From harald.dunkel at aixigo.de Fri Dec 1 08:07:52 2017 From: harald.dunkel at aixigo.de (Harald Dunkel) Date: Fri, 1 Dec 2017 09:07:52 +0100 Subject: [Pkg-sssd-devel] Bug#858968: installing sssd leaves systemd in degraded state References: <3285bc20-7c84-6875-723b-72fe1c7d6a11@aixigo.de> Message-ID: <20171201090752.3aa24d89@dpcl082.ac.aixigo.de> Since stretch is released I wonder if you have some time to look into this? Regards Harri From owner at bugs.debian.org Wed Dec 20 09:15:17 2017 From: owner at bugs.debian.org (Debian Bug Tracking System) Date: Wed, 20 Dec 2017 09:15:17 +0000 Subject: [Pkg-sssd-devel] Bug#728224: marked as done (sssd: [INTL:de] Initial German po4a translation) References: <5d3bf3a6-c9a3-8a5d-0f1e-aba303a62aeb@debian.org> <526FF6E1.4050107@vollbio.de> Message-ID: Your message dated Wed, 20 Dec 2017 11:10:48 +0200 with message-id <5d3bf3a6-c9a3-8a5d-0f1e-aba303a62aeb at debian.org> and subject line Re: [Pkg-sssd-devel] Bug#728224: sssd: [INTL:de] Initial German po4a translation has caused the Debian Bug report #728224, regarding sssd: [INTL:de] Initial German po4a translation to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner at bugs.debian.org immediately.) -- 728224: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=728224 Debian Bug Tracking System Contact owner at bugs.debian.org with problems -------------- next part -------------- An embedded message was scrubbed... From: Chris Leick Subject: sssd: [INTL:de] Initial German po4a translation Date: Tue, 29 Oct 2013 18:56:49 +0100 Size: 136298 URL: -------------- next part -------------- An embedded message was scrubbed... From: Timo Aaltonen Subject: Re: [Pkg-sssd-devel] Bug#728224: sssd: [INTL:de] Initial German po4a translation Date: Wed, 20 Dec 2017 11:10:48 +0200 Size: 2317 URL: From tjaalton at moszumanska.debian.org Wed Dec 20 10:02:54 2017 From: tjaalton at moszumanska.debian.org (Timo Aaltonen) Date: Wed, 20 Dec 2017 10:02:54 +0000 Subject: [Pkg-sssd-devel] sssd: Changes to 'master' Message-ID: Makefile.am | 129 configure.ac | 1 contrib/ci/README.md | 2 contrib/ci/distro.sh | 7 contrib/sssd.spec.in | 16 contrib/systemtap/dp_request.stp | 85 debian/changelog | 9 debian/control | 18 debian/patches/series | 2 debian/patches/sysdb-sanitize-search-filter-input.diff | 133 debian/sssd-common.install | 1 po/POTFILES.in | 1 po/bg.po | 737 +- po/ca.po | 854 +- po/cs.po | 2738 +++++++ po/de.po | 822 +- po/es.po | 797 +- po/eu.po | 723 + po/fr.po | 846 +- po/hu.po | 743 +- po/id.po | 740 +- po/it.po | 762 +- po/ja.po | 812 +- po/nb.po | 714 + po/nl.po | 818 +- po/pl.po | 1139 +-- po/pt.po | 766 +- po/pt_BR.po | 704 - po/ru.po | 772 +- po/sssd.pot | 704 - po/sv.po | 818 +- po/tg.po | 712 + po/tr.po | 704 - po/uk.po | 1133 +-- po/zh_CN.po | 710 + po/zh_TW.po | 735 +- src/conf_macros.m4 | 20 src/confdb/confdb.c | 19 src/confdb/confdb.h | 11 src/config/SSSDConfig/__init__.py.in | 15 src/config/SSSDConfig/ipachangeconf.py | 2 src/config/SSSDConfig/sssd_upgrade_config.py | 1 src/config/SSSDConfigTest.py | 15 src/config/cfg_rules.ini | 30 src/config/etc/sssd.api.conf | 11 src/config/etc/sssd.api.d/sssd-ipa.conf | 3 src/config/etc/sssd.api.d/sssd-ldap.conf | 1 src/db/sysdb.h | 32 src/db/sysdb_init.c | 7 src/db/sysdb_ops.c | 109 src/db/sysdb_private.h | 9 src/db/sysdb_sudo.c | 89 src/db/sysdb_sudo.h | 6 src/db/sysdb_upgrade.c | 77 src/external/pac_responder.m4 | 3 src/krb5_plugin/sssd_krb5_localauth_plugin.c | 2 src/lib/certmap/sss_cert_content_common.c | 199 src/lib/certmap/sss_cert_content_crypto.c | 778 ++ src/lib/certmap/sss_cert_content_nss.c | 109 src/lib/certmap/sss_certmap.c | 93 src/lib/certmap/sss_certmap_attr_names.c | 83 src/lib/certmap/sss_certmap_int.h | 25 src/lib/certmap/sss_certmap_krb5_match.c | 21 src/lib/idmap/sss_idmap.c | 12 src/lib/sifp/sss_sifp_parser.c | 4 src/man/Makefile.am | 11 src/man/idmap_sss.8.xml | 2 src/man/include/failover.xml | 56 src/man/include/ipa_modified_defaults.xml | 5 src/man/include/seealso.xml | 10 src/man/po/br.po | 3271 +++++--- src/man/po/ca.po | 4342 ++++++----- src/man/po/cs.po | 3185 +++++--- src/man/po/de.po | 4723 ++++++------ src/man/po/es.po | 4277 ++++++----- src/man/po/eu.po | 3163 +++++--- src/man/po/fi.po | 3248 +++++--- src/man/po/fr.po | 4734 ++++++------ src/man/po/ja.po | 4356 ++++++----- src/man/po/lv.po | 3273 +++++--- src/man/po/nl.po | 3324 +++++---- src/man/po/po4a.cfg | 2 src/man/po/pt.po | 3542 +++++---- src/man/po/pt_BR.po | 3167 +++++--- src/man/po/ru.po | 3205 +++++--- src/man/po/sssd-docs.pot | 3072 +++++--- src/man/po/tg.po | 3199 +++++--- src/man/po/uk.po | 6244 ++++++++++------- src/man/po/zh_CN.po | 3205 +++++--- src/man/sss-certmap.5.xml | 24 src/man/sss_debuglevel.8.xml | 36 src/man/sssd-ad.5.xml | 6 src/man/sssd-ifp.5.xml | 2 src/man/sssd-ipa.5.xml | 44 src/man/sssd-kcm.8.xml | 2 src/man/sssd-ldap.5.xml | 44 src/man/sssd-secrets.5.xml | 89 src/man/sssd-session-recording.5.xml | 162 src/man/sssd-systemtap.5.xml | 386 + src/man/sssd.conf.5.xml | 211 src/providers/ad/ad_gpo.c | 7 src/providers/ad/ad_machine_pw_renewal.c | 2 src/providers/ad/ad_opts.c | 1 src/providers/ad/ad_subdomains.c | 2 src/providers/backend.h | 8 src/providers/data_provider/dp.h | 2 src/providers/data_provider/dp_request.c | 5 src/providers/data_provider/dp_target_auth.c | 8 src/providers/data_provider/dp_target_id.c | 265 src/providers/data_provider/dp_targets.c | 2 src/providers/data_provider_be.c | 56 src/providers/ipa/ipa_access.c | 272 src/providers/ipa/ipa_access.h | 6 src/providers/ipa/ipa_auth.c | 12 src/providers/ipa/ipa_common.c | 69 src/providers/ipa/ipa_common.h | 10 src/providers/ipa/ipa_deskprofile_config.c | 156 src/providers/ipa/ipa_deskprofile_config.h | 45 src/providers/ipa/ipa_deskprofile_private.h | 50 src/providers/ipa/ipa_deskprofile_rules.c | 367 src/providers/ipa/ipa_deskprofile_rules.h | 43 src/providers/ipa/ipa_deskprofile_rules_util.c | 932 ++ src/providers/ipa/ipa_deskprofile_rules_util.h | 57 src/providers/ipa/ipa_hbac_common.c | 171 src/providers/ipa/ipa_hbac_hosts.c | 110 src/providers/ipa/ipa_hbac_private.h | 26 src/providers/ipa/ipa_hbac_rules.c | 70 src/providers/ipa/ipa_hbac_rules.h | 4 src/providers/ipa/ipa_hbac_services.c | 1 src/providers/ipa/ipa_hbac_users.c | 29 src/providers/ipa/ipa_init.c | 74 src/providers/ipa/ipa_opts.c | 4 src/providers/ipa/ipa_rules_common.c | 455 + src/providers/ipa/ipa_rules_common.h | 89 src/providers/ipa/ipa_selinux.c | 34 src/providers/ipa/ipa_session.c | 864 ++ src/providers/ipa/ipa_session.h | 54 src/providers/ipa/ipa_subdomains.c | 74 src/providers/ipa/ipa_subdomains_ext_groups.c | 12 src/providers/ipa/ipa_subdomains_server.c | 4 src/providers/ipa/ipa_sudo.c | 8 src/providers/ipa/ipa_sudo.h | 13 src/providers/ipa/ipa_sudo_async.c | 9 src/providers/ipa/ipa_sudo_conversion.c | 39 src/providers/ipa/ipa_views.c | 18 src/providers/ipa/selinux_child.c | 12 src/providers/ldap/ldap_child.c | 18 src/providers/ldap/ldap_common.h | 5 src/providers/ldap/ldap_id.c | 5 src/providers/ldap/ldap_init.c | 2 src/providers/ldap/ldap_opts.c | 9 src/providers/ldap/sdap.h | 5 src/providers/ldap/sdap_access.c | 88 src/providers/ldap/sdap_access.h | 2 src/providers/ldap/sdap_async_groups.c | 23 src/providers/ldap/sdap_async_nested_groups.c | 61 src/providers/ldap/sdap_certmap.c | 152 src/providers/ldap/sdap_id_op.c | 12 src/providers/ldap/sdap_idmap.c | 2 src/python/pysss_murmur.c | 2 src/python/pysss_nss_idmap.c | 40 src/resolv/async_resolv.c | 7 src/responder/common/cache_req/cache_req.c | 66 src/responder/common/cache_req/cache_req_data.c | 10 src/responder/common/cache_req/cache_req_private.h | 10 src/responder/common/cache_req/cache_req_result.c | 8 src/responder/common/cache_req/cache_req_sr_overlay.c | 328 src/responder/common/iface/responder_iface.c | 2 src/responder/common/negcache.c | 118 src/responder/common/responder.h | 16 src/responder/common/responder_common.c | 109 src/responder/common/responder_utils.c | 83 src/responder/ifp/ifp_components.c | 3 src/responder/ifp/ifp_groups.c | 47 src/responder/ifp/ifp_iface.xml | 4 src/responder/ifp/ifp_iface_generated.c | 25 src/responder/ifp/ifp_iface_generated.h | 5 src/responder/ifp/ifp_private.h | 9 src/responder/ifp/ifp_users.c | 21 src/responder/ifp/ifpsrv_cmd.c | 35 src/responder/ifp/ifpsrv_util.c | 31 src/responder/kcm/kcmsrv_ccache.c | 35 src/responder/kcm/kcmsrv_ccache_mem.c | 26 src/responder/nss/nss_cmd.c | 22 src/responder/nss/nss_get_object.c | 6 src/responder/nss/nss_iface.c | 2 src/responder/nss/nss_private.h | 6 src/responder/nss/nss_protocol_netgr.c | 12 src/responder/nss/nss_protocol_pwent.c | 117 src/responder/nss/nsssrv.c | 99 src/responder/pam/pamsrv_cmd.c | 98 src/responder/secrets/local.c | 192 src/responder/secrets/proxy.c | 2 src/responder/secrets/secsrv.c | 193 src/responder/secrets/secsrv.h | 19 src/responder/secrets/secsrv_cmd.c | 6 src/responder/secrets/secsrv_private.h | 2 src/responder/sudo/sudosrv.c | 11 src/responder/sudo/sudosrv_get_sudorules.c | 68 src/responder/sudo/sudosrv_private.h | 3 src/sbus/sbus_codegen | 4 src/shared/io.h | 33 src/shared/murmurhash3.h | 21 src/shared/safealign.h | 146 src/sss_client/common.c | 136 src/sss_client/libwbclient/wbc_pam_sssd.c | 2 src/sss_client/libwbclient/wbclient.exports | 3 src/sss_client/libwbclient/wbclient_sssd.h | 9 src/sss_client/nss_mc_common.c | 2 src/sss_client/nss_mc_group.c | 2 src/sss_client/nss_mc_initgr.c | 2 src/sss_client/sss_cli.h | 15 src/sss_client/sss_pac_responder_client.c | 137 src/sss_client/sssd_pac.c | 4 src/systemtap/sssd.stp.in | 18 src/systemtap/sssd_functions.stp | 68 src/systemtap/sssd_probes.d | 5 src/tests/cmocka/test_certmap.c | 120 src/tests/cmocka/test_inotify.c | 2 src/tests/cmocka/test_io.c | 2 src/tests/cmocka/test_negcache.c | 30 src/tests/cmocka/test_sdap_access.c | 192 src/tests/cmocka/test_sdap_access.h | 36 src/tests/cmocka/test_sdap_certmap.c | 244 src/tests/cmocka/test_sss_idmap.c | 32 src/tests/cmocka/test_sssd_krb5_localauth_plugin.c | 197 src/tests/cmocka/test_sysdb_sudo.c | 170 src/tests/cmocka/test_utils.c | 12 src/tests/cwrap/Makefile.am | 3 src/tests/files-tests.c | 50 src/tests/intg/Makefile.am | 12 src/tests/intg/__init__.py | 13 src/tests/intg/config.py.m4 | 33 src/tests/intg/data/ad_data.ldif | 815 ++ src/tests/intg/data/ad_schema.ldif | 42 src/tests/intg/ds.py | 2 src/tests/intg/ds_openldap.py | 128 src/tests/intg/sssd_group.py | 43 src/tests/intg/sssd_passwd.py | 43 src/tests/intg/test_enumeration.py | 10 src/tests/intg/test_files_provider.py | 97 src/tests/intg/test_kcm.py | 54 src/tests/intg/test_ldap.py | 21 src/tests/intg/test_pac_responder.py | 120 src/tests/intg/test_pysss_nss_idmap.py | 269 src/tests/intg/test_secrets.py | 244 src/tests/intg/test_session_recording.py | 961 ++ src/tests/krb5_child-test.c | 10 src/tests/sbus_codegen_tests.c | 12 src/tests/sysdb-tests.c | 81 src/tests/util-tests.c | 2 src/tools/common/sss_tools.c | 15 src/tools/common/sss_tools.h | 7 src/tools/files.c | 809 -- src/tools/selinux.c | 83 src/tools/sss_debuglevel.c | 323 src/tools/sssctl/sssctl.c | 2 src/tools/sssctl/sssctl.h | 8 src/tools/sssctl/sssctl_cache.c | 52 src/tools/sssctl/sssctl_data.c | 47 src/tools/sssctl/sssctl_logs.c | 267 src/tools/sssctl/sssctl_user_checks.c | 2 src/tools/tools_util.c | 12 src/tools/tools_util.h | 17 src/tools/wrappers/sss_debuglevel.in | 4 src/util/domain_info_utils.c | 54 src/util/files.c | 886 ++ src/util/io.c | 2 src/util/io.h | 33 src/util/mmap_cache.h | 2 src/util/murmurhash3.c | 2 src/util/murmurhash3.h | 20 src/util/selinux.c | 83 src/util/session_recording.c | 113 src/util/session_recording.h | 76 src/util/sss_semanage.c | 73 src/util/util.h | 33 src/util/util_safealign.h | 147 version.m4 | 2 279 files changed, 66819 insertions(+), 39712 deletions(-) New commits: commit 4255a261504dfff2c00f2ff3e7cdf1d4732fa573 Author: Timo Aaltonen Date: Wed Dec 20 12:02:06 2017 +0200 releasing package sssd version 1.16.0-1 diff --git a/debian/changelog b/debian/changelog index dfec486..4671da4 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,11 +1,11 @@ -sssd (1.16.0-1) UNRELEASED; urgency=medium +sssd (1.16.0-1) unstable; urgency=medium * New upstream release. * sysdb-sanitize-search-filter-input.diff: Dropped, upstream. * sssd-common.install: Add sssd-session-recording.5. * control: Depend on python3 pkgs by default. (Closes: #883178) - -- Timo Aaltonen Tue, 21 Nov 2017 12:39:11 +0200 + -- Timo Aaltonen Wed, 20 Dec 2017 11:58:50 +0200 sssd (1.15.3-3) unstable; urgency=medium commit 997ea58559a438dc2a87a34e9a08bf84f0dbc743 Author: Timo Aaltonen Date: Wed Dec 20 11:09:04 2017 +0200 control: Depend on python3 pkgs by default. (Closes: #883178) diff --git a/debian/changelog b/debian/changelog index 614d09a..dfec486 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,6 +3,7 @@ sssd (1.16.0-1) UNRELEASED; urgency=medium * New upstream release. * sysdb-sanitize-search-filter-input.diff: Dropped, upstream. * sssd-common.install: Add sssd-session-recording.5. + * control: Depend on python3 pkgs by default. (Closes: #883178) -- Timo Aaltonen Tue, 21 Nov 2017 12:39:11 +0200 diff --git a/debian/control b/debian/control index b0185f8..ca3e04e 100644 --- a/debian/control +++ b/debian/control @@ -76,7 +76,7 @@ Architecture: any Multi-Arch: foreign Pre-Depends: ${misc:Pre-Depends} Depends: - python-sss (= ${binary:Version}), + python3-sss (= ${binary:Version}), sssd-ad (= ${binary:Version}), sssd-common (= ${binary:Version}), sssd-ipa (= ${binary:Version}), @@ -96,10 +96,20 @@ Description: System Security Services Daemon -- metapackage Package: sssd-common Architecture: any -Depends: python, python-sss, ${misc:Depends}, ${shlibs:Depends}, +Depends: + python3, + python3-sss, + ${misc:Depends}, + ${shlibs:Depends}, adduser, -Recommends: bind9-host, libnss-sss, libpam-sss, libsss-sudo -Suggests: apparmor, sssd-tools +Recommends: + bind9-host, + libnss-sss, + libpam-sss, + libsss-sudo +Suggests: + apparmor, + sssd-tools Breaks: sssd (<< 1.10.0~beta2-1), sssd-krb5-common (<< 1.13.1-1), Replaces: sssd (<< 1.10.0~beta2-1), commit 870ee05f7057a4edf58b820a95e6c1eee3bb3134 Author: Timo Aaltonen Date: Tue Nov 21 13:01:09 2017 +0200 sssd-common.install: Add sssd-session-recording.5. diff --git a/debian/changelog b/debian/changelog index d64feac..614d09a 100644 --- a/debian/changelog +++ b/debian/changelog @@ -2,6 +2,7 @@ sssd (1.16.0-1) UNRELEASED; urgency=medium * New upstream release. * sysdb-sanitize-search-filter-input.diff: Dropped, upstream. + * sssd-common.install: Add sssd-session-recording.5. -- Timo Aaltonen Tue, 21 Nov 2017 12:39:11 +0200 diff --git a/debian/sssd-common.install b/debian/sssd-common.install index 03488db..40f2874 100644 --- a/debian/sssd-common.install +++ b/debian/sssd-common.install @@ -49,6 +49,7 @@ usr/share/man/man1/sss_ssh_knownhostsproxy.1* usr/share/man/man5/sss_rpcidmapd.5* usr/share/man/man5/sssd-files.5* usr/share/man/man5/sssd-secrets.5* +usr/share/man/man5/sssd-session-recording.5* usr/share/man/man5/sssd-simple.5* usr/share/man/man5/sssd-sudo.5* usr/share/man/man5/sssd.conf.5* commit 63edaa9edb51a0d56cf863cbea4abd25cde7b837 Author: Timo Aaltonen Date: Tue Nov 21 12:50:12 2017 +0200 sysdb-sanitize-search-filter-input.diff: Dropped, upstream. diff --git a/debian/changelog b/debian/changelog index 648aa00..d64feac 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,6 +1,7 @@ sssd (1.16.0-1) UNRELEASED; urgency=medium * New upstream release. + * sysdb-sanitize-search-filter-input.diff: Dropped, upstream. -- Timo Aaltonen Tue, 21 Nov 2017 12:39:11 +0200 diff --git a/debian/patches/series b/debian/patches/series index 8763183..a82d1b4 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -1 +1 @@ -sysdb-sanitize-search-filter-input.diff +#placeholder diff --git a/debian/patches/sysdb-sanitize-search-filter-input.diff b/debian/patches/sysdb-sanitize-search-filter-input.diff deleted file mode 100644 index a9e994e..0000000 --- a/debian/patches/sysdb-sanitize-search-filter-input.diff +++ /dev/null @@ -1,133 +0,0 @@ -From d71be41ed6c44602781b7174a760d5a55a7c53ec Mon Sep 17 00:00:00 2001 -From: Sumit Bose -Date: Thu, 5 Oct 2017 11:07:38 +0200 -Subject: [PATCH] sysdb: sanitize search filter input - -This patch sanitizes the input for sysdb seaches by UPN/email, SID and -UUID. - -This security issue was assigned CVE-2017-12173 ---- - src/db/sysdb_ops.c | 43 +++++++++++++++++++++++++++++++++++-------- - src/tests/sysdb-tests.c | 7 +++++++ - 2 files changed, 42 insertions(+), 8 deletions(-) - -diff --git a/src/db/sysdb_ops.c b/src/db/sysdb_ops.c -index 4cfef68239a5f145967c942b1fb6647c5542f019..0e39a629a5823ff49ed02ec4c08a21b66119f06f 100644 ---- a/src/db/sysdb_ops.c -+++ b/src/db/sysdb_ops.c -@@ -601,6 +601,7 @@ int sysdb_search_user_by_upn_res(TALLOC_CTX *mem_ctx, - int ret; - const char *def_attrs[] = { SYSDB_NAME, SYSDB_UPN, SYSDB_CANONICAL_UPN, - SYSDB_USER_EMAIL, NULL }; -+ char *sanitized; - - tmp_ctx = talloc_new(NULL); - if (tmp_ctx == NULL) { -@@ -608,6 +609,12 @@ int sysdb_search_user_by_upn_res(TALLOC_CTX *mem_ctx, - goto done; - } - -+ ret = sss_filter_sanitize(tmp_ctx, upn, &sanitized); -+ if (ret != EOK) { -+ DEBUG(SSSDBG_OP_FAILURE, "sss_filter_sanitize failed.