed-by: Sumit Bose <sbose@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/659232f194f83ec7c450ce89c3fd41e4e74409f2"},{"sha":"5ff7a765434ed0b4d37564ade26d7761d06f81c3","author":{"email":"f9c05a2f9f4196839b90818c736b00f1c9634471@redhat.com","name":"Sumit Bose"},"message":"sdap: improve filtering of multiple results in GC lookups\n\nThe Global Catalog of AD contains some information about all users and\ngroups in an AD forest. Users from different domain in the forest can\nhave the same name. The most obvious example is the Administrator user\nwhich is present in all domains. Although SSSD uses a domain specific\nsearch base for looking up users in the GC the search might still return\nmultiple results if there is a user with the same name in one of the\nchild (or grand-child ...) domains because of the hierarchic nature of\nthe LDAP tree. Limiting the search depth would not help because users\ncan be created in deeply nested OUs.\n\nCurrently SSSD expects in this case that the user object is store in\nCN=Users or below. This works for all default users like Administrator\nbut in general users can be created anywhere in the directory tree. If a\nuser is created outside of CN=Users and there is a user with the same\nname in a child domain the initgroups command to look up the\ngroup-memberships of the user fails because it is not clear which of the\ntwo results should be used (initgroups for the child domain user works\nfine).\n\nThis patch adds an additional scheme to select the right result based on\nthe domain component attribute name 'dc'. This attribute indicates an\nadditional component in the domain name and hence a child domain. So as\nlong as the result contains a dc component following out search base it\ncannot be the object we are looking for. This scheme includes the old\nCN=Users based one but since it is more expensive I kept the old scheme\nwhich so far worked all the time and only use the new one if the old one\nfails.\n\nResolves https://fedorahosted.org/sssd/ticket/2961\n\nReviewed-by: Jakub Hrozek <jhrozek@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/5ff7a765434ed0b4d37564ade26d7761d06f81c3"},{"sha":"bda0a8ee67c4222ede597fd57456b74e33116653","author":{"email":"b2b2ddcbadde0c641bc642dd577c49dac875807a@redhat.com","name":"Pavel Reichl"},"message":"IDMAP: Make parameter names more descriptive\n\nDomain SID (not name) is part of identification string for helper range\nin generate_sec_slice_name().\n\nUse more generic name for range identifier when calculating range for\nnew slice in sss_idmap_calculate_range().\n\nReviewed-by: Sumit Bose <sbose@redhat.com>\nReviewed-by: Pavel Březina <pbrezina@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/bda0a8ee67c4222ede597fd57456b74e33116653"},{"sha":"37b467244f48869ef3690c908033da8ba37635c0","author":{"email":"1d29819f3dc2f357f8859ebb61f57619f33263ae@redhat.com","name":"Jakub Hrozek"},"message":"NSS: Move a DEBUG message so that it's less confusing\n\nReviewed-by: Pavel Březina <pbrezina@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/37b467244f48869ef3690c908033da8ba37635c0"},{"sha":"ea95e37aa4be529a13f43224ffafe7797df73dda","author":{"email":"1d29819f3dc2f357f8859ebb61f57619f33263ae@redhat.com","name":"Jakub Hrozek"},"message":"MAN: Move subdomain_inherit to the correct man section\n\nThe option was in the general section, belongs to the domain section.