\n"); -+ goto done; -+ } -+ - if (domain_scope == true) { - base_dn = sysdb_user_base_dn(tmp_ctx, domain); - } else { -@@ -620,7 +627,7 @@ int sysdb_search_user_by_upn_res(TALLOC_CTX *mem_ctx, - - ret = ldb_search(domain->sysdb->ldb, tmp_ctx, &res, - base_dn, LDB_SCOPE_SUBTREE, attrs ? attrs : def_attrs, -- SYSDB_PWUPN_FILTER, upn, upn, upn); -+ SYSDB_PWUPN_FILTER, sanitized, sanitized, sanitized); - if (ret != EOK) { - ret = sysdb_error_to_errno(ret); - goto done; -@@ -4823,17 +4830,31 @@ static errno_t sysdb_search_object_by_str_attr(TALLOC_CTX *mem_ctx, - bool expect_only_one_result, - struct ldb_result **_res) - { -- char *filter; -+ char *filter = NULL; - errno_t ret; -+ char *sanitized = NULL; - -- filter = talloc_asprintf(NULL, filter_tmpl, str); -+ if (str == NULL) { -+ return EINVAL; -+ } -+ -+ ret = sss_filter_sanitize(NULL, str, &sanitized); -+ if (ret != EOK || sanitized == NULL) { -+ DEBUG(SSSDBG_OP_FAILURE, "sss_filter_sanitize failed.\n"); -+ goto done; -+ } -+ -+ filter = talloc_asprintf(NULL, filter_tmpl, sanitized); - if (filter == NULL) { -- return ENOMEM; -+ ret = ENOMEM; -+ goto done; - } - - ret = sysdb_search_object_attr(mem_ctx, domain, filter, attrs, - expect_only_one_result, _res); - -+done: -+ talloc_free(sanitized); - talloc_free(filter); - return ret; - } -@@ -4922,7 +4943,8 @@ errno_t sysdb_search_object_by_cert(TALLOC_CTX *mem_ctx, - struct ldb_result **res) - { - int ret; -- char *user_filter; -+ char *user_filter = NULL; -+ char *filter = NULL; - - ret = sss_cert_derb64_to_ldap_filter(mem_ctx, cert, SYSDB_USER_MAPPED_CERT, - NULL, NULL, &user_filter); -@@ -4931,10 +4953,15 @@ errno_t sysdb_search_object_by_cert(TALLOC_CTX *mem_ctx, - return ret; - } - -- ret = sysdb_search_object_by_str_attr(mem_ctx, domain, -- SYSDB_USER_CERT_FILTER, -- user_filter, attrs, false, res); -+ filter = talloc_asprintf(NULL, SYSDB_USER_CERT_FILTER, user_filter); - talloc_free(user_filter); -+ if (filter == NULL) { -+ return ENOMEM; -+ } -+ -+ ret = sysdb_search_object_attr(mem_ctx, domain, filter, attrs, false, res); -+ -+ talloc_free(filter); - - return ret; - } -diff --git a/src/tests/sysdb-tests.c b/src/tests/sysdb-tests.c -index 63572e067b11a7149b872b3a3eae38776e2bcf21..4652661087238c18f7fabb398d054db99f77d6cf 100644 ---- a/src/tests/sysdb-tests.c -+++ b/src/tests/sysdb-tests.c -@@ -6513,6 +6513,13 @@ START_TEST(test_upn_basic) - fail_unless(strcmp(str, UPN_PRINC) == 0, - "Expected [%s], got [%s].", UPN_PRINC, str); - -+ /* check if input is sanitized */ -+ ret = sysdb_search_user_by_upn(test_ctx, test_ctx->domain, false, -+ "abc at def.ghi)(name="UPN_USER_NAME")(abc=xyz", -+ NULL, &msg); -+ fail_unless(ret == ENOENT, -+ "sysdb_search_user_by_upn failed with un-sanitized input."); -+ - talloc_free(test_ctx); - } - END_TEST --- -2.9.3 - commit 1582ad14987071793f51a56b1528f4030b6c1834 Author: Timo Aaltonen Date: Tue Nov 21 12:41:55 2017 +0200 bump changelog diff --git a/debian/changelog b/debian/changelog index 0d2dce0..648aa00 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +sssd (1.16.0-1) UNRELEASED; urgency=medium + + * New upstream release. + + -- Timo Aaltonen Tue, 21 Nov 2017 12:39:11 +0200 + sssd (1.15.3-3) unstable; urgency=medium * Rebuild against new libldb. (Closes: #880013) commit 2de0072db40ce90c9d376af38245cd1e0c9fa6ea Author: Jakub Hrozek Date: Fri Oct 20 16:40:08 2017 +0200 Updating the version for the 1.16.0 release diff --git a/version.m4 b/version.m4 index 1a627c1..6a6bc41 100644 --- a/version.m4 +++ b/version.m4 @@ -1,5 +1,5 @@ # Primary version number -m4_define([VERSION_NUMBER], [1.15.4]) +m4_define([VERSION_NUMBER], [1.16.0]) # If the PRERELEASE_VERSION_NUMBER is set, we'll append # it to the release tag when creating an RPM or SRPM commit 9a839b29816c8906d4a6b074cf76df790cac9209 Author: Jakub Hrozek Date: Fri Oct 20 16:37:04 2017 +0200 Updating the translation for the 1.16.0 release diff --git a/po/bg.po b/po/bg.po index 8ec0021..6258aa2 100644 --- a/po/bg.po +++ b/po/bg.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: sssd-devel at lists.fedorahosted.org\n" -"POT-Creation-Date: 2017-07-25 11:53+0200\n" +"POT-Creation-Date: 2017-10-20 16:16+0200\n" "PO-Revision-Date: 2014-12-14 11:44-0500\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Bulgarian (http://www.transifex.com/projects/p/sssd/language/" @@ -38,9 +38,8 @@ msgid "Write debug messages to logfiles" msgstr "??????? debug ??????????? ? ??????????" #: src/config/SSSDConfig/__init__.py.in:48 -#, fuzzy msgid "Watchdog timeout before restarting service" -msgstr "Ping ????????? ????? ??????? ?? ????????" +msgstr "" #: src/config/SSSDConfig/__init__.py.in:49 msgid "Command to start service" @@ -79,12 +78,12 @@ msgid "Timeout for messages sent over the SBUS" msgstr "????????? ?? ?????????, ????????? ???? SBUS" #: src/config/SSSDConfig/__init__.py.in:60 -#: src/config/SSSDConfig/__init__.py.in:194 +#: src/config/SSSDConfig/__init__.py.in:197 msgid "Regex to parse username and domain" msgstr "Regex ?? ???????? ?? ????????????? ??? ? ??????" #: src/config/SSSDConfig/__init__.py.in:61 -#: src/config/SSSDConfig/__init__.py.in:193 +#: src/config/SSSDConfig/__init__.py.in:196 msgid "Printf-compatible format for displaying fully-qualified names" msgstr "Printf-????????? ?????? ?? ???????????? ?? ?????-????????????? ?????" @@ -103,9 +102,8 @@ msgid "The user to drop privileges to" msgstr "" #: src/config/SSSDConfig/__init__.py.in:65 -#, fuzzy msgid "Tune certificate verification" -msgstr "??????? TLS ???????? ?? ??????????" +msgstr "" #: src/config/SSSDConfig/__init__.py.in:66 msgid "All spaces in group or user names will be replaced with this character" @@ -132,7 +130,7 @@ msgid "Entry cache background update timeout length (seconds)" msgstr "" #: src/config/SSSDConfig/__init__.py.in:74 -#: src/config/SSSDConfig/__init__.py.in:112 +#: src/config/SSSDConfig/__init__.py.in:113 msgid "Negative cache timeout length (seconds)" msgstr "" @@ -217,7 +215,7 @@ msgid "What kind of messages are displayed to the user during authentication" msgstr "" #: src/config/SSSDConfig/__init__.py.in:95 -msgid "Filter PAM responses send the pam_sss" +msgid "Filter PAM responses sent to the pam_sss" msgstr "" #: src/config/SSSDConfig/__init__.py.in:96 @@ -249,7 +247,7 @@ msgid "Allow certificate based/Smartcard authentication." msgstr "" #: src/config/SSSDConfig/__init__.py.in:103 -msgid "Path to certificate databse with PKCS#11 modules." +msgid "Path to certificate database with PKCS#11 modules." msgstr "" #: src/config/SSSDConfig/__init__.py.in:104 @@ -268,1170 +266,1201 @@ msgstr "" msgid "If true, SSSD will switch back to lower-wins ordering logic" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:115 -msgid "Whether to hash host names and addresses in the known_hosts file" +#: src/config/SSSDConfig/__init__.py.in:110 +msgid "" +"Maximum number of rules that can be refreshed at once. If this is exceeded, " +"full refresh is performed." msgstr "" #: src/config/SSSDConfig/__init__.py.in:116 +msgid "Whether to hash host names and addresses in the known_hosts file" +msgstr "" + +#: src/config/SSSDConfig/__init__.py.in:117 msgid "" "How many seconds to keep a host in the known_hosts file after its host keys " "were requested" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:117 -#, fuzzy +#: src/config/SSSDConfig/__init__.py.in:118 msgid "Path to storage of trusted CA certificates" -msgstr "????, ???????? CA ???????????" +msgstr "" -#: src/config/SSSDConfig/__init__.py.in:120 +#: src/config/SSSDConfig/__init__.py.in:121 msgid "List of UIDs or user names allowed to access the PAC responder" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:121 +#: src/config/SSSDConfig/__init__.py.in:122 msgid "How long the PAC data is considered valid" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:124 +#: src/config/SSSDConfig/__init__.py.in:125 msgid "List of UIDs or user names allowed to access the InfoPipe responder" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:125 +#: src/config/SSSDConfig/__init__.py.in:126 msgid "List of user attributes the InfoPipe is allowed to publish" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:128 +#: src/config/SSSDConfig/__init__.py.in:129 msgid "The provider where the secrets will be stored in" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:129 +#: src/config/SSSDConfig/__init__.py.in:130 msgid "The maximum allowed number of nested containers" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:130 +#: src/config/SSSDConfig/__init__.py.in:131 msgid "The maximum number of secrets that can be stored" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:131 -msgid "The maximum payload size of a secret in kilobytes" +#: src/config/SSSDConfig/__init__.py.in:132 +msgid "The maximum number of secrets that can be stored per UID" msgstr "" #: src/config/SSSDConfig/__init__.py.in:133 +msgid "The maximum payload size of a secret in kilobytes" +msgstr "" + +#: src/config/SSSDConfig/__init__.py.in:135 msgid "The URL Custodia server is listening on" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:134 +#: src/config/SSSDConfig/__init__.py.in:136 msgid "The method to use when authenticating to a Custodia server" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:135 +#: src/config/SSSDConfig/__init__.py.in:137 msgid "" "The name of the headers that will be added into a HTTP request with the " "value defined in auth_header_value" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:136 +#: src/config/SSSDConfig/__init__.py.in:138 msgid "The value sssd-secrets would use for auth_header_name" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:137 +#: src/config/SSSDConfig/__init__.py.in:139 msgid "" "The list of the headers to forward to the Custodia server together with the " "request" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:138 +#: src/config/SSSDConfig/__init__.py.in:140 msgid "" "The username to use when authenticating to a Custodia server using basic_auth" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:139 +#: src/config/SSSDConfig/__init__.py.in:141 msgid "" "The password to use when authenticating to a Custodia server using basic_auth" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:140 +#: src/config/SSSDConfig/__init__.py.in:142 msgid "If true peer's certificate is verified if proxy_url uses https protocol" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:141 +#: src/config/SSSDConfig/__init__.py.in:143 msgid "" -"If false peer's certificate may contain different hostname then proxy_url " +"If false peer's certificate may contain different hostname than proxy_url " "when https protocol is used" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:142 +#: src/config/SSSDConfig/__init__.py.in:144 msgid "Path to directory where certificate authority certificates are stored" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:143 -#, fuzzy +#: src/config/SSSDConfig/__init__.py.in:145 msgid "Path to file containing server's CA certificate" -msgstr "????, ???????? CA ???????????" +msgstr "" -#: src/config/SSSDConfig/__init__.py.in:144 -#, fuzzy +#: src/config/SSSDConfig/__init__.py.in:146 msgid "Path to file containing client's certificate" -msgstr "????, ???????? CA ???????????" +msgstr "" -#: src/config/SSSDConfig/__init__.py.in:145 +#: src/config/SSSDConfig/__init__.py.in:147 msgid "Path to file containing client's private key" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:148 +#: src/config/SSSDConfig/__init__.py.in:150 msgid "Identity provider" msgstr "????????? ?? ???????????" -#: src/config/SSSDConfig/__init__.py.in:149 +#: src/config/SSSDConfig/__init__.py.in:151 msgid "Authentication provider" msgstr "????????? ?? ??????????????" -#: src/config/SSSDConfig/__init__.py.in:150 +#: src/config/SSSDConfig/__init__.py.in:152 msgid "Access control provider" msgstr "????????? ?? ??????? ?? ??????" -#: src/config/SSSDConfig/__init__.py.in:151 +#: src/config/SSSDConfig/__init__.py.in:153 msgid "Password change provider" msgstr "????????? ?? ????? ?? ??????" -#: src/config/SSSDConfig/__init__.py.in:152 +#: src/config/SSSDConfig/__init__.py.in:154 msgid "SUDO provider" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:153 +#: src/config/SSSDConfig/__init__.py.in:155 msgid "Autofs provider" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:154 +#: src/config/SSSDConfig/__init__.py.in:156 msgid "Host identity provider" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:155 -#, fuzzy +#: src/config/SSSDConfig/__init__.py.in:157 msgid "SELinux provider" -msgstr "????????? ?? ???????????" +msgstr "" #: src/config/SSSDConfig/__init__.py.in:158 +#, fuzzy +msgid "Session management provider" +msgstr "????????? ?? ????? ?? ??????" + +#: src/config/SSSDConfig/__init__.py.in:161 msgid "Whether the domain is usable by the OS or by applications" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:159 +#: src/config/SSSDConfig/__init__.py.in:162 msgid "Minimum user ID" msgstr "????????? ID ?? ??????????" -#: src/config/SSSDConfig/__init__.py.in:160 +#: src/config/SSSDConfig/__init__.py.in:163 msgid "Maximum user ID" msgstr "?????????? ID ?? ??????????" -#: src/config/SSSDConfig/__init__.py.in:161 +#: src/config/SSSDConfig/__init__.py.in:164 msgid "Enable enumerating all users/groups" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:162 +#: src/config/SSSDConfig/__init__.py.in:165 msgid "Cache credentials for offline login" msgstr "??????? ???????????????? ????? ?? ?????? ???????" -#: src/config/SSSDConfig/__init__.py.in:163 +#: src/config/SSSDConfig/__init__.py.in:166 msgid "Store password hashes" msgstr "?????????? ?????? ?? ??????" -#: src/config/SSSDConfig/__init__.py.in:164 +#: src/config/SSSDConfig/__init__.py.in:167 msgid "Display users/groups in fully-qualified form" msgstr "???????? ???????????/????? ? ????? -???????????? ?????" -#: src/config/SSSDConfig/__init__.py.in:165 +#: src/config/SSSDConfig/__init__.py.in:168 msgid "Don't include group members in group lookups" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:166 -#: src/config/SSSDConfig/__init__.py.in:173 -#: src/config/SSSDConfig/__init__.py.in:174 -#: src/config/SSSDConfig/__init__.py.in:175 +#: src/config/SSSDConfig/__init__.py.in:169 #: src/config/SSSDConfig/__init__.py.in:176 #: src/config/SSSDConfig/__init__.py.in:177 #: src/config/SSSDConfig/__init__.py.in:178 +#: src/config/SSSDConfig/__init__.py.in:179 +#: src/config/SSSDConfig/__init__.py.in:180 +#: src/config/SSSDConfig/__init__.py.in:181 msgid "Entry cache timeout length (seconds)" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:167 +#: src/config/SSSDConfig/__init__.py.in:170 msgid "" "Restrict or prefer a specific address family when performing DNS lookups" msgstr "?????????? ??? ?????????? ?????????? ??????? ?????? ??? DNS ????????" -#: src/config/SSSDConfig/__init__.py.in:168 +#: src/config/SSSDConfig/__init__.py.in:171 msgid "How long to keep cached entries after last successful login (days)" msgstr "" "????? ??? ?? ?? ????? ?????????? ?????? ???? ?????????? ??????? ???????" -#: src/config/SSSDConfig/__init__.py.in:169 +#: src/config/SSSDConfig/__init__.py.in:172 msgid "How long to wait for replies from DNS when resolving servers (seconds)" msgstr "" "????? ????? ?? ????? ?? ???????? ?? DNS ??? ??????? ?? ??????? (???????)" -#: src/config/SSSDConfig/__init__.py.in:170 +#: src/config/SSSDConfig/__init__.py.in:173 msgid "The domain part of service discovery DNS query" msgstr "?????? ?????? ?? DNS ???????? ?? ????????? ?? ??????" -#: src/config/SSSDConfig/__init__.py.in:171 +#: src/config/SSSDConfig/__init__.py.in:174 msgid "Override GID value from the identity provider with this value" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:172 +#: src/config/SSSDConfig/__init__.py.in:175 msgid "Treat usernames as case sensitive" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:179 +#: src/config/SSSDConfig/__init__.py.in:182 msgid "How often should expired entries be refreshed in background" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:180 +#: src/config/SSSDConfig/__init__.py.in:183 msgid "Whether to automatically update the client's DNS entry" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:181 -#: src/config/SSSDConfig/__init__.py.in:202 +#: src/config/SSSDConfig/__init__.py.in:184 +#: src/config/SSSDConfig/__init__.py.in:205 msgid "The TTL to apply to the client's DNS entry after updating it" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:182 -#: src/config/SSSDConfig/__init__.py.in:203 +#: src/config/SSSDConfig/__init__.py.in:185 +#: src/config/SSSDConfig/__init__.py.in:206 msgid "The interface whose IP should be used for dynamic DNS updates" msgstr "???????????, ????? IP ?? ?? ?????? ?? ????????? DNS ???????????" -#: src/config/SSSDConfig/__init__.py.in:183 +#: src/config/SSSDConfig/__init__.py.in:186 msgid "How often to periodically update the client's DNS entry" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:184 +#: src/config/SSSDConfig/__init__.py.in:187 msgid "Whether the provider should explicitly update the PTR record as well" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:185 From tjaalton at moszumanska.debian.org Wed Dec 20 10:02:54 2017 From: tjaalton at moszumanska.debian.org (Timo Aaltonen) Date: Wed, 20 Dec 2017 10:02:54 +0000 Subject: [Pkg-sssd-devel] sssd: Changes to 'upstream' Message-ID: Makefile.am | 129 configure.ac | 1 contrib/ci/README.md | 2 contrib/ci/distro.sh | 7 contrib/sssd.spec.in | 16 contrib/systemtap/dp_request.stp | 85 po/POTFILES.in | 1 po/bg.po | 737 +- po/ca.po | 854 +- po/cs.po | 2738 +++++++ po/de.po | 822 +- po/es.po | 797 +- po/eu.po | 723 +- po/fr.po | 846 +- po/hu.po | 743 +- po/id.po | 740 +- po/it.po | 762 +- po/ja.po | 812 +- po/nb.po | 714 +- po/nl.po | 818 +- po/pl.po | 1139 +-- po/pt.po | 766 +- po/pt_BR.po | 704 +- po/ru.po | 772 +- po/sssd.pot | 704 +- po/sv.po | 818 +- po/tg.po | 712 +- po/tr.po | 704 +- po/uk.po | 1133 +-- po/zh_CN.po | 710 +- po/zh_TW.po | 735 +- src/conf_macros.m4 | 20 src/confdb/confdb.c | 19 src/confdb/confdb.h | 11 src/config/SSSDConfig/__init__.py.in | 15 src/config/SSSDConfig/ipachangeconf.py | 2 src/config/SSSDConfig/sssd_upgrade_config.py | 1 src/config/SSSDConfigTest.py | 15 src/config/cfg_rules.ini | 30 src/config/etc/sssd.api.conf | 11 src/config/etc/sssd.api.d/sssd-ipa.conf | 3 src/config/etc/sssd.api.d/sssd-ldap.conf | 1 src/db/sysdb.h | 32 src/db/sysdb_init.c | 7 src/db/sysdb_ops.c | 109 src/db/sysdb_private.h | 9 src/db/sysdb_sudo.c | 89 src/db/sysdb_sudo.h | 6 src/db/sysdb_upgrade.c | 77 src/external/pac_responder.m4 | 3 src/krb5_plugin/sssd_krb5_localauth_plugin.c | 2 src/lib/certmap/sss_cert_content_common.c | 199 src/lib/certmap/sss_cert_content_crypto.c | 778 ++ src/lib/certmap/sss_cert_content_nss.c | 109 src/lib/certmap/sss_certmap.c | 93 src/lib/certmap/sss_certmap_attr_names.c | 83 src/lib/certmap/sss_certmap_int.h | 25 src/lib/certmap/sss_certmap_krb5_match.c | 21 src/lib/idmap/sss_idmap.c | 12 src/lib/sifp/sss_sifp_parser.c | 4 src/man/Makefile.am | 11 src/man/idmap_sss.8.xml | 2 src/man/include/failover.xml | 56 src/man/include/ipa_modified_defaults.xml | 5 src/man/include/seealso.xml | 10 src/man/po/br.po | 3271 +++++---- src/man/po/ca.po | 4342 ++++++------ src/man/po/cs.po | 3185 +++++---- src/man/po/de.po | 4723 +++++++------ src/man/po/es.po | 4277 ++++++------ src/man/po/eu.po | 3163 +++++---- src/man/po/fi.po | 3248 +++++---- src/man/po/fr.po | 4734 ++++++------- src/man/po/ja.po | 4356 ++++++------ src/man/po/lv.po | 3273 +++++---- src/man/po/nl.po | 3324 +++++---- src/man/po/po4a.cfg | 2 src/man/po/pt.po | 3542 ++++++---- src/man/po/pt_BR.po | 3167 +++++---- src/man/po/ru.po | 3205 +++++---- src/man/po/sssd-docs.pot | 3072 +++++--- src/man/po/tg.po | 3199 +++++---- src/man/po/uk.po | 6244 ++++++++++-------- src/man/po/zh_CN.po | 3205 +++++---- src/man/sss-certmap.5.xml | 24 src/man/sss_debuglevel.8.xml | 36 src/man/sssd-ad.5.xml | 6 src/man/sssd-ifp.5.xml | 2 src/man/sssd-ipa.5.xml | 44 src/man/sssd-kcm.8.xml | 2 src/man/sssd-ldap.5.xml | 44 src/man/sssd-secrets.5.xml | 89 src/man/sssd-session-recording.5.xml | 162 src/man/sssd-systemtap.5.xml | 386 + src/man/sssd.conf.5.xml | 211 src/providers/ad/ad_gpo.c | 7 src/providers/ad/ad_machine_pw_renewal.c | 2 src/providers/ad/ad_opts.c | 1 src/providers/ad/ad_subdomains.c | 2 src/providers/backend.h | 8 src/providers/data_provider/dp.h | 2 src/providers/data_provider/dp_request.c | 5 src/providers/data_provider/dp_target_auth.c | 8 src/providers/data_provider/dp_target_id.c | 265 src/providers/data_provider/dp_targets.c | 2 src/providers/data_provider_be.c | 56 src/providers/ipa/ipa_access.c | 272 src/providers/ipa/ipa_access.h | 6 src/providers/ipa/ipa_auth.c | 12 src/providers/ipa/ipa_common.c | 69 src/providers/ipa/ipa_common.h | 10 src/providers/ipa/ipa_deskprofile_config.c | 156 src/providers/ipa/ipa_deskprofile_config.h | 45 src/providers/ipa/ipa_deskprofile_private.h | 50 src/providers/ipa/ipa_deskprofile_rules.c | 367 + src/providers/ipa/ipa_deskprofile_rules.h | 43 src/providers/ipa/ipa_deskprofile_rules_util.c | 932 ++ src/providers/ipa/ipa_deskprofile_rules_util.h | 57 src/providers/ipa/ipa_hbac_common.c | 171 src/providers/ipa/ipa_hbac_hosts.c | 110 src/providers/ipa/ipa_hbac_private.h | 26 src/providers/ipa/ipa_hbac_rules.c | 70 src/providers/ipa/ipa_hbac_rules.h | 4 src/providers/ipa/ipa_hbac_services.c | 1 src/providers/ipa/ipa_hbac_users.c | 29 src/providers/ipa/ipa_init.c | 74 src/providers/ipa/ipa_opts.c | 4 src/providers/ipa/ipa_rules_common.c | 455 + src/providers/ipa/ipa_rules_common.h | 89 src/providers/ipa/ipa_selinux.c | 34 src/providers/ipa/ipa_session.c | 864 ++ src/providers/ipa/ipa_session.h | 54 src/providers/ipa/ipa_subdomains.c | 74 src/providers/ipa/ipa_subdomains_ext_groups.c | 12 src/providers/ipa/ipa_subdomains_server.c | 4 src/providers/ipa/ipa_sudo.c | 8 src/providers/ipa/ipa_sudo.h | 13 src/providers/ipa/ipa_sudo_async.c | 9 src/providers/ipa/ipa_sudo_conversion.c | 39 src/providers/ipa/ipa_views.c | 18 src/providers/ipa/selinux_child.c | 12 src/providers/ldap/ldap_child.c | 18 src/providers/ldap/ldap_common.h | 5 src/providers/ldap/ldap_id.c | 5 src/providers/ldap/ldap_init.c | 2 src/providers/ldap/ldap_opts.c | 9 src/providers/ldap/sdap.h | 5 src/providers/ldap/sdap_access.c | 88 src/providers/ldap/sdap_access.h | 2 src/providers/ldap/sdap_async_groups.c | 23 src/providers/ldap/sdap_async_nested_groups.c | 61 src/providers/ldap/sdap_certmap.c | 152 src/providers/ldap/sdap_id_op.c | 12 src/providers/ldap/sdap_idmap.c | 2 src/python/pysss_murmur.c | 2 src/python/pysss_nss_idmap.c | 40 src/resolv/async_resolv.c | 7 src/responder/common/cache_req/cache_req.c | 66 src/responder/common/cache_req/cache_req_data.c | 10 src/responder/common/cache_req/cache_req_private.h | 10 src/responder/common/cache_req/cache_req_result.c | 8 src/responder/common/cache_req/cache_req_sr_overlay.c | 328 src/responder/common/iface/responder_iface.c | 2 src/responder/common/negcache.c | 118 src/responder/common/responder.h | 16 src/responder/common/responder_common.c | 109 src/responder/common/responder_utils.c | 83 src/responder/ifp/ifp_components.c | 3 src/responder/ifp/ifp_groups.c | 47 src/responder/ifp/ifp_iface.xml | 4 src/responder/ifp/ifp_iface_generated.c | 25 src/responder/ifp/ifp_iface_generated.h | 5 src/responder/ifp/ifp_private.h | 9 src/responder/ifp/ifp_users.c | 21 src/responder/ifp/ifpsrv_cmd.c | 35 src/responder/ifp/ifpsrv_util.c | 31 src/responder/kcm/kcmsrv_ccache.c | 35 src/responder/kcm/kcmsrv_ccache_mem.c | 26 src/responder/nss/nss_cmd.c | 22 src/responder/nss/nss_get_object.c | 6 src/responder/nss/nss_iface.c | 2 src/responder/nss/nss_private.h | 6 src/responder/nss/nss_protocol_netgr.c | 12 src/responder/nss/nss_protocol_pwent.c | 117 src/responder/nss/nsssrv.c | 99 src/responder/pam/pamsrv_cmd.c | 98 src/responder/secrets/local.c | 192 src/responder/secrets/proxy.c | 2 src/responder/secrets/secsrv.c | 193 src/responder/secrets/secsrv.h | 19 src/responder/secrets/secsrv_cmd.c | 6 src/responder/secrets/secsrv_private.h | 2 src/responder/sudo/sudosrv.c | 11 src/responder/sudo/sudosrv_get_sudorules.c | 68 src/responder/sudo/sudosrv_private.h | 3 src/sbus/sbus_codegen | 4 src/shared/io.h | 33 src/shared/murmurhash3.h | 21 src/shared/safealign.h | 146 src/sss_client/common.c | 136 src/sss_client/libwbclient/wbc_pam_sssd.c | 2 src/sss_client/libwbclient/wbclient.exports | 3 src/sss_client/libwbclient/wbclient_sssd.h | 9 src/sss_client/nss_mc_common.c | 2 src/sss_client/nss_mc_group.c | 2 src/sss_client/nss_mc_initgr.c | 2 src/sss_client/sss_cli.h | 15 src/sss_client/sss_pac_responder_client.c | 137 src/sss_client/sssd_pac.c | 4 src/systemtap/sssd.stp.in | 18 src/systemtap/sssd_functions.stp | 68 src/systemtap/sssd_probes.d | 5 src/tests/cmocka/test_certmap.c | 120 src/tests/cmocka/test_inotify.c | 2 src/tests/cmocka/test_io.c | 2 src/tests/cmocka/test_negcache.c | 30 src/tests/cmocka/test_sdap_access.c | 192 src/tests/cmocka/test_sdap_access.h | 36 src/tests/cmocka/test_sdap_certmap.c | 244 src/tests/cmocka/test_sss_idmap.c | 32 src/tests/cmocka/test_sssd_krb5_localauth_plugin.c | 197 src/tests/cmocka/test_sysdb_sudo.c | 170 src/tests/cmocka/test_utils.c | 12 src/tests/cwrap/Makefile.am | 3 src/tests/files-tests.c | 50 src/tests/intg/Makefile.am | 12 src/tests/intg/__init__.py | 13 src/tests/intg/config.py.m4 | 33 src/tests/intg/data/ad_data.ldif | 815 ++ src/tests/intg/data/ad_schema.ldif | 42 src/tests/intg/ds.py | 2 src/tests/intg/ds_openldap.py | 128 src/tests/intg/sssd_group.py | 43 src/tests/intg/sssd_passwd.py | 43 src/tests/intg/test_enumeration.py | 10 src/tests/intg/test_files_provider.py | 97 src/tests/intg/test_kcm.py | 54 src/tests/intg/test_ldap.py | 21 src/tests/intg/test_pac_responder.py | 120 src/tests/intg/test_pysss_nss_idmap.py | 269 src/tests/intg/test_secrets.py | 244 src/tests/intg/test_session_recording.py | 961 ++ src/tests/krb5_child-test.c | 10 src/tests/sbus_codegen_tests.c | 12 src/tests/sysdb-tests.c | 81 src/tests/util-tests.c | 2 src/tools/common/sss_tools.c | 15 src/tools/common/sss_tools.h | 7 src/tools/files.c | 809 -- src/tools/selinux.c | 83 src/tools/sss_debuglevel.c | 323 src/tools/sssctl/sssctl.c | 2 src/tools/sssctl/sssctl.h | 8 src/tools/sssctl/sssctl_cache.c | 52 src/tools/sssctl/sssctl_data.c | 47 src/tools/sssctl/sssctl_logs.c | 267 src/tools/sssctl/sssctl_user_checks.c | 2 src/tools/tools_util.c | 12 src/tools/tools_util.h | 17 src/tools/wrappers/sss_debuglevel.in | 4 src/util/domain_info_utils.c | 54 src/util/files.c | 886 ++ src/util/io.c | 2 src/util/io.h | 33 src/util/mmap_cache.h | 2 src/util/murmurhash3.c | 2 src/util/murmurhash3.h | 20 src/util/selinux.c | 83 src/util/session_recording.c | 113 src/util/session_recording.h | 76 src/util/sss_semanage.c | 73 src/util/util.h | 33 src/util/util_safealign.h | 147 version.m4 | 2 274 files changed, 66794 insertions(+), 39574 deletions(-) New commits: commit 2de0072db40ce90c9d376af38245cd1e0c9fa6ea Author: Jakub Hrozek Date: Fri Oct 20 16:40:08 2017 +0200 Updating the version for the 1.16.0 release diff --git a/version.m4 b/version.m4 index 1a627c1..6a6bc41 100644 --- a/version.m4 +++ b/version.m4 @@ -1,5 +1,5 @@ # Primary version number -m4_define([VERSION_NUMBER], [1.15.4]) +m4_define([VERSION_NUMBER], [1.16.0]) # If the PRERELEASE_VERSION_NUMBER is set, we'll append # it to the release tag when creating an RPM or SRPM commit 9a839b29816c8906d4a6b074cf76df790cac9209 Author: Jakub Hrozek Date: Fri Oct 20 16:37:04 2017 +0200 Updating the translation for the 1.16.0 release diff --git a/po/bg.po b/po/bg.po index 8ec0021..6258aa2 100644 --- a/po/bg.po +++ b/po/bg.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: sssd-devel at lists.fedorahosted.org\n" -"POT-Creation-Date: 2017-07-25 11:53+0200\n" +"POT-Creation-Date: 2017-10-20 16:16+0200\n" "PO-Revision-Date: 2014-12-14 11:44-0500\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Bulgarian (http://www.transifex.com/projects/p/sssd/language/" @@ -38,9 +38,8 @@ msgid "Write debug messages to logfiles" msgstr "??????? debug ??????????? ? ??????????" #: src/config/SSSDConfig/__init__.py.in:48 -#, fuzzy msgid "Watchdog timeout before restarting service" -msgstr "Ping ????????? ????? ??????? ?? ????????" +msgstr "" #: src/config/SSSDConfig/__init__.py.in:49 msgid "Command to start service" @@ -79,12 +78,12 @@ msgid "Timeout for messages sent over the SBUS" msgstr "????????? ?? ?????????, ????????? ???? SBUS" #: src/config/SSSDConfig/__init__.py.in:60 -#: src/config/SSSDConfig/__init__.py.in:194 +#: src/config/SSSDConfig/__init__.py.in:197 msgid "Regex to parse username and domain" msgstr "Regex ?? ???????? ?? ????????????? ??? ? ??????" #: src/config/SSSDConfig/__init__.py.in:61 -#: src/config/SSSDConfig/__init__.py.in:193 +#: src/config/SSSDConfig/__init__.py.in:196 msgid "Printf-compatible format for displaying fully-qualified names" msgstr "Printf-????????? ?????? ?? ???????????? ?? ?????-????????????? ?????" @@ -103,9 +102,8 @@ msgid "The user to drop privileges to" msgstr "" #: src/config/SSSDConfig/__init__.py.in:65 -#, fuzzy msgid "Tune certificate verification" -msgstr "??????? TLS ???????? ?? ??????????" +msgstr "" #: src/config/SSSDConfig/__init__.py.in:66 msgid "All spaces in group or user names will be replaced with this character" @@ -132,7 +130,7 @@ msgid "Entry cache background update timeout length (seconds)" msgstr "" #: src/config/SSSDConfig/__init__.py.in:74 -#: src/config/SSSDConfig/__init__.py.in:112 +#: src/config/SSSDConfig/__init__.py.in:113 msgid "Negative cache timeout length (seconds)" msgstr "" @@ -217,7 +215,7 @@ msgid "What kind of messages are displayed to the user during authentication" msgstr "" #: src/config/SSSDConfig/__init__.py.in:95 -msgid "Filter PAM responses send the pam_sss" +msgid "Filter PAM responses sent to the pam_sss" msgstr "" #: src/config/SSSDConfig/__init__.py.in:96 @@ -249,7 +247,7 @@ msgid "Allow certificate based/Smartcard authentication." msgstr "" #: src/config/SSSDConfig/__init__.py.in:103 -msgid "Path to certificate databse with PKCS#11 modules." +msgid "Path to certificate database with PKCS#11 modules." msgstr "" #: src/config/SSSDConfig/__init__.py.in:104 @@ -268,1170 +266,1201 @@ msgstr "" msgid "If true, SSSD will switch back to lower-wins ordering logic" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:115 -msgid "Whether to hash host names and addresses in the known_hosts file" +#: src/config/SSSDConfig/__init__.py.in:110 +msgid "" +"Maximum number of rules that can be refreshed at once. If this is exceeded, " +"full refresh is performed." msgstr "" #: src/config/SSSDConfig/__init__.py.in:116 +msgid "Whether to hash host names and addresses in the known_hosts file" +msgstr "" + +#: src/config/SSSDConfig/__init__.py.in:117 msgid "" "How many seconds to keep a host in the known_hosts file after its host keys " "were requested" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:117 -#, fuzzy +#: src/config/SSSDConfig/__init__.py.in:118 msgid "Path to storage of trusted CA certificates" -msgstr "????, ???????? CA ???????????" +msgstr "" -#: src/config/SSSDConfig/__init__.py.in:120 +#: src/config/SSSDConfig/__init__.py.in:121 msgid "List of UIDs or user names allowed to access the PAC responder" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:121 +#: src/config/SSSDConfig/__init__.py.in:122 msgid "How long the PAC data is considered valid" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:124 +#: src/config/SSSDConfig/__init__.py.in:125 msgid "List of UIDs or user names allowed to access the InfoPipe responder" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:125 +#: src/config/SSSDConfig/__init__.py.in:126 msgid "List of user attributes the InfoPipe is allowed to publish" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:128 +#: src/config/SSSDConfig/__init__.py.in:129 msgid "The provider where the secrets will be stored in" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:129 +#: src/config/SSSDConfig/__init__.py.in:130 msgid "The maximum allowed number of nested containers" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:130 +#: src/config/SSSDConfig/__init__.py.in:131 msgid "The maximum number of secrets that can be stored" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:131 -msgid "The maximum payload size of a secret in kilobytes" +#: src/config/SSSDConfig/__init__.py.in:132 +msgid "The maximum number of secrets that can be stored per UID" msgstr "" #: src/config/SSSDConfig/__init__.py.in:133 +msgid "The maximum payload size of a secret in kilobytes" +msgstr "" + +#: src/config/SSSDConfig/__init__.py.in:135 msgid "The URL Custodia server is listening on" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:134 +#: src/config/SSSDConfig/__init__.py.in:136 msgid "The method to use when authenticating to a Custodia server" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:135 +#: src/config/SSSDConfig/__init__.py.in:137 msgid "" "The name of the headers that will be added into a HTTP request with the " "value defined in auth_header_value" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:136 +#: src/config/SSSDConfig/__init__.py.in:138 msgid "The value sssd-secrets would use for auth_header_name" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:137 +#: src/config/SSSDConfig/__init__.py.in:139 msgid "" "The list of the headers to forward to the Custodia server together with the " "request" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:138 +#: src/config/SSSDConfig/__init__.py.in:140 msgid "" "The username to use when authenticating to a Custodia server using basic_auth" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:139 +#: src/config/SSSDConfig/__init__.py.in:141 msgid "" "The password to use when authenticating to a Custodia server using basic_auth" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:140 +#: src/config/SSSDConfig/__init__.py.in:142 msgid "If true peer's certificate is verified if proxy_url uses https protocol" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:141 +#: src/config/SSSDConfig/__init__.py.in:143 msgid "" -"If false peer's certificate may contain different hostname then proxy_url " +"If false peer's certificate may contain different hostname than proxy_url " "when https protocol is used" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:142 +#: src/config/SSSDConfig/__init__.py.in:144 msgid "Path to directory where certificate authority certificates are stored" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:143 -#, fuzzy +#: src/config/SSSDConfig/__init__.py.in:145 msgid "Path to file containing server's CA certificate" -msgstr "????, ???????? CA ???????????" +msgstr "" -#: src/config/SSSDConfig/__init__.py.in:144 -#, fuzzy +#: src/config/SSSDConfig/__init__.py.in:146 msgid "Path to file containing client's certificate" -msgstr "????, ???????? CA ???????????" +msgstr "" -#: src/config/SSSDConfig/__init__.py.in:145 +#: src/config/SSSDConfig/__init__.py.in:147 msgid "Path to file containing client's private key" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:148 +#: src/config/SSSDConfig/__init__.py.in:150 msgid "Identity provider" msgstr "????????? ?? ???????????" -#: src/config/SSSDConfig/__init__.py.in:149 +#: src/config/SSSDConfig/__init__.py.in:151 msgid "Authentication provider" msgstr "????????? ?? ??????????????" -#: src/config/SSSDConfig/__init__.py.in:150 +#: src/config/SSSDConfig/__init__.py.in:152 msgid "Access control provider" msgstr "????????? ?? ??????? ?? ??????" -#: src/config/SSSDConfig/__init__.py.in:151 +#: src/config/SSSDConfig/__init__.py.in:153 msgid "Password change provider" msgstr "????????? ?? ????? ?? ??????" -#: src/config/SSSDConfig/__init__.py.in:152 +#: src/config/SSSDConfig/__init__.py.in:154 msgid "SUDO provider" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:153 +#: src/config/SSSDConfig/__init__.py.in:155 msgid "Autofs provider" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:154 +#: src/config/SSSDConfig/__init__.py.in:156 msgid "Host identity provider" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:155 -#, fuzzy +#: src/config/SSSDConfig/__init__.py.in:157 msgid "SELinux provider" -msgstr "????????? ?? ???????????" +msgstr "" #: src/config/SSSDConfig/__init__.py.in:158 +#, fuzzy +msgid "Session management provider" +msgstr "????????? ?? ????? ?? ??????" + +#: src/config/SSSDConfig/__init__.py.in:161 msgid "Whether the domain is usable by the OS or by applications" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:159 +#: src/config/SSSDConfig/__init__.py.in:162 msgid "Minimum user ID" msgstr "????????? ID ?? ??????????" -#: src/config/SSSDConfig/__init__.py.in:160 +#: src/config/SSSDConfig/__init__.py.in:163 msgid "Maximum user ID" msgstr "?????????? ID ?? ??????????" -#: src/config/SSSDConfig/__init__.py.in:161 +#: src/config/SSSDConfig/__init__.py.in:164 msgid "Enable enumerating all users/groups" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:162 +#: src/config/SSSDConfig/__init__.py.in:165 msgid "Cache credentials for offline login" msgstr "??????? ???????????????? ????? ?? ?????? ???????" -#: src/config/SSSDConfig/__init__.py.in:163 +#: src/config/SSSDConfig/__init__.py.in:166 msgid "Store password hashes" msgstr "?????????? ?????? ?? ??????" -#: src/config/SSSDConfig/__init__.py.in:164 +#: src/config/SSSDConfig/__init__.py.in:167 msgid "Display users/groups in fully-qualified form" msgstr "???????? ???????????/????? ? ????? -???????????? ?????" -#: src/config/SSSDConfig/__init__.py.in:165 +#: src/config/SSSDConfig/__init__.py.in:168 msgid "Don't include group members in group lookups" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:166 -#: src/config/SSSDConfig/__init__.py.in:173 -#: src/config/SSSDConfig/__init__.py.in:174 -#: src/config/SSSDConfig/__init__.py.in:175 +#: src/config/SSSDConfig/__init__.py.in:169 #: src/config/SSSDConfig/__init__.py.in:176 #: src/config/SSSDConfig/__init__.py.in:177 #: src/config/SSSDConfig/__init__.py.in:178 +#: src/config/SSSDConfig/__init__.py.in:179 +#: src/config/SSSDConfig/__init__.py.in:180 +#: src/config/SSSDConfig/__init__.py.in:181 msgid "Entry cache timeout length (seconds)" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:167 +#: src/config/SSSDConfig/__init__.py.in:170 msgid "" "Restrict or prefer a specific address family when performing DNS lookups" msgstr "?????????? ??? ?????????? ?????????? ??????? ?????? ??? DNS ????????" -#: src/config/SSSDConfig/__init__.py.in:168 +#: src/config/SSSDConfig/__init__.py.in:171 msgid "How long to keep cached entries after last successful login (days)" msgstr "" "????? ??? ?? ?? ????? ?????????? ?????? ???? ?????????? ??????? ???????" -#: src/config/SSSDConfig/__init__.py.in:169 +#: src/config/SSSDConfig/__init__.py.in:172 msgid "How long to wait for replies from DNS when resolving servers (seconds)" msgstr "" "????? ????? ?? ????? ?? ???????? ?? DNS ??? ??????? ?? ??????? (???????)" -#: src/config/SSSDConfig/__init__.py.in:170 +#: src/config/SSSDConfig/__init__.py.in:173 msgid "The domain part of service discovery DNS query" msgstr "?????? ?????? ?? DNS ???????? ?? ????????? ?? ??????" -#: src/config/SSSDConfig/__init__.py.in:171 +#: src/config/SSSDConfig/__init__.py.in:174 msgid "Override GID value from the identity provider with this value" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:172 +#: src/config/SSSDConfig/__init__.py.in:175 msgid "Treat usernames as case sensitive" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:179 +#: src/config/SSSDConfig/__init__.py.in:182 msgid "How often should expired entries be refreshed in background" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:180 +#: src/config/SSSDConfig/__init__.py.in:183 msgid "Whether to automatically update the client's DNS entry" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:181 -#: src/config/SSSDConfig/__init__.py.in:202 +#: src/config/SSSDConfig/__init__.py.in:184 +#: src/config/SSSDConfig/__init__.py.in:205 msgid "The TTL to apply to the client's DNS entry after updating it" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:182 -#: src/config/SSSDConfig/__init__.py.in:203 +#: src/config/SSSDConfig/__init__.py.in:185 +#: src/config/SSSDConfig/__init__.py.in:206 msgid "The interface whose IP should be used for dynamic DNS updates" msgstr "???????????, ????? IP ?? ?? ?????? ?? ????????? DNS ???????????" -#: src/config/SSSDConfig/__init__.py.in:183 +#: src/config/SSSDConfig/__init__.py.in:186 msgid "How often to periodically update the client's DNS entry" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:184 +#: src/config/SSSDConfig/__init__.py.in:187 msgid "Whether the provider should explicitly update the PTR record as well" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:185 +#: src/config/SSSDConfig/__init__.py.in:188 msgid "Whether the nsupdate utility should default to using TCP" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:186 +#: src/config/SSSDConfig/__init__.py.in:189 msgid "What kind of authentication should be used to perform the DNS update" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:187 +#: src/config/SSSDConfig/__init__.py.in:190 msgid "Override the DNS server used to perform the DNS update" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:188 +#: src/config/SSSDConfig/__init__.py.in:191 msgid "Control enumeration of trusted domains" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:189 +#: src/config/SSSDConfig/__init__.py.in:192 msgid "How often should subdomains list be refreshed" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:190 +#: src/config/SSSDConfig/__init__.py.in:193 msgid "List of options that should be inherited into a subdomain" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:191 +#: src/config/SSSDConfig/__init__.py.in:194 msgid "Default subdomain homedir value" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:192 +#: src/config/SSSDConfig/__init__.py.in:195 msgid "How long can cached credentials be used for cached authentication" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:197 +#: src/config/SSSDConfig/__init__.py.in:200 msgid "IPA domain" msgstr "IPA ??????" -#: src/config/SSSDConfig/__init__.py.in:198 +#: src/config/SSSDConfig/__init__.py.in:201 msgid "IPA server address" msgstr "????? ?? IPA ??????" -#: src/config/SSSDConfig/__init__.py.in:199 +#: src/config/SSSDConfig/__init__.py.in:202 msgid "Address of backup IPA server" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:200 +#: src/config/SSSDConfig/__init__.py.in:203 msgid "IPA client hostname" msgstr "??? ?? ???? ?? IPA ??????" -#: src/config/SSSDConfig/__init__.py.in:201 +#: src/config/SSSDConfig/__init__.py.in:204 msgid "Whether to automatically update the client's DNS entry in FreeIPA" msgstr "???? ??????????? ?? ?? ???????? ?????????? DNS ????? ??? FreeIPA" -#: src/config/SSSDConfig/__init__.py.in:204 +#: src/config/SSSDConfig/__init__.py.in:207 msgid "Search base for HBAC related objects" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:205 +#: src/config/SSSDConfig/__init__.py.in:208 msgid "" "The amount of time between lookups of the HBAC rules against the IPA server" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:206 +#: src/config/SSSDConfig/__init__.py.in:209 msgid "" "The amount of time in seconds between lookups of the SELinux maps against " "the IPA server" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:207 +#: src/config/SSSDConfig/__init__.py.in:210 msgid "If set to false, host argument given by PAM will be ignored" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:208 +#: src/config/SSSDConfig/__init__.py.in:211 msgid "The automounter location this IPA client is using" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:209 +#: src/config/SSSDConfig/__init__.py.in:212 msgid "Search base for object containing info about IPA domain" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:210 +#: src/config/SSSDConfig/__init__.py.in:213 msgid "Search base for objects containing info about ID ranges" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:211 -#: src/config/SSSDConfig/__init__.py.in:226 +#: src/config/SSSDConfig/__init__.py.in:214 +#: src/config/SSSDConfig/__init__.py.in:232 msgid "Enable DNS sites - location based service discovery" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:212 +#: src/config/SSSDConfig/__init__.py.in:215 msgid "Search base for view containers" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:213 +#: src/config/SSSDConfig/__init__.py.in:216 msgid "Objectclass for view containers" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:214 +#: src/config/SSSDConfig/__init__.py.in:217 msgid "Attribute with the name of the view" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:215 +#: src/config/SSSDConfig/__init__.py.in:218 msgid "Objectclass for override objects" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:216 +#: src/config/SSSDConfig/__init__.py.in:219 msgid "Attribute with the reference to the original object" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:217 +#: src/config/SSSDConfig/__init__.py.in:220 msgid "Objectclass for user override objects" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:218 +#: src/config/SSSDConfig/__init__.py.in:221 msgid "Objectclass for group override objects" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:221 +#: src/config/SSSDConfig/__init__.py.in:222 +msgid "Search base for Desktop Profile related objects" +msgstr "" + +#: src/config/SSSDConfig/__init__.py.in:223 +msgid "" +"The amount of time in seconds between lookups of the Desktop Profile rules " +"against the IPA server" +msgstr "" + +#: src/config/SSSDConfig/__init__.py.in:224 +msgid "" +"The amount of time in minutes between lookups of Desktop Profiles rules " +"against the IPA server when the last request did not find any rule" +msgstr "" + +#: src/config/SSSDConfig/__init__.py.in:227 msgid "Active Directory domain" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:222 +#: src/config/SSSDConfig/__init__.py.in:228 msgid "Enabled Active Directory domains" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:223 +#: src/config/SSSDConfig/__init__.py.in:229 msgid "Active Directory server address" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:224 +#: src/config/SSSDConfig/__init__.py.in:230 msgid "Active Directory backup server address" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:225 +#: src/config/SSSDConfig/__init__.py.in:231 msgid "Active Directory client hostname" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:227 -#: src/config/SSSDConfig/__init__.py.in:412 +#: src/config/SSSDConfig/__init__.py.in:233 +#: src/config/SSSDConfig/__init__.py.in:419 msgid "LDAP filter to determine access privileges" msgstr "LDAP ?????? ?? ?????????? ????? ?? ??????" -#: src/config/SSSDConfig/__init__.py.in:228 +#: src/config/SSSDConfig/__init__.py.in:234 msgid "Whether to use the Global Catalog for lookups" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:229 +#: src/config/SSSDConfig/__init__.py.in:235 msgid "Operation mode for GPO-based access control" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:230 +#: src/config/SSSDConfig/__init__.py.in:236 msgid "" "The amount of time between lookups of the GPO policy files against the AD " "server" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:231 +#: src/config/SSSDConfig/__init__.py.in:237 msgid "" "PAM service names that map to the GPO (Deny)InteractiveLogonRight policy " "settings" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:232 +#: src/config/SSSDConfig/__init__.py.in:238 msgid "" "PAM service names that map to the GPO (Deny)RemoteInteractiveLogonRight " "policy settings" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:233 +#: src/config/SSSDConfig/__init__.py.in:239 msgid "" "PAM service names that map to the GPO (Deny)NetworkLogonRight policy settings" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:234 +#: src/config/SSSDConfig/__init__.py.in:240 msgid "" "PAM service names that map to the GPO (Deny)BatchLogonRight policy settings" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:235 +#: src/config/SSSDConfig/__init__.py.in:241 msgid "" "PAM service names that map to the GPO (Deny)ServiceLogonRight policy settings" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:236 +#: src/config/SSSDConfig/__init__.py.in:242 msgid "PAM service names for which GPO-based access is always granted" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:237 +#: src/config/SSSDConfig/__init__.py.in:243 msgid "PAM service names for which GPO-based access is always denied" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:238 +#: src/config/SSSDConfig/__init__.py.in:244 msgid "" "Default logon right (or permit/deny) to use for unmapped PAM service names" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:239 +#: src/config/SSSDConfig/__init__.py.in:245 msgid "a particular site to be used by the client" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:240 +#: src/config/SSSDConfig/__init__.py.in:246 msgid "" "Maximum age in days before the machine account password should be renewed" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:241 -msgid "Option for tuing the machine account renewal task" +#: src/config/SSSDConfig/__init__.py.in:247 +msgid "Option for tuning the machine account renewal task" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:244 -#: src/config/SSSDConfig/__init__.py.in:245 +#: src/config/SSSDConfig/__init__.py.in:250 +#: src/config/SSSDConfig/__init__.py.in:251 msgid "Kerberos server address" msgstr "????? ?? Kerberos ??????" -#: src/config/SSSDConfig/__init__.py.in:246 +#: src/config/SSSDConfig/__init__.py.in:252 msgid "Kerberos backup server address" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:247 +#: src/config/SSSDConfig/__init__.py.in:253 msgid "Kerberos realm" msgstr "Kerberos ??????" -#: src/config/SSSDConfig/__init__.py.in:248 +#: src/config/SSSDConfig/__init__.py.in:254 msgid "Authentication timeout" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:249 +#: src/config/SSSDConfig/__init__.py.in:255 msgid "Whether to create kdcinfo files" msgstr "" -#: src/config/SSSDConfig/__init__.py.in:250 +#: src/config/SSSDConfig/__init__.py.in:256 From tjaalton at moszumanska.debian.org Wed Dec 20 10:02:56 2017 From: tjaalton at moszumanska.debian.org (Timo Aaltonen) Date: Wed, 20 Dec 2017 10:02:56 +0000 Subject: [Pkg-sssd-devel] sssd: Changes to 'refs/tags/debian/1.16.0-1' Message-ID: Tag 'debian/1.16.0-1' created by Timo Aaltonen at 2017-12-20 10:02 +0000 tagging package sssd version debian/1.16.0-1 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAABCAAGBQJaOjUeAAoJEMtwMWWoiYTcOzcQAJ/L1IQm7Yq6gHJIoU8LwhFE oBq6QaKJcpuwat9AHv7mo2nmtoxO4wS06GZX9kzUNq/oU3FOeSbdKH31u7CvkXuw DgRkEJ7rcU+/z2f2VNPvVZ5y4ihAWSKFsRttf6FRM76Rj3VTbGc/NBL+DZfIX1Wp Mzlx1U8pIBnHlSoDRiL8yof/JZ0ras0lREzAAQzbAK1GWZgYidF5YkmIr6L+l8eU 0ESG5JBA3bQ8ABgQnQmpuwNek0YrTDp4S3Aww8/ugG1aiIdCHJMOKZSLaOJ/wYfF KDphoJifwEZERLBrxWH9Dpyo6faQAHY8/a8CPRnbdG26stW7R4tJVogosKVVsdcH uXh0SI4OCW9G5WHwCPWxBXnbJNLNbRt9Xu7VKbwU8rQqUdOhL9DJ7gydSYdbDW91 qPrajVcyHufqLZYrQf0BvZ4ndVnj3tW9PGVzctfGJcMmvM5e5WfUXYlqIoayLVq4 1cWnwUPa1c/JlU+KHrCnn0W8s6RlZbiZFnrkszWWa/MHnrNA/Ga+cnQovJfM7wRS 2F9sCXH9ttceOitsRmgPDAjw9VZdvTBfCBsrSuutDlEWDege+q5Hq3WqAqSjRBiD 6u6tN6DqDxGRN3awCULYR1qMQRdKu84PRmUhhkS8C9MMl15dKNwTTSUAqM9ygs1B Oom7jGu+La88dKU0f8TG =NMVT -----END PGP SIGNATURE----- Changes since debian/1.15.3-3: Alexey Kamenskiy (1): LDAP: Add support for rhost access control AmitKumar (6): Moving headers used by both server and client to special folder ldap_child: Removing duplicate log message MAN: Improve description of 'trusted domain section' in sssd.conf's man page MAN: Improve ipa_hostname description IPA: check if IPA hostname is fully qualified Print a warning when enumeration is requested but disabled Fabiano Fid?ncio (57): CACHE_REQ: Fix warning may be used uninitialized INTG: Add --with-session-recording=/bin/false to intgcheck's configure IFP: Change ifp_list_ctx_remaining_capacity() return type IFP: Don't pre-allocate the amount of entries requested IPA_ACCESS: Remove not used attribute IPA: Make ipa_hbac_sysdb_save() more generic IPA: Leave only HBAC specific defines in ipa_hbac_private.h IPA_ACCESS: Make hbac_get_cache_rules() more generic IPA_ACCESS: Make ipa_purge_hbac() more generic IPA_RULES_COMMON: Introduce ipa_common_save_rules() IPA_RULES_COMMON: Introduce ipa_common_get_hostgroupname() IPA_ACCESS: Make use of struct ipa_common_entries IPA_COMMON: Introduce ipa_get_host_attrs() UTIL: move {files,selinux}.c under util directory UTIL: Add sss_create_dir() DESKPROFILE: Introduce the new IPA session provider HBAC: Fix tevent hierarchy in ipa_hbac_rule_info_send() HBAC: Document ipa_hbac_rule_info_next()'s behaviour HBAC: Remove a cosmetic extra space from an if clause HBAC: Improve readability of ipa_hbac_rule_info_send() HBAC: Enforce coding style on ipa_hbac_rule_info_send() HBAC: Enforce coding style ipa_hbac_rule_info_recv() HBAC: Add a debug message in case ipa_hbac_rule_info_next() fails HBAC: Not having rules should not be logged as error DESKPROFILE: Add ipa_deskprofile_request_interval NEGCACHE: Add some comments about each step of sss_ncache_prepopulate() NEGCACHE: Always add "root" to the negative cache TEST_NEGCACHE: Test that "root" is always added to ncache NEGCACHE: Descend to all subdomains when adding user/groups CACHE_REQ: Don't error out when searching by id = 0 NSS: Don't error out when deleting an entry which has id = 0 from the memcache NEGCACHE: Add root's uid/gid to ncache TEST_NEGCACHE: Ensure root's uid and gid are always added to ncache CONFDB: Set a default value for subdomain_refresh_interval in case an invalid value is set SDAP: Add a debug message to explain why a backend was marked offline SDAP: Don't call be_mark_offline() because sdap_id_conn_data_set_expire_timer() failed PYTHON: Define constants as bytes instead of strings SYSDB: Add sysdb_search_by_orig_dn() TESTS: Add tests for sysdb_search_{users,groups}_by_orig_dn() IPA: Use sysdb_search_*_by_orig_dn() _hbac_users.c SDAP: Use sysdb_search_*_by_orig_dn() in sdap_async_nested_groups.c SDAP: Use sysdb_search_*_by_orig_dn() in sdap_async_groups.c IPA: Use sysdb_search_*_by_orig_dn() in _subdomains_ext_group.c MAN: Add a note about the output of all commands when using domain_resolution_order RESOLV: Fix "-Werror=null-dereference" caught by GCC SIFP: Fix "-Wjump-misses-init" caught by GCC NSS: Fix "-Wold-style-definition" caught by GCC TESTS: Fix "-Werror=null-dereference" caught by GCC TOOLS: Fix "-Wstack-protector" caught by GCC SSSCTL: Fix "-Wshadow" warning caught by GCC SSSCTL: Fix "-Wunitialized" caught by GCC SSSCTL: Use get_ prefix for the sssctl_attr_fn functions TESTS: Fix "-Wshadow" caught by GCC RESPONDER: Fix "-Wold-style-definition" caught by GCC PAM: Avoid overwriting pam_status in _lookup_by_cert_done() DP: Fix the output type used in dp_req_recv_ptr() DP: Log to syslog whether it's online or offline Jakub Hrozek (29): Updating the version for the 1.15.4 release MAN: Don't tell the user to autostart sssd-kcm.service; it's socket-enabled TESTS: Add wrappers to request a user or a group by ID TESTS: Add files provider tests that request a user and group by ID TESTS: Add regression tests to try if resolving root and ID 0 fails as expected CONFDB: Do not crash with an invalid domain_type or case_sensitive value IPA: Only attempt migration for the joined domain SECRETS: Remove unused declarations SECRETS: Do not link with c-ares SECRETS: Store quotas in a per-hive configuration structure SECRETS: Read the quotas for cn=secrets from [secrets/secrets] configuration subsection SECRETS: Rename local_db_req.basedn to local_db_req.req_dn SECRETS: Use separate quotas for /kcm and /secrets hives TESTS: Test that ccaches can be stored after max_secrets is reached for regular non-ccache secrets SECRETS: Add a new option to control per-UID limits SECRETS: Support 0 as unlimited for the quotas TESTS: Relax the assert in test_idle_timeout IPA: Reword the DEBUG message about SRV resolution on IDM masters IPA: Only generate kdcinfo files on clients MAN: Improve failover documentation by explaining the timeout better MAN: Document that the secrets provider can only be specified in a per-client section TESTS: Use NULL for pointer, not 0 SUDO: Use initgr_with_views when looking up a sudo user KCM: Do not leak newly created ccache in case the name is malformed KCM: Use the right memory context KCM: Add some forgotten NULL checks GPO: Don't use freed LDAPURLDesc if domain for AD DC cannot be found Updating the translation for the 1.16.0 release Updating the version for the 1.16.0 release Justin Stephenson (8): SELINUX: Use getseuserbyname to get IPA seuser DP: Add Generic DP Request Probes CONTRIB: Add DP Request analysis script MAN: Add sssd-systemtap man page SSSCTL: Move sss_debuglevel to sssctl debug-level SSSCTL: Replace sss_debuglevel with shell wrapper SSSCTL: Add cache-expire command IPA: Add threshold for sudo searches Lukas Slebodnik (31): SPEC: Use language file for sssd-kcm SHARED: Return warning back about minimal header files intg: Disable add_remove tests SPEC: require http-parser only on rhel7.4 intg: Increase startup timeouts for kcm and secrets libwbclient: Change return code for wbcAuthenticateUserEx libwbclient: Fix warning statement with no effect SPEC: rhel8 will have python3 as well SPEC: Fix unowned directory certmap: Suppress warning Wmissing-braces cache_req: Look for name attribute also in nss_cmd_getsidbyid SPEC: Update owner and mode for /var/lib/sss/deskprofile CI: Use dnf 2.0 for installation of packages in fedora Revert "PYTHON: Define constants as bytes instead of strings" pysss_nss_idmap: return same type as it is in module constants pysss_nss_idmap: Fix typos in python documentation CONFIG: Fix schema for try_inotify SPEC: Fix detecting of minor release Fix warning declaration of 'index' shadows a global declaration intg: Fix execution with dbus-1.11.18 TOOLS: Log redirection info for sss_debuglevel to stderr TOOLS: Print Better usage for sssctl debug-level TOOLS: Hide option --debug in sssctl intg: Fix pep8 warnings in config.py template intg: Let python paths be configurable intg: prevent "TypeError: must be type, not classobj" intg: Prefer locally built python modules ds_openldap: Extract functionality to protected methods intg: Create FakeAD class based on openldap intg: Add sanity tests for pysss_nss_idmap Revert "IPA: Only generate kdcinfo files on clients" Marlena Marlenowska (1): IDMAP: Prevent colision for explicitly defined slice. Nikolai Kondrashov (16): CACHE_REQ: Propagate num_results to cache_req_state NSS: Move shell options to common responder NSS: Move nss_get_shell_override to responder utils CONFIG: Add session_recording section BUILD: Support configuring session recording shell UTIL: Add session recording conf management module RESPONDER: Add session recording conf loading DP: Add session recording conf loading SYSDB: Add sessionRecording attribute macro DP: Load override_space into be_ctx DP: Overlay sessionRecording attribute on initgr CACHE_REQ: Pull sessionRecording attrs from initgr NSS: Substitute session recording shell PAM: Export original shell to tlog-rec-session INTG: Add session recording tests MAN: Describe session recording configuration Pavel B?ezina (4): DP: Update viewname for all providers sudo: add a threshold option to reduce size of rules refresh filter IFP: fix typo in option name in man pages IFP: parse ping arguments in codegen Petr ?ech (4): IFP: Do not fail when a GHOST group is not found UTIL: Set udp_preference_limit=0 in krb5 snippet IFP: Filter with * in infopipe group methods IFP: Fix of limit = 0 (unlimited result) Sumit Bose (15): libwbclient-sssd: update interface to version 0.14 localauth plugin: change return code of sss_an2ln tests: add unit tests for krb5 localauth plugin IPA: format fixes certmap: add OpenSSL implementation ipa: make sure view name is initialized at startup certmap: make sure eku_oid_list is always allocated IPA: fix handling of certmap_ctx sysdb: add missing indices IDMAP: add a unit test sssd_client: add mutex protected call to the PAC responder BUILD: Accept krb5 1.16 for building the PAC plugin sysdb: sanitize search filter input IPA: sanitize name in override search filter sss_client: refactor internal timeout handling Timo Aaltonen (6): Merge branch 'upstream' bump changelog sysdb-sanitize-search-filter-input.diff: Dropped, upstream. sssd-common.install: Add sssd-session-recording.5. control: Depend on python3 pkgs by default. (Closes: #883178) releasing package sssd version 1.16.0-1 Yuri Chornoivan (3): Fix minor typos Fix minor typos Fix minor typos in docs amitkuma (2): ldap: Change ldap_user_certificate to userCertificate;binary python: Changing class declaration from old to new-style type --- Makefile.am | 129 configure.ac | 1 contrib/ci/README.md | 2 contrib/ci/distro.sh | 7 contrib/sssd.spec.in | 16 contrib/systemtap/dp_request.stp | 85 debian/changelog | 9 debian/control | 18 debian/patches/series | 2 debian/patches/sysdb-sanitize-search-filter-input.diff | 133 debian/sssd-common.install | 1 po/POTFILES.in | 1 po/bg.po | 737 +- po/ca.po | 854 +- po/cs.po | 2738 +++++++ po/de.po | 822 +- po/es.po | 797 +- po/eu.po | 723 + po/fr.po | 846 +- po/hu.po | 743 +- po/id.po | 740 +- po/it.po | 762 +- po/ja.po | 812 +- po/nb.po | 714 + po/nl.po | 818 +- po/pl.po | 1139 +-- po/pt.po | 766 +- po/pt_BR.po | 704 - po/ru.po | 772 +- po/sssd.pot | 704 - po/sv.po | 818 +- po/tg.po | 712 + po/tr.po | 704 - po/uk.po | 1133 +-- po/zh_CN.po | 710 + po/zh_TW.po | 735 +- src/conf_macros.m4 | 20 src/confdb/confdb.c | 19 src/confdb/confdb.h | 11 src/config/SSSDConfig/__init__.py.in | 15 src/config/SSSDConfig/ipachangeconf.py | 2 src/config/SSSDConfig/sssd_upgrade_config.py | 1 src/config/SSSDConfigTest.py | 15 src/config/cfg_rules.ini | 30 src/config/etc/sssd.api.conf | 11 src/config/etc/sssd.api.d/sssd-ipa.conf | 3 src/config/etc/sssd.api.d/sssd-ldap.conf | 1 src/db/sysdb.h | 32 src/db/sysdb_init.c | 7 src/db/sysdb_ops.c | 109 src/db/sysdb_private.h | 9 src/db/sysdb_sudo.c | 89 src/db/sysdb_sudo.h | 6 src/db/sysdb_upgrade.c | 77 src/external/pac_responder.m4 | 3 src/krb5_plugin/sssd_krb5_localauth_plugin.c | 2 src/lib/certmap/sss_cert_content_common.c | 199 src/lib/certmap/sss_cert_content_crypto.c | 778 ++ src/lib/certmap/sss_cert_content_nss.c | 109 src/lib/certmap/sss_certmap.c | 93 src/lib/certmap/sss_certmap_attr_names.c | 83 src/lib/certmap/sss_certmap_int.h | 25 src/lib/certmap/sss_certmap_krb5_match.c | 21 src/lib/idmap/sss_idmap.c | 12 src/lib/sifp/sss_sifp_parser.c | 4 src/man/Makefile.am | 11 src/man/idmap_sss.8.xml | 2 src/man/include/failover.xml | 56 src/man/include/ipa_modified_defaults.xml | 5 src/man/include/seealso.xml | 10 src/man/po/br.po | 3271 +++++--- src/man/po/ca.po | 4342 ++++++----- src/man/po/cs.po | 3185 +++++--- src/man/po/de.po | 4723 ++++++------ src/man/po/es.po | 4277 ++++++----- src/man/po/eu.po | 3163 +++++--- src/man/po/fi.po | 3248 +++++--- src/man/po/fr.po | 4734 ++++++------ src/man/po/ja.po | 4356 ++++++----- src/man/po/lv.po | 3273 +++++--- src/man/po/nl.po | 3324 +++++---- src/man/po/po4a.cfg | 2 src/man/po/pt.po | 3542 +++++---- src/man/po/pt_BR.po | 3167 +++++--- src/man/po/ru.po | 3205 +++++--- src/man/po/sssd-docs.pot | 3072 +++++--- src/man/po/tg.po | 3199 +++++--- src/man/po/uk.po | 6244 ++++++++++------- src/man/po/zh_CN.po | 3205 +++++--- src/man/sss-certmap.5.xml | 24 src/man/sss_debuglevel.8.xml | 36 src/man/sssd-ad.5.xml | 6 src/man/sssd-ifp.5.xml | 2 src/man/sssd-ipa.5.xml | 44 src/man/sssd-kcm.8.xml | 2 src/man/sssd-ldap.5.xml | 44 src/man/sssd-secrets.5.xml | 89 src/man/sssd-session-recording.5.xml | 162 src/man/sssd-systemtap.5.xml | 386 + src/man/sssd.conf.5.xml | 211 src/providers/ad/ad_gpo.c | 7 src/providers/ad/ad_machine_pw_renewal.c | 2 src/providers/ad/ad_opts.c | 1 src/providers/ad/ad_subdomains.c | 2 src/providers/backend.h | 8 src/providers/data_provider/dp.h | 2 src/providers/data_provider/dp_request.c | 5 src/providers/data_provider/dp_target_auth.c | 8 src/providers/data_provider/dp_target_id.c | 265 src/providers/data_provider/dp_targets.c | 2 src/providers/data_provider_be.c | 56 src/providers/ipa/ipa_access.c | 272 src/providers/ipa/ipa_access.h | 6 src/providers/ipa/ipa_auth.c | 12 src/providers/ipa/ipa_common.c | 69 src/providers/ipa/ipa_common.h | 10 src/providers/ipa/ipa_deskprofile_config.c | 156 src/providers/ipa/ipa_deskprofile_config.h | 45 src/providers/ipa/ipa_deskprofile_private.h | 50 src/providers/ipa/ipa_deskprofile_rules.c | 367 src/providers/ipa/ipa_deskprofile_rules.h | 43 src/providers/ipa/ipa_deskprofile_rules_util.c | 932 ++ src/providers/ipa/ipa_deskprofile_rules_util.h | 57 src/providers/ipa/ipa_hbac_common.c | 171 src/providers/ipa/ipa_hbac_hosts.c | 110 src/providers/ipa/ipa_hbac_private.h | 26 src/providers/ipa/ipa_hbac_rules.c | 70 src/providers/ipa/ipa_hbac_rules.h | 4 src/providers/ipa/ipa_hbac_services.c | 1 src/providers/ipa/ipa_hbac_users.c | 29 src/providers/ipa/ipa_init.c | 74 src/providers/ipa/ipa_opts.c | 4 src/providers/ipa/ipa_rules_common.c | 455 + src/providers/ipa/ipa_rules_common.h | 89 src/providers/ipa/ipa_selinux.c | 34 src/providers/ipa/ipa_session.c | 864 ++ src/providers/ipa/ipa_session.h | 54 src/providers/ipa/ipa_subdomains.c | 74 src/providers/ipa/ipa_subdomains_ext_groups.c | 12 src/providers/ipa/ipa_subdomains_server.c | 4 src/providers/ipa/ipa_sudo.c | 8 src/providers/ipa/ipa_sudo.h | 13 src/providers/ipa/ipa_sudo_async.c | 9 src/providers/ipa/ipa_sudo_conversion.c | 39 src/providers/ipa/ipa_views.c | 18 src/providers/ipa/selinux_child.c | 12 src/providers/ldap/ldap_child.c | 18 src/providers/ldap/ldap_common.h | 5 src/providers/ldap/ldap_id.c | 5 src/providers/ldap/ldap_init.c | 2 src/providers/ldap/ldap_opts.c | 9 src/providers/ldap/sdap.h | 5 src/providers/ldap/sdap_access.c | 88 src/providers/ldap/sdap_access.h | 2 src/providers/ldap/sdap_async_groups.c | 23 src/providers/ldap/sdap_async_nested_groups.c | 61 src/providers/ldap/sdap_certmap.c | 152 src/providers/ldap/sdap_id_op.c | 12 src/providers/ldap/sdap_idmap.c | 2 src/python/pysss_murmur.c | 2 src/python/pysss_nss_idmap.c | 40 src/resolv/async_resolv.c | 7 src/responder/common/cache_req/cache_req.c | 66 src/responder/common/cache_req/cache_req_data.c | 10 src/responder/common/cache_req/cache_req_private.h | 10 src/responder/common/cache_req/cache_req_result.c | 8 src/responder/common/cache_req/cache_req_sr_overlay.c | 328 src/responder/common/iface/responder_iface.c | 2 src/responder/common/negcache.c | 118 src/responder/common/responder.h | 16 src/responder/common/responder_common.c | 109 src/responder/common/responder_utils.c | 83 src/responder/ifp/ifp_components.c | 3 src/responder/ifp/ifp_groups.c | 47 src/responder/ifp/ifp_iface.xml | 4 src/responder/ifp/ifp_iface_generated.c | 25 src/responder/ifp/ifp_iface_generated.h | 5 src/responder/ifp/ifp_private.h | 9 src/responder/ifp/ifp_users.c | 21 src/responder/ifp/ifpsrv_cmd.c | 35 src/responder/ifp/ifpsrv_util.c | 31 src/responder/kcm/kcmsrv_ccache.c | 35 src/responder/kcm/kcmsrv_ccache_mem.c | 26 src/responder/nss/nss_cmd.c | 22 src/responder/nss/nss_get_object.c | 6 src/responder/nss/nss_iface.c | 2 src/responder/nss/nss_private.h | 6 src/responder/nss/nss_protocol_netgr.c | 12 src/responder/nss/nss_protocol_pwent.c | 117 src/responder/nss/nsssrv.c | 99 src/responder/pam/pamsrv_cmd.c | 98 src/responder/secrets/local.c | 192 src/responder/secrets/proxy.c | 2 src/responder/secrets/secsrv.c | 193 src/responder/secrets/secsrv.h | 19 src/responder/secrets/secsrv_cmd.c | 6 src/responder/secrets/secsrv_private.h | 2 src/responder/sudo/sudosrv.c | 11 src/responder/sudo/sudosrv_get_sudorules.c | 68 src/responder/sudo/sudosrv_private.h | 3 src/sbus/sbus_codegen | 4 src/shared/io.h | 33 src/shared/murmurhash3.h | 21 src/shared/safealign.h | 146 src/sss_client/common.c | 136 src/sss_client/libwbclient/wbc_pam_sssd.c | 2 src/sss_client/libwbclient/wbclient.exports | 3 src/sss_client/libwbclient/wbclient_sssd.h | 9 src/sss_client/nss_mc_common.c | 2 src/sss_client/nss_mc_group.c | 2 src/sss_client/nss_mc_initgr.c | 2 src/sss_client/sss_cli.h | 15 src/sss_client/sss_pac_responder_client.c | 137 src/sss_client/sssd_pac.c | 4 src/systemtap/sssd.stp.in | 18 src/systemtap/sssd_functions.stp | 68 src/systemtap/sssd_probes.d | 5 src/tests/cmocka/test_certmap.c | 120 src/tests/cmocka/test_inotify.c | 2 src/tests/cmocka/test_io.c | 2 src/tests/cmocka/test_negcache.c | 30 src/tests/cmocka/test_sdap_access.c | 192 src/tests/cmocka/test_sdap_access.h | 36 src/tests/cmocka/test_sdap_certmap.c | 244 src/tests/cmocka/test_sss_idmap.c | 32 src/tests/cmocka/test_sssd_krb5_localauth_plugin.c | 197 src/tests/cmocka/test_sysdb_sudo.c | 170 src/tests/cmocka/test_utils.c | 12 src/tests/cwrap/Makefile.am | 3 src/tests/files-tests.c | 50 src/tests/intg/Makefile.am | 12 src/tests/intg/__init__.py | 13 src/tests/intg/config.py.m4 | 33 src/tests/intg/data/ad_data.ldif | 815 ++ src/tests/intg/data/ad_schema.ldif | 42 src/tests/intg/ds.py | 2 src/tests/intg/ds_openldap.py | 128 src/tests/intg/sssd_group.py | 43 src/tests/intg/sssd_passwd.py | 43 src/tests/intg/test_enumeration.py | 10 src/tests/intg/test_files_provider.py | 97 src/tests/intg/test_kcm.py | 54 src/tests/intg/test_ldap.py | 21 src/tests/intg/test_pac_responder.py | 120 src/tests/intg/test_pysss_nss_idmap.py | 269 src/tests/intg/test_secrets.py | 244 src/tests/intg/test_session_recording.py | 961 ++ src/tests/krb5_child-test.c | 10 src/tests/sbus_codegen_tests.c | 12 src/tests/sysdb-tests.c | 81 src/tests/util-tests.c | 2 src/tools/common/sss_tools.c | 15 src/tools/common/sss_tools.h | 7 src/tools/files.c | 809 -- src/tools/selinux.c | 83 src/tools/sss_debuglevel.c | 323 src/tools/sssctl/sssctl.c | 2 src/tools/sssctl/sssctl.h | 8 src/tools/sssctl/sssctl_cache.c | 52 src/tools/sssctl/sssctl_data.c | 47 src/tools/sssctl/sssctl_logs.c | 267 src/tools/sssctl/sssctl_user_checks.c | 2 src/tools/tools_util.c | 12 src/tools/tools_util.h | 17 src/tools/wrappers/sss_debuglevel.in | 4 src/util/domain_info_utils.c | 54 src/util/files.c | 886 ++ src/util/io.c | 2 src/util/io.h | 33 src/util/mmap_cache.h | 2 src/util/murmurhash3.c | 2 src/util/murmurhash3.h | 20 src/util/selinux.c | 83 src/util/session_recording.c | 113 src/util/session_recording.h | 76 src/util/sss_semanage.c | 73 src/util/util.h | 33 src/util/util_safealign.h | 147 version.m4 | 2 279 files changed, 66819 insertions(+), 39712 deletions(-) --- From ftpmaster at ftp-master.debian.org Wed Dec 20 10:12:59 2017 From: ftpmaster at ftp-master.debian.org (Debian FTP Masters) Date: Wed, 20 Dec 2017 10:12:59 +0000 Subject: [Pkg-sssd-devel] Processing of sssd_1.16.0-1_source.changes Message-ID: sssd_1.16.0-1_source.changes uploaded successfully to localhost along with the files: sssd_1.16.0-1.dsc sssd_1.16.0.orig.tar.gz sssd_1.16.0-1.diff.gz Greetings, Your Debian queue daemon (running on host usper.debian.org) From ftpmaster at ftp-master.debian.org Wed Dec 20 10:20:43 2017 From: ftpmaster at ftp-master.debian.org (Debian FTP Masters) Date: Wed, 20 Dec 2017 10:20:43 +0000 Subject: [Pkg-sssd-devel] sssd_1.16.0-1_source.changes ACCEPTED into unstable Message-ID: Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 20 Dec 2017 11:58:50 +0200 Source: sssd Binary: sssd sssd-common sssd-ad sssd-ad-common sssd-dbus sssd-ipa sssd-kcm sssd-krb5 sssd-krb5-common sssd-ldap sssd-proxy sssd-tools libnss-sss libpam-sss libipa-hbac0 libipa-hbac-dev libsss-certmap0 libsss-certmap-dev libsss-idmap0 libsss-idmap-dev libsss-nss-idmap0 libsss-nss-idmap-dev libsss-sudo libsss-simpleifp0 libsss-simpleifp-dev libwbclient-sssd libwbclient-sssd-dev python-libipa-hbac python-libsss-nss-idmap python-sss python3-libipa-hbac python3-libsss-nss-idmap python3-sss Architecture: source Version: 1.16.0-1 Distribution: unstable Urgency: medium Maintainer: Debian SSSD Team Changed-By: Timo Aaltonen Description: libipa-hbac-dev - FreeIPA HBAC Evaluator library -- development files libipa-hbac0 - FreeIPA HBAC Evaluator library libnss-sss - Nss library for the System Security Services Daemon libpam-sss - Pam module for the System Security Services Daemon libsss-certmap-dev - Certificate mapping library for SSSD -- development files libsss-certmap0 - Certificate mapping library for SSSD libsss-idmap-dev - ID mapping library for SSSD -- development files libsss-idmap0 - ID mapping library for SSSD libsss-nss-idmap-dev - SID based lookups library for SSSD -- development files libsss-nss-idmap0 - SID based lookups library for SSSD libsss-simpleifp-dev - SSSD D-Bus responder helper library -- development files libsss-simpleifp0 - SSSD D-Bus responder helper library libsss-sudo - Communicator library for sudo libwbclient-sssd - SSSD libwbclient implementation libwbclient-sssd-dev - SSSD libwbclient implementation -- development files python-libipa-hbac - Python bindings for the FreeIPA HBAC Evaluator library python-libsss-nss-idmap - Python bindings for the SID lookups library python-sss - Python module for the System Security Services Daemon python3-libipa-hbac - Python3 bindings for the FreeIPA HBAC Evaluator library python3-libsss-nss-idmap - Python3 bindings for the SID lookups library python3-sss - Python3 module for the System Security Services Daemon sssd - System Security Services Daemon -- metapackage sssd-ad - System Security Services Daemon -- Active Directory back end sssd-ad-common - System Security Services Daemon -- PAC responder sssd-common - System Security Services Daemon -- common files sssd-dbus - System Security Services Daemon -- D-Bus responder sssd-ipa - System Security Services Daemon -- IPA back end sssd-kcm - System Security Services Daemon -- Kerberos KCM server implementa sssd-krb5 - System Security Services Daemon -- Kerberos back end sssd-krb5-common - System Security Services Daemon -- Kerberos helpers sssd-ldap - System Security Services Daemon -- LDAP back end sssd-proxy - System Security Services Daemon -- proxy back end sssd-tools - System Security Services Daemon -- tools Closes: 883178 Changes: sssd (1.16.0-1) unstable; urgency=medium . * New upstream release. * sysdb-sanitize-search-filter-input.diff: Dropped, upstream. * sssd-common.install: Add sssd-session-recording.5. * control: Depend on python3 pkgs by default. (Closes: #883178) Checksums-Sha1: b6c2befbbb38a687c0e4991d9f97c37876d2102a 4605 sssd_1.16.0-1.dsc fff74b3798e163a0fe311bdfc4588524afe6dd87 5899127 sssd_1.16.0.orig.tar.gz 4bdb8a3654b4ce5f9c99ed0f5c14a1093ef55b93 50170 sssd_1.16.0-1.diff.gz Checksums-Sha256: e7620a8e1f37b9a5f11e376936d02e9317c39058367771855a622b94eec1a634 4605 sssd_1.16.0-1.dsc c581a6e5365cef87fca419c0c9563cf15eadbb682863d648d85ffcded7a3940f 5899127 sssd_1.16.0.orig.tar.gz 7b5a63aa0e8d123ce32a204f83a07ab9e50e570a380a29d42a9bb1755300f3a5 50170 sssd_1.16.0-1.diff.gz Files: 34326a2ba33fd67e8dfb76ca54ee8a08 4605 utils extra sssd_1.16.0-1.dsc f721ace2ebfa6744cfea55e3ecd2d82f 5899127 utils extra sssd_1.16.0.orig.tar.gz 820101188b597bde19a7c2ecbd431f69 50170 utils extra sssd_1.16.0-1.diff.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJaOjRjAAoJEMtwMWWoiYTccwIP/ier+GNZUb+xY1c3DISJC9O0 pTtLOS5QvMgCizJteLApfBlKt2lQ+ArLeetJagxBlBmvsBpgfrPTPvl3Yjav9rXP 5ZwwNi8wvjbg2JlKkoAJ4OJCqNyIf/m3nU2ag/6bFxOHmOUsOrYIglUdc+HT4GaL DnOyNLJkgdaQj7AdyIRsnTM8atMZK9vUcBJVd1YlCWu+FpyRs8rAUY6Olqf6yN2L OsndfIAeZYTgEoNGdn5m78vvKzaWx+brSas/fcrNKxWlccFAYhc5QYMq8NQpMQBu 9gfH5BFRurzVLzUKGpOl834oPJIrP9cXpBa5I7KjAYquLY+viyJmtdJIkHlqu8F4 L0OCRFv9+ze5QyuTSa//58shs5objG85+qbRDcYO2mpsU5SJ8JqTSl1NrTy2JwSZ Bg+tbWDyLqurfPLgE0O/gtkLtADQazvv2r4oaHUqQoMWwN1AIF99OgVzdCZEiQ6g jIiBWl1v163oMAoJVpzx+5oSuKu6dBx588jZLoyKcb//WRzHR1MSj6HgJWmTrYKn P/w958GzVdWtxkmJ6RoAx06wUBxdilF9SE9Lo11bWOZH324bdc74wyaADh6DWUEE ZcLtm2+CglWZJwz4E6ZkwGMdck2Os7P6l62LU+zYSIM3a4l+NYPL/75z7PFE7COs 6g1v1LAb/Q0+wxHEm/Kn =S0Qr -----END PGP SIGNATURE----- Thank you for your contribution to Debian. From owner at bugs.debian.org Wed Dec 20 10:24:05 2017 From: owner at bugs.debian.org (Debian Bug Tracking System) Date: Wed, 20 Dec 2017 10:24:05 +0000 Subject: [Pkg-sssd-devel] Bug#883178: marked as done (sssd: Please build/depend on Python3) References: <28449936-e302-5d49-a83f-34b9cad59d21@debian.org> Message-ID: Your message dated Wed, 20 Dec 2017 10:20:44 +0000 with message-id and subject line Bug#883178: fixed in sssd 1.16.0-1 has caused the Debian Bug report #883178, regarding sssd: Please build/depend on Python3 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner at bugs.debian.org immediately.) -- 883178: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883178 Debian Bug Tracking System Contact owner at bugs.debian.org with problems -------------- next part -------------- An embedded message was scrubbed... From: Matthias Klose Subject: sssd: Please build/depend on Python3 Date: Thu, 30 Nov 2017 12:33:52 +0100 Size: 2122 URL: -------------- next part -------------- An embedded message was scrubbed... From: Timo Aaltonen Subject: Bug#883178: fixed in sssd 1.16.0-1 Date: Wed, 20 Dec 2017 10:20:44 +0000 Size: 7762 URL: From tjaalton at moszumanska.debian.org Sat Dec 23 04:20:56 2017 From: tjaalton at moszumanska.debian.org (Timo Aaltonen) Date: Sat, 23 Dec 2017 04:20:56 +0000 Subject: [Pkg-sssd-devel] ding-libs: Changes to 'master' Message-ID: .git-commit-template | 9 + Makefile.am | 27 ++- collection/collection.c | 5 collection/collection_tools.c | 2 configure.ac | 5 contrib/ding-libs.spec.in | 6 debian/changelog | 9 + debian/compat | 2 debian/control | 7 debian/copyright | 2 debian/rules | 2 debian/watch | 2 dhash/dhash.c | 31 ++- dhash/dhash.h | 4 dhash/dhash_ut_check.c | 226 +++++++++++++++++++++++++++ dhash/examples/dhash_test.c | 3 ini/ini.d/merge.validator | 16 - ini/ini_augment.c | 120 ++++++-------- ini/ini_augment_ut_check.c | 343 ++++++++++++++++++++++++++++++++++++++++++ ini/ini_configmod.c | 3 ini/ini_configobj.c | 71 +++++--- ini/ini_configobj.h | 9 - ini/ini_defines.h | 5 ini/ini_fileobj.c | 1 ini/ini_get_value.c | 4 ini/ini_get_valueobj.c | 1 ini/ini_parse.c | 71 +++----- ini/ini_parse_ut_check.c | 157 +++++++++++++++++++ version.m4 | 6 29 files changed, 962 insertions(+), 187 deletions(-) New commits: commit 24ad3a0d4ac0fe88db6d3eac59f2abb9654ecaa2 Author: Timo Aaltonen Date: Sat Dec 23 06:20:20 2017 +0200 releasing package ding-libs version 0.6.1-1 diff --git a/debian/changelog b/debian/changelog index fe1d274..1c05507 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,11 +1,11 @@ -ding-libs (0.6.1-1) UNRELEASED; urgency=medium +ding-libs (0.6.1-1) unstable; urgency=medium * New upstream release. * Update urls. * Bump debhelper to 10. * Bump policy to 4.1.2, no changes. - -- Timo Aaltonen Sat, 23 Dec 2017 05:59:06 +0200 + -- Timo Aaltonen Sat, 23 Dec 2017 06:19:59 +0200 ding-libs (0.6.0-1) unstable; urgency=medium commit 0ba23fd51cddb5606353c90ae6ecf2aa431b39a2 Author: Timo Aaltonen Date: Sat Dec 23 06:06:08 2017 +0200 Bump policy to 4.1.2, no changes. diff --git a/debian/changelog b/debian/changelog index 5bf69db..fe1d274 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,6 +3,7 @@ ding-libs (0.6.1-1) UNRELEASED; urgency=medium * New upstream release. * Update urls. * Bump debhelper to 10. + * Bump policy to 4.1.2, no changes. -- Timo Aaltonen Sat, 23 Dec 2017 05:59:06 +0200 diff --git a/debian/control b/debian/control index 947cdaa..551b6ec 100644 --- a/debian/control +++ b/debian/control @@ -7,7 +7,7 @@ Build-Depends: debhelper (>= 10), quilt, check, pkg-config, -Standards-Version: 3.9.8 +Standards-Version: 4.1.2 Homepage: https://pagure.io/SSSD/ding-libs Vcs-Git: https://anonscm.debian.org/git/pkg-sssd/ding-libs.git Vcs-Browser: https://anonscm.debian.org/cgit/pkg-sssd/ding-libs.git commit de6cfa8bab43aff934735cf305cd4b232adc63f4 Author: Timo Aaltonen Date: Sat Dec 23 06:04:44 2017 +0200 Bump debhelper to 10. diff --git a/debian/changelog b/debian/changelog index a8aa288..5bf69db 100644 --- a/debian/changelog +++ b/debian/changelog @@ -2,6 +2,7 @@ ding-libs (0.6.1-1) UNRELEASED; urgency=medium * New upstream release. * Update urls. + * Bump debhelper to 10. -- Timo Aaltonen Sat, 23 Dec 2017 05:59:06 +0200 diff --git a/debian/compat b/debian/compat index ec63514..f599e28 100644 --- a/debian/compat +++ b/debian/compat @@ -1 +1 @@ -9 +10 diff --git a/debian/control b/debian/control index ae6fa55..947cdaa 100644 --- a/debian/control +++ b/debian/control @@ -3,8 +3,7 @@ Section: libs Priority: extra Maintainer: Debian SSSD Team Uploaders: Timo Aaltonen -Build-Depends: debhelper (>= 9), - dh-autoreconf, +Build-Depends: debhelper (>= 10), quilt, check, pkg-config, diff --git a/debian/rules b/debian/rules index ab7c542..b79bbdc 100755 --- a/debian/rules +++ b/debian/rules @@ -5,7 +5,7 @@ #export DH_VERBOSE=1 %: - dh $@ --with quilt,autoreconf + dh $@ --with quilt override_dh_install: # remove files we don't want to install commit 93fe3b3d7bca199cc7aeedfa49fdc526fb0a9e23 Author: Timo Aaltonen Date: Sat Dec 23 06:02:00 2017 +0200 Update urls. diff --git a/debian/changelog b/debian/changelog index b3b31ac..a8aa288 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,6 +1,7 @@ ding-libs (0.6.1-1) UNRELEASED; urgency=medium * New upstream release. + * Update urls. -- Timo Aaltonen Sat, 23 Dec 2017 05:59:06 +0200 diff --git a/debian/control b/debian/control index d34dbcc..ae6fa55 100644 --- a/debian/control +++ b/debian/control @@ -9,7 +9,7 @@ Build-Depends: debhelper (>= 9), check, pkg-config, Standards-Version: 3.9.8 -Homepage: https://fedorahosted.org/sssd/ +Homepage: https://pagure.io/SSSD/ding-libs Vcs-Git: https://anonscm.debian.org/git/pkg-sssd/ding-libs.git Vcs-Browser: https://anonscm.debian.org/cgit/pkg-sssd/ding-libs.git diff --git a/debian/copyright b/debian/copyright index 3f83b9b..1d75ab3 100644 --- a/debian/copyright +++ b/debian/copyright @@ -1,6 +1,6 @@ Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: ding-libs -Source: https://fedorahosted.org/sssd/wiki/Releases#DING-LIBSReleases +Source: https://pagure.io/SSSD/ding-libs Files: * Copyright: 2009-2016 Dmitri Pal diff --git a/debian/watch b/debian/watch index 08675e8..7601933 100644 --- a/debian/watch +++ b/debian/watch @@ -1,2 +1,2 @@ version=3 -https://fedorahosted.org/released/ding-libs/ding-libs-(.*).tar.gz +https://releases.pagure.org/SSSD/ding-libs/ding-libs-(.*).tar.gz commit 57c85e1dc00ce14187bd7e6e4c90cafe7090da4c Author: Timo Aaltonen Date: Sat Dec 23 05:59:44 2017 +0200 update changelog diff --git a/debian/changelog b/debian/changelog index 4f9c4a4..b3b31ac 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +ding-libs (0.6.1-1) UNRELEASED; urgency=medium + + * New upstream release. + + -- Timo Aaltonen Sat, 23 Dec 2017 05:59:06 +0200 + ding-libs (0.6.0-1) unstable; urgency=medium * New upstream release. commit ee13e47d309a87d8631cef92df3a47c0c734741d Author: Michal ?idek Date: Thu Sep 7 11:58:34 2017 +0200 Update versions before 0.6.1 release Reviewed-by: Lukas Slebodnik diff --git a/version.m4 b/version.m4 index 08814fe..6022c18 100644 --- a/version.m4 +++ b/version.m4 @@ -1,5 +1,5 @@ # Primary version number -m4_define([VERSION_NUMBER], [0.6.0]) +m4_define([VERSION_NUMBER], [0.6.1]) # If the PRERELEASE_VERSION_NUMBER is set, we'll append # it to the release tag when creating an RPM or SRPM @@ -11,8 +11,8 @@ m4_define([VERSION_NUMBER], [0.6.0]) m4_define([PRERELEASE_VERSION_NUMBER], []) m4_define([PATH_UTILS_VERSION_NUMBER], [0.2.1]) -m4_define([DHASH_VERSION_NUMBER], [0.4.3]) +m4_define([DHASH_VERSION_NUMBER], [0.5.0]) m4_define([COLLECTION_VERSION_NUMBER], [0.7.0]) m4_define([REF_ARRAY_VERSION_NUMBER], [0.1.5]) m4_define([BASICOBJECTS_VERSION_NUMBER], [0.1.1]) -m4_define([INI_CONFIG_VERSION_NUMBER], [1.3.0]) +m4_define([INI_CONFIG_VERSION_NUMBER], [1.3.1]) commit 403a6fefe7a06c1136e0f0e40391e5f2ec6a8981 Author: Michal ?idek Date: Thu Sep 7 12:29:47 2017 +0200 Bump version info Changes have been made to: - libdhash - added new key type for constant strings (added interface) - libcollection - just updated code (no interface changes) - libini_config - allowed new combination of parsing flags (no interface changes) Reviewed-by: Lukas Slebodnik diff --git a/Makefile.am b/Makefile.am index 81e40e1..d032739 100644 --- a/Makefile.am +++ b/Makefile.am @@ -110,7 +110,7 @@ dist_include_HEADERS += dhash/dhash.h libdhash_la_SOURCES = dhash/dhash.c libdhash_la_DEPENDENCIES = dhash/libdhash.sym libdhash_la_LDFLAGS = \ - -version-info 1:2:0 \ + -version-info 2:0:1 \ -Wl,--version-script=$(top_srcdir)/dhash/libdhash.sym check_PROGRAMS += dhash_test dhash_example @@ -166,7 +166,7 @@ libcollection_la_SOURCES = \ trace/trace.h libcollection_la_DEPENDENCIES = collection/libcollection.sym libcollection_la_LDFLAGS = \ - -version-info 5:0:1 \ + -version-info 5:1:1 \ -Wl,--version-script=$(top_srcdir)/collection/libcollection.sym check_PROGRAMS += \ @@ -292,7 +292,7 @@ libini_config_la_LIBADD = \ libref_array.la \ libbasicobjects.la libini_config_la_LDFLAGS = \ - -version-info 7:0:2 \ + -version-info 7:1:2 \ -Wl,--version-script=$(top_srcdir)/ini/libini_config.sym dist_noinst_DATA += \ diff --git a/contrib/ding-libs.spec.in b/contrib/ding-libs.spec.in index 3fc079c..0f9b877 100644 --- a/contrib/ding-libs.spec.in +++ b/contrib/ding-libs.spec.in @@ -131,7 +131,7 @@ time properties %defattr(-,root,root,-) %doc COPYING COPYING.LESSER %{_libdir}/libdhash.so.1 -%{_libdir}/libdhash.so.1.0.2 +%{_libdir}/libdhash.so.1.1.0 %files -n libdhash-devel %defattr(-,root,root,-) @@ -175,7 +175,7 @@ and serialization %doc COPYING %doc COPYING.LESSER %{_libdir}/libcollection.so.4 -%{_libdir}/libcollection.so.4.1.0 +%{_libdir}/libcollection.so.4.1.1 %files -n libcollection-devel %defattr(-,root,root,-) @@ -304,7 +304,7 @@ structure %doc COPYING %doc COPYING.LESSER %{_libdir}/libini_config.so.5 -%{_libdir}/libini_config.so.5.2.0 +%{_libdir}/libini_config.so.5.2.1 %files -n libini_config-devel %defattr(-,root,root,-) commit b73372021f343e6ef50acadea8786bfb297af75c Author: Lukas Slebodnik Date: Mon Sep 4 19:24:06 2017 +0200 DHASH: Do not use c99 structure initialisation c99 allows to initialize a structure by specifying the structure element names e.g. point = { .x = 0, .y = 0}; But it was used just in unit test and therefore it does not make a sense to increase requirements from c89 -> c99 Reviewed-by: Michal ?idek merges: https://pagure.io/SSSD/ding-libs/pull-request/3180 diff --git a/dhash/dhash_ut_check.c b/dhash/dhash_ut_check.c index 246e162..e724931 100644 --- a/dhash/dhash_ut_check.c +++ b/dhash/dhash_ut_check.c @@ -40,9 +40,16 @@ START_TEST(test_key_const_string) hash_table_t *htable; int ret; hash_value_t ret_val; - hash_value_t enter_val1 = {.type = HASH_VALUE_INT, .i = 1}; - hash_value_t enter_val2 = {.type = HASH_VALUE_INT, .i = 2}; - hash_key_t key = {.type = HASH_KEY_CONST_STRING, .c_str = "constant"}; + hash_value_t enter_val1; + hash_value_t enter_val2; + hash_key_t key; + + enter_val1.type = HASH_VALUE_INT; + enter_val1.i = 1; + enter_val2.type = HASH_VALUE_INT; + enter_val2.i = 2; + key.type = HASH_KEY_CONST_STRING; + key.c_str = "constant"; ret = hash_create(HTABLE_SIZE, &htable, NULL, NULL); fail_unless(ret == 0); @@ -87,11 +94,15 @@ START_TEST(test_key_string) hash_table_t *htable; int ret; hash_value_t ret_val; - hash_value_t enter_val1 = {.type = HASH_VALUE_INT, .i = 1}; - hash_value_t enter_val2 = {.type = HASH_VALUE_INT, .i = 2}; + hash_value_t enter_val1; + hash_value_t enter_val2; hash_key_t key; char str[] = "non_constant"; + enter_val1.type = HASH_VALUE_INT; + enter_val1.i = 1; + enter_val2.type = HASH_VALUE_INT; + enter_val2.i = 2; key.type = HASH_KEY_STRING; key.str = str; @@ -139,9 +150,16 @@ START_TEST(test_key_ulong) hash_table_t *htable; int ret; hash_value_t ret_val; - hash_value_t enter_val1 = {.type = HASH_VALUE_INT, .i = 1}; - hash_value_t enter_val2 = {.type = HASH_VALUE_INT, .i = 2}; - hash_key_t key = {.type = HASH_KEY_ULONG, .ul = 68ul}; + hash_value_t enter_val1; + hash_value_t enter_val2; + hash_key_t key; + + enter_val1.type = HASH_VALUE_INT; + enter_val1.i = 1; + enter_val2.type = HASH_VALUE_INT; + enter_val2.i = 2; + key.type = HASH_KEY_ULONG; + key.ul = 68ul; ret = hash_create(HTABLE_SIZE, &htable, NULL, NULL); fail_unless(ret == 0); commit 321e84768a75fb5bbbbec8922d50f1de59affe4c Author: Lukas Slebodnik Date: Mon Sep 4 17:45:49 2017 +0200 COLLECTION: Fix misused comma Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/collection/collection_tools.c b/collection/collection_tools.c index 7e60285..36282a0 100644 --- a/collection/collection_tools.c +++ b/collection/collection_tools.c @@ -647,7 +647,7 @@ int col_print_item(struct collection_item *handle, const char *name) else { if (buf_data.buffer != NULL) { if (buf_data.length > 0) buf_data.length--; - buf_data.buffer[buf_data.length] = '\0', + buf_data.buffer[buf_data.length] = '\0'; printf("%s\n", buf_data.buffer); free(buf_data.buffer); } commit c43a7f0005bd0a5e14a9ca33e10fe2b1413f9e74 Author: Lukas Slebodnik Date: Mon Sep 4 17:44:56 2017 +0200 INI: Fix doxygen comment for ini_errobj_create Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/ini/ini_configobj.h b/ini/ini_configobj.h index 9d5b516..476ecec 100644 --- a/ini/ini_configobj.h +++ b/ini/ini_configobj.h @@ -2071,7 +2071,7 @@ struct ini_errobj; * hold error messages from generators. To add messages to * the structure use \ref ini_errobj_add_msg. * - * @param[out] errobj container for errors. + * @param[out] _errobj container for errors. * * @return Zero on success, nonzero value in case of error. */ commit 64e54a72d7e997c6a8f12ac43ca3c0c27dabe93a Author: Lukas Slebodnik Date: Mon Sep 4 17:37:03 2017 +0200 COLLECTION: Remove unused macros Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/collection/collection.c b/collection/collection.c index 3d834eb..f7d089b 100644 --- a/collection/collection.c +++ b/collection/collection.c @@ -44,11 +44,6 @@ #define EINTR_INTERNAL 10000 -/* Potential subject for management with libtools */ -#define DATE_FORMAT "%c" - -#define TIME_ARRAY_SIZE 100 - /* Magic numbers for hashing */ #if SIZEOF_LONG == 8 #define FNV1a_prime 1099511628211ul commit b892f7220a692e64774c307c26156276d788087b Author: Lukas Slebodnik Date: Mon Sep 4 17:28:04 2017 +0200 Do not define _GNU_SOURCE Let autotools to detect gnu features. Patch also prefer AC_USE_SYSTEM_EXTENSIONS to deprecated AC_GNU_SOURCE https://www.gnu.org/software/autoconf/manual/autoconf-2.67/html_node/Obsolete-Macros.html#index-AC_005fGNU_005fSOURCE-1960 Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/configure.ac b/configure.ac index 048d3ad..1e8e0d2 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,10 @@ AC_INIT([ding-libs], [sssd-devel at lists.fedorahosted.org]) AC_CONFIG_SRCDIR([README]) AC_CONFIG_AUX_DIR([build]) -AC_GNU_SOURCE + +m4_ifdef([AC_USE_SYSTEM_EXTENSIONS], + [AC_USE_SYSTEM_EXTENSIONS], + [AC_GNU_SOURCE]) AM_INIT_AUTOMAKE([-Wall foreign subdir-objects]) AM_PROG_CC_C_O m4_ifdef([AM_PROG_AR], [AM_PROG_AR]) diff --git a/ini/ini_augment.c b/ini/ini_augment.c index 11b0e3b..af5c0b6 100644 --- a/ini/ini_augment.c +++ b/ini/ini_augment.c @@ -21,7 +21,6 @@ along with INI Library. If not, see . */ -#define _GNU_SOURCE /* for vasprintf */ #include "config.h" #include #include diff --git a/ini/ini_configmod.c b/ini/ini_configmod.c index 02a188f..da4175c 100644 --- a/ini/ini_configmod.c +++ b/ini/ini_configmod.c @@ -19,12 +19,11 @@ along with INI Library. If not, see . */ -#define _GNU_SOURCE /* for asprintf */ +#include "config.h" #include #include #include #include -#include "config.h" #include "trace.h" #include "ref_array.h" #include "simplebuffer.h" diff --git a/ini/ini_fileobj.c b/ini/ini_fileobj.c index 421d22b..d478d93 100644 --- a/ini/ini_fileobj.c +++ b/ini/ini_fileobj.c @@ -18,7 +18,6 @@ You should have received a copy of the GNU Lesser General Public License along with INI Library. If not, see . */ -#define _GNU_SOURCE /* for asprintf */ #include "config.h" #include #include commit 6002a75d2d24a69c46651db0bc723feb7d6aae2b Author: Lukas Slebodnik Date: Mon Sep 4 17:14:24 2017 +0200 INI: Fix warning Walloc-size-larger-than ini/ini_get_value.c: In function ?get_bin_config_value?: ini/ini_get_value.c:552:11: warning: argument 1 range [18446744072635809792, 18446744073709551615] exceeds maximum object size 9223372036854775807 [-Walloc-size-larger-than=] value = malloc(len / 2); ~~~~~~^~~~~~~~~~~~~~~~~ In file included from ini/ini_get_value.c:27:0: /usr/include/stdlib.h:424:14: note: in a call to allocation function ?malloc? declared here extern void *malloc (size_t __size) __THROW __attribute_malloc__ __wur; ^~~~~~ Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/ini/ini_get_value.c b/ini/ini_get_value.c index 0afadd0..2441c14 100644 --- a/ini/ini_get_value.c +++ b/ini/ini_get_value.c @@ -501,12 +501,12 @@ const char *get_const_string_config_value(struct collection_item *item, int *err char *get_bin_config_value(struct collection_item *item, int *length, int *error) { - int i; + unsigned i; char *value = NULL; const char *buff; int size = 0; unsigned char hex; - int len; + unsigned len; const char *str; TRACE_FLOW_STRING("get_bin_config_value", "Entry"); commit 7db68eb4d8b1955abfefd0676db9329aa6f5f372 Author: Lukas Slebodnik Date: Mon Sep 4 17:09:06 2017 +0200 DHASH: Suppress gcc7 warning Such comment is recognized by -Wimplicit-fallthrough=4 dhash/dhash.c: In function ?hash_iter_next?: dhash/dhash.c:748:23: warning: this statement may fall through [-Wimplicit-fallthrough=] state = HI_STATE_2; ~~~~~~^~~~~~~~~~~~ dhash/dhash.c:750:13: note: here case HI_STATE_2: ^~~~ dhash/dhash.c:756:23: warning: this statement may fall through [-Wimplicit-fallthrough=] state = HI_STATE_3A; ~~~~~~^~~~~~~~~~~~~ dhash/dhash.c:758:13: note: here case HI_STATE_3A: ^~~~ Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/dhash/dhash.c b/dhash/dhash.c index 98439e8..6b4b51d 100644 --- a/dhash/dhash.c +++ b/dhash/dhash.c @@ -746,6 +746,7 @@ static hash_entry_t *hash_iter_next(struct hash_iter_context_t *iter_arg) } iter->j = 0; state = HI_STATE_2; + /* FALLTHROUGH */ case HI_STATE_2: if (iter->j >= iter->table->segment_size) { @@ -754,6 +755,7 @@ static hash_entry_t *hash_iter_next(struct hash_iter_context_t *iter_arg) } iter->p = iter->s[iter->j]; state = HI_STATE_3A; + /* FALLTHROUGH */ case HI_STATE_3A: if (iter->p == NULL) { commit 7a95fde3853d260146a5706e53c4750777db281c Author: Lukas Slebodnik Date: Mon Sep 4 16:34:56 2017 +0200 INI: Fix memory leaks in unit test test_ini_augment_empty_dir Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/ini/ini_augment_ut_check.c b/ini/ini_augment_ut_check.c index 36a28ec..f7e3b66 100644 --- a/ini/ini_augment_ut_check.c +++ b/ini/ini_augment_ut_check.c @@ -308,6 +308,9 @@ START_TEST(test_ini_augment_empty_dir) val = ini_get_int32_config_value(vo, 1, 100, NULL); fail_unless(val == 1, "Expected attribute value not found.\n"); + ini_free_attribute_list(attrs_list); + ini_free_section_list(section_list); + ini_config_destroy(result_cfg); ini_config_destroy(ini_cfg); ini_config_file_destroy(file_ctx); remove(empty_dir_path); commit 5ef9d8106848e2d436a7ba6729bc281f3e1a15b2 Author: Lukas Slebodnik Date: Mon Sep 4 16:20:13 2017 +0200 INI: Fix usage of buiddir in ini_augment_ut_check The function getenv does not return dynamically allocated string. Therefore we cannot call free for value returned from this function. Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 ==26075== 1 errors in context 1 of 4: ==26075== Invalid free() / delete / delete[] / realloc() ==26075== at 0x4C30D18: free (vg_replace_malloc.c:530) ==26075== by 0x401E31: test_ini_augment_merge_sections (ini_augment_ut_check.c:224) ==26075== by 0x505A9EB: ??? (in /usr/lib64/libcheck.so.0.0.0) ==26075== by 0x505AEED: srunner_run_tagged (in /usr/lib64/libcheck.so.0.0.0) ==26075== by 0x401223: main (ini_augment_ut_check.c:337) ==26075== Address 0x1fff0006c1 is on thread 1's stack diff --git a/ini/ini_augment_ut_check.c b/ini/ini_augment_ut_check.c index ee1162d..36a28ec 100644 --- a/ini/ini_augment_ut_check.c +++ b/ini/ini_augment_ut_check.c @@ -76,7 +76,7 @@ START_TEST(test_ini_augment_merge_sections) "key1 = augment\n" "key3 = exists\n"; - char *builddir; + const char *builddir; uint32_t flags[3] = { INI_MS_DETECT , INI_MS_DETECT | INI_MS_PRESERVE, INI_MS_DETECT | INI_MS_OVERWRITE }; @@ -91,7 +91,7 @@ START_TEST(test_ini_augment_merge_sections) builddir = getenv("builddir"); if (builddir == NULL) { - builddir = strdup("."); + builddir = "."; } snprintf(base_path, PATH_MAX, "%s/tmp_augment_base.conf", builddir); @@ -221,7 +221,6 @@ START_TEST(test_ini_augment_merge_sections) remove(base_path); remove(augment_path); - free(builddir); } END_TEST @@ -238,7 +237,7 @@ START_TEST(test_ini_augment_empty_dir) struct ini_cfgobj *result_cfg = NULL; int size; char empty_dir_path[PATH_MAX] = {0}; - char *builddir; + const char *builddir; int32_t val; char base_cfg[] = "[section_one]\n" @@ -246,7 +245,7 @@ START_TEST(test_ini_augment_empty_dir) builddir = getenv("builddir"); if (builddir == NULL) { - builddir = strdup("."); + builddir = "."; } ret = snprintf(empty_dir_path, PATH_MAX, "%s/tmp_empty_dir", builddir); commit 522866dd20d6f9ec210ce73d78e7fb939d145ba8 Author: Lukas Slebodnik Date: Mon Sep 4 16:12:54 2017 +0200 BUILD: Fix linking of ini_augment_ut_check libref_array was used in the unit test but it was mot linked with libref_array CCLD ini_augment_ut_check /usr/bin/ld: ini/ini_augment_ut_check-ini_augment_ut_check.o: undefined reference to symbol 'ref_array_destroy@@REF_ARRAY_0.1.1' .libs/libref_array.so.1: error adding symbols: DSO missing from command line collect2: error: ld returned 1 exit status make[1]: *** [Makefile:1287: ini_augment_ut_check] Error 1 Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/Makefile.am b/Makefile.am index 63ff6fe..81e40e1 100644 --- a/Makefile.am +++ b/Makefile.am @@ -367,7 +367,8 @@ ini_configmod_ut_LDADD = libini_config.la libcollection.la \ ini_augment_ut_check_SOURCES = ini/ini_augment_ut_check.c ini_augment_ut_check_CFLAGS = $(AM_CFLAGS) $(CHECK_CFLAGS) -ini_augment_ut_check_LDADD = libini_config.la $(CHECK_LIBS) +ini_augment_ut_check_LDADD = libini_config.la $(CHECK_LIBS) \ + libref_array.la ini_configmod_ut_check_SOURCES = ini/ini_configmod_ut_check.c ini_configmod_ut_check_CFLAGS = $(AM_CFLAGS) $(CHECK_CFLAGS) commit 3d10336f7f23faff1de1ee575e819582b9a36d46 Author: Michal ?idek Date: Wed Aug 30 17:18:15 2017 +0200 INI: Add test for long values Resolves: https://pagure.io/SSSD/ding-libs/issue/3177 Reviewed-by: Jakub Hrozek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3178 diff --git a/ini/ini_parse_ut_check.c b/ini/ini_parse_ut_check.c index f5a671e..d72157b 100644 --- a/ini/ini_parse_ut_check.c +++ b/ini/ini_parse_ut_check.c @@ -235,6 +235,52 @@ START_TEST(test_ini_parse_section_key_conflict) } END_TEST +/* Maybe we should test even bigger values? */ +#define VALUE_LEN 10000 +/* The +100 is space for section name and key name. */ +#define CFGBUF_LEN (VALUE_LEN + 100) +START_TEST(test_ini_long_value) +{ + int ret; + struct ini_cfgobj *ini_cfg; + struct ini_cfgfile *file_ctx; + struct value_obj *vo; + char big_val_cfg[CFGBUF_LEN] = {0}; + char value[VALUE_LEN] = {0}; + char *value_got; + + /* The value is just a lot of As ending with '\0'*/ + memset(value, 'A', VALUE_LEN - 1); + + /* Create config file */ + ret = snprintf(big_val_cfg, CFGBUF_LEN, "[section]\nkey=%s", value); + + ret = ini_config_file_from_mem(big_val_cfg, strlen(big_val_cfg), + &file_ctx); + fail_unless(ret == EOK, "Failed to load config. Error %d.\n", ret); + + ret = ini_config_create(&ini_cfg); + fail_unless(ret == EOK, "Failed to create config. Error %d.\n", ret); + ret = ini_config_parse(file_ctx, INI_STOP_ON_ERROR, INI_MV1S_ALLOW, 0, + ini_cfg); + fail_if(ret != 0, "Failed to parse config. Error %d.\n", ret); + + ret = ini_get_config_valueobj("section", "key", ini_cfg, + INI_GET_FIRST_VALUE, &vo); + fail_unless(ret == EOK, "ini_get_config_valueobj returned %d\n: %s", ret, + strerror(ret)); + + value_got = ini_get_string_config_value(vo, &ret); + fail_unless(ret == EOK, "ini_get_int_config_value returned %d\n: %s", ret, + strerror(ret)); + + fail_unless(strcmp(value, value_got) == 0, "Expected and found values differ!\n"); + free(value_got); + ini_config_destroy(ini_cfg); + ini_config_file_destroy(file_ctx); +} +END_TEST + static Suite *ini_parse_suite(void) { Suite *s = suite_create("ini_parse_suite"); @@ -242,6 +288,7 @@ static Suite *ini_parse_suite(void) TCase *tc_parse = tcase_create("ini_parse"); tcase_add_test(tc_parse, test_ini_parse_non_kvp); tcase_add_test(tc_parse, test_ini_parse_section_key_conflict); + tcase_add_test(tc_parse, test_ini_long_value); suite_add_tcase(s, tc_parse); commit 7099295e99467fdf66f3e6da86c8e8b972960219 Author: Michal ?idek Date: Wed Aug 30 15:27:23 2017 +0200 INI: Allow longer values then PATH_MAX The older API used fgets to read the values and the size of buffer to hold the line was fixed. With the new API we use getline to get the whole line and this does not require pre-allocated buffer. The check for lenght was not necessary here. Resolves: https://pagure.io/SSSD/ding-libs/issue/3177 Reviewed-by: Jakub Hrozek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3178 diff --git a/ini/ini_parse.c b/ini/ini_parse.c index 55891ec..8d50725 100644 --- a/ini/ini_parse.c +++ b/ini/ini_parse.c @@ -338,31 +338,22 @@ static int parser_read(struct parser_obj *po) free(buffer); } else { - /* Check length */ - if (len >= BUFFER_SIZE) { - TRACE_ERROR_STRING("Too long", ""); - action = PARSE_ERROR; - po->last_error = ERR_LONGDATA; - free(buffer); + /* Trim end line */ + i = len - 1; + while ((i >= 0) && + ((buffer[i] == '\r') || + (buffer[i] == '\n'))) { + TRACE_INFO_NUMBER("Offset:", i); + TRACE_INFO_NUMBER("Code:", buffer[i]); + buffer[i] = '\0'; + i--; } - else { - /* Trim end line */ - i = len - 1; - while ((i >= 0) && - ((buffer[i] == '\r') || - (buffer[i] == '\n'))) { - TRACE_INFO_NUMBER("Offset:", i); - TRACE_INFO_NUMBER("Code:", buffer[i]); - buffer[i] = '\0'; - i--; - } - po->last_read = buffer; - po->last_read_len = i + 1; - action = PARSE_INSPECT; - TRACE_INFO_STRING("Line:", po->last_read); - TRACE_INFO_NUMBER("Linelen:", po->last_read_len); - } + po->last_read = buffer; + po->last_read_len = i + 1; + action = PARSE_INSPECT; + TRACE_INFO_STRING("Line:", po->last_read); + TRACE_INFO_NUMBER("Linelen:", po->last_read_len); } } commit 8ad8417d859997f849cf68a166259c2667214fa9 Author: Michal ?idek Date: Tue Aug 29 18:44:53 2017 +0200 INI: do not use readdir_r readdir_r has some limitations and was deprecated in favor of readdir. See man 3 readdir (not to confuse with man 2 readdir). Resolves: https://pagure.io/SSSD/ding-libs/issue/3175 Merges: https://pagure.io/SSSD/ding-libs/pull-request/3176 Reviewed-by: Jakub Hrozek diff --git a/ini/ini_augment.c b/ini/ini_augment.c index b92f030..11b0e3b 100644 --- a/ini/ini_augment.c +++ b/ini/ini_augment.c @@ -363,14 +363,11 @@ static int ini_aug_construct_list(char *dirname , int error = EOK; DIR *dir = NULL; - struct dirent *entry = NULL; struct dirent *entryp = NULL; char *snipname = NULL; char fullname[PATH_MAX + 1] = {0}; struct ref_array *ra_regex = NULL; bool match = false; - int len = 0; - int name_max; TRACE_FLOW_ENTRY(); @@ -399,55 +396,42 @@ static int ini_aug_construct_list(char *dirname , return EOK; } - /* Allocate memory for entry (as said in man pages)*/ - name_max = pathconf(dirname, _PC_NAME_MAX); - if (name_max == -1) /* Limit not defined, or error */ - name_max = 1024; /* Take a guess */ - len = offsetof(struct dirent, d_name) + name_max + 1; - entry = malloc(len); - if (entry == NULL) { - TRACE_ERROR_NUMBER("Failed to allocate memory.", ENOMEM); - ref_array_destroy(ra_regex); - closedir(dir); - return ENOMEM; - } - /* Loop through the directory */ while (true) { - error = readdir_r(dir, entry, &entryp); - if (error) { + errno = 0; + entryp = readdir(dir); + if (entryp == NULL && errno != 0) { + error = errno; TRACE_ERROR_NUMBER("Failed to read directory.", error); ref_array_destroy(ra_regex); closedir(dir); - free(entry); return error; } /* Stop looping if we reached the end */ if (entryp == NULL) break; - TRACE_INFO_STRING("Processing", entry->d_name); + TRACE_INFO_STRING("Processing", entryp->d_name); /* Always skip current and parent dirs */ - if ((strncmp(entry->d_name, + if ((strncmp(entryp->d_name, INI_CURRENT_DIR, sizeof(INI_CURRENT_DIR)) == 0) || - (strncmp(entry->d_name, + (strncmp(entryp->d_name, INI_PARENT_DIR, sizeof(INI_PARENT_DIR)) == 0)) continue; From tjaalton at moszumanska.debian.org Sat Dec 23 04:20:56 2017 From: tjaalton at moszumanska.debian.org (Timo Aaltonen) Date: Sat, 23 Dec 2017 04:20:56 +0000 Subject: [Pkg-sssd-devel] ding-libs: Changes to 'upstream' Message-ID: .git-commit-template | 9 + Makefile.am | 27 ++- collection/collection.c | 5 collection/collection_tools.c | 2 configure.ac | 5 contrib/ding-libs.spec.in | 6 dhash/dhash.c | 31 ++- dhash/dhash.h | 4 dhash/dhash_ut_check.c | 226 +++++++++++++++++++++++++++ dhash/examples/dhash_test.c | 3 ini/ini.d/merge.validator | 16 - ini/ini_augment.c | 120 ++++++-------- ini/ini_augment_ut_check.c | 343 ++++++++++++++++++++++++++++++++++++++++++ ini/ini_configmod.c | 3 ini/ini_configobj.c | 71 +++++--- ini/ini_configobj.h | 9 - ini/ini_defines.h | 5 ini/ini_fileobj.c | 1 ini/ini_get_value.c | 4 ini/ini_get_valueobj.c | 1 ini/ini_parse.c | 71 +++----- ini/ini_parse_ut_check.c | 157 +++++++++++++++++++ version.m4 | 6 23 files changed, 946 insertions(+), 179 deletions(-) New commits: commit ee13e47d309a87d8631cef92df3a47c0c734741d Author: Michal ?idek Date: Thu Sep 7 11:58:34 2017 +0200 Update versions before 0.6.1 release Reviewed-by: Lukas Slebodnik diff --git a/version.m4 b/version.m4 index 08814fe..6022c18 100644 --- a/version.m4 +++ b/version.m4 @@ -1,5 +1,5 @@ # Primary version number -m4_define([VERSION_NUMBER], [0.6.0]) +m4_define([VERSION_NUMBER], [0.6.1]) # If the PRERELEASE_VERSION_NUMBER is set, we'll append # it to the release tag when creating an RPM or SRPM @@ -11,8 +11,8 @@ m4_define([VERSION_NUMBER], [0.6.0]) m4_define([PRERELEASE_VERSION_NUMBER], []) m4_define([PATH_UTILS_VERSION_NUMBER], [0.2.1]) -m4_define([DHASH_VERSION_NUMBER], [0.4.3]) +m4_define([DHASH_VERSION_NUMBER], [0.5.0]) m4_define([COLLECTION_VERSION_NUMBER], [0.7.0]) m4_define([REF_ARRAY_VERSION_NUMBER], [0.1.5]) m4_define([BASICOBJECTS_VERSION_NUMBER], [0.1.1]) -m4_define([INI_CONFIG_VERSION_NUMBER], [1.3.0]) +m4_define([INI_CONFIG_VERSION_NUMBER], [1