\n\nReviewed-by: Pavel Březina <pbrezina@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/ea95e37aa4be529a13f43224ffafe7797df73dda"},{"sha":"9df3b9dd412bc4392f13a601decc45380b6ba69b","author":{"email":"1d29819f3dc2f357f8859ebb61f57619f33263ae@redhat.com","name":"Jakub Hrozek"},"message":"MAN: Move proxy_fast_alias to the correct man section\n\nThe option was in the general section, belongs to the proxy section.\n\nReviewed-by: Pavel Březina <pbrezina@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/9df3b9dd412bc4392f13a601decc45380b6ba69b"},{"sha":"2d84b65383f2d13d6f94ac561ad92907b59062f3","author":{"email":"1d29819f3dc2f357f8859ebb61f57619f33263ae@redhat.com","name":"Jakub Hrozek"},"message":"memberof: Don't allocate on a NULL context\n\nhttps://fedorahosted.org/sssd/ticket/2959\n\nIn case no previous delete operation occured, the del_ctx->muops pointer we\nallocate the diff structure was would be NULL, effectivelly leaking the\ndiff array during the memberof processing.\n\nAllocating on del_ctx is safer as that pointer is always allocated and\nprevents the leak.\n\nReviewed-by: Pavel Březina <pbrezina@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/2d84b65383f2d13d6f94ac561ad92907b59062f3"},{"sha":"991c9f47fcb24704b880f60ab8ee77cfda056e2c","author":{"email":"4216f6a46a88696a590371bf3b2ebb9473dd44c5@redhat.com","name":"Pavel Březina"},"message":"IPA SUDO: download externalUser attribute\n\nThis allows configuration with id_provider = proxy\nand sudo_provider = ipa when someone needs to fetch\nrules for local users.\n\nhttps://fedorahosted.org/sssd/ticket/2972\n\nReviewed-by: Jakub Hrozek <jhrozek@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/991c9f47fcb24704b880f60ab8ee77cfda056e2c"},{"sha":"5dbf360f2d6b0281c32f1bba6ebf5cc834c1716e","author":{"email":"65f99581a93cf30dafc32b5c178edc6b0294a07f@redhat.com","name":"Simo Sorce"},"message":"Util: Move socket setup in a common utility file\n\nOther components may need to connect sockets, the code here is generic enough\nthat with minimal modifications can be used for non-ldap connections too.\n\nSo create a sss_sockets.c/h utility file with all the non-ldap specific socket\nsetup functions and make them available for other uses.\n\nResolves:\nhttps://fedorahosted.org/sssd/ticket/2968\n\nReviewed-by: Jakub Hrozek <jhrozek@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/5dbf360f2d6b0281c32f1bba6ebf5cc834c1716e"},{"sha":"75e66c388862a4ba05afe0791c5503226395bad0","author":{"email":"65f99581a93cf30dafc32b5c178edc6b0294a07f@redhat.com","name":"Simo Sorce"},"message":"Util: Set socket options and flags separately\n\nReorganize functions to set options and flags, all flags can be set at once,\nand there is no need to keep old falgs around as nothing ever used that for\nanything useful.\n\nRelated:\nhttps://fedorahosted.org/sssd/ticket/2968\n\nReviewed-by: Jakub Hrozek <jhrozek@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/75e66c388862a4ba05afe0791c5503226395bad0"},{"sha":"e05d3f5872263aadfbc2f6a2a8c9735219922387","author":{"email":"65f99581a93cf30dafc32b5c178edc6b0294a07f@redhat.com","name":"Simo Sorce"},"message":"Util Sockets: Tidy up connect() handling\n\nThe connect() man page says waiting on a non-blocking connect should be done\nby checking for writability, so drop checking for readability. Also check\nfor EALREADY as an acceptable error to retry on.\n\nRelated:\nhttps://fedorahosted.org/sssd/ticket/2968\n\nReviewed-by: Jakub Hrozek <jhrozek@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/e05d3f5872263aadfbc2f6a2a8c9735219922387"},{"sha":"62bda5f75bda6b77aea30d708c74efaf725d9367","author":{"email":"c8ebd57a6866419c878c96a72702791f0ba50219@redhat.com","name":"Lukas Slebodnik"},"message":"BUILD: Remove unused include directories\n\nWe do not have the \"include\" directory in git\nand such directory is not generated by autotools in\nbuild directory either.\n\nReviewed-by: Pavel Březina <pbrezina@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/62bda5f75bda6b77aea30d708c74efaf725d9367"},{"sha":"edcd5d552d6174a5a0cf2f3532e240ae3a8b5605","author":{"email":"c8ebd57a6866419c878c96a72702791f0ba50219@redhat.com","name":"Lukas Slebodnik"},"message":"BUILD: Simplify build of cwrap tests\n\nIt will compilation of 40 files.\n\nReviewed-by: Pavel Březina <pbrezina@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/edcd5d552d6174a5a0cf2f3532e240ae3a8b5605"},{"sha":"fee2997ff25938bca8dd8e3df1d6a5a44b5b7698","author":{"email":"c8ebd57a6866419c878c96a72702791f0ba50219@redhat.com","name":"Lukas Slebodnik"},"message":"UTIL: Fix indentation in dlinklist.h\n\nReviewed-by: Pavel Březina <pbrezina@redhat.com>\nReviewed-by: Michal Židek <mzidek@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/fee2997ff25938bca8dd8e3df1d6a5a44b5b7698"},{"sha":"c6278b2fa4a7ea389ed4086b2def16e0e6cbb184","author":{"email":"c8ebd57a6866419c878c96a72702791f0ba50219@redhat.com","name":"Lukas Slebodnik"},"message":"UTIL: Fix warning misleading-indentation\n\nWarnings are emited from macro generated code in dlinklist.h\ne.g.\nsrc/ldb_modules/memberof.c:4209:13: error: statement is indented as if it were\n    guarded by... [-Werror=misleading-indentation]\n             DLIST_DEMOTE(ctx->group_list, grp, struct mbof_member *);\n             ^~~~~~~~~~~~\nsrc/ldb_modules/memberof.c:4209:13: note: ...this ‘if’ clause, but it is not\nsrc/ldb_modules/memberof.c: In function ‘mbof_member_update’:\nsrc/ldb_modules/memberof.c:4305:9: error: statement is indented as if it were\n    guarded by... [-Werror=misleading-indentation]\n         DLIST_PROMOTE(ctx->group_list, mem);\n         ^~~~~~~~~~~~~\nsrc/ldb_modules/memberof.c:4305:9: note: ...this ‘if’ clause, but it is not\nsrc/ldb_modules/memberof.c: In function ‘mbof_rcmp_update’:\nsrc/ldb_modules/memberof.c:4408:9: error: statement is indented as if it were\n    guarded by... [-Werror=misleading-indentation]\n         DLIST_REMOVE(ctx->user_list, x);\n         ^~~~~~~~~~~~\nsrc/util/crypto/nss/nss_obfuscate.c: In function ‘sss_password_decrypt’:\nsrc/util/crypto/nss/nss_obfuscate.c:419:5: error: statement is indented\n    as if it were guarded by... [-Werror=misleading-indentation]\n     SAFEALIGN_COPY_UINT16_CHECK(&meth, obfbuf+p, obflen, &p);\n     ^~~~~~~~~~~~~~~~~~~~~~~~~~~\nsrc/python/pyhbac.c: In function ‘PyInit_pyhbac’:\nsrc/python/pyhbac.c:1987:5: error: statement is indented as if it were\n    guarded by... [-Werror=misleading-indentation]\n     TYPE_READY(m, pyhbac_hbacrule_type, \"HbacRule\");\n     ^~~~~~~~~~\nsrc/python/pyhbac.c:1987:5: note: ...this ‘if’ clause, but it is not\n\nReviewed-by: Pavel Březina <pbrezina@redhat.com>\nReviewed-by: Michal Židek <mzidek@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/c6278b2fa4a7ea389ed4086b2def16e0e6cbb184"},{"sha":"c6bda70d6131b5e8cd760ad690fae001d1765547","author":{"email":"1d29819f3dc2f357f8859ebb61f57619f33263ae@redhat.com","name":"Jakub Hrozek"},"message":"tests: Add a unit test for the external groups resolution\n\nAdds a test that tests a complex nested group hierarchy. Also defines\nthe talloc chunk for group members to 1 to make sure the realloc branch\nis always tested.\n\nUnit test for: https://fedorahosted.org/sssd/ticket/2522\nReviewed-by: Pavel Březina <pbrezina@redhat.com>","distinct":true,"url":"https://api.github.com/repos/lhellebr/sssd/commits/c6bda70d6131b5e8cd760ad690fae001d1765547"}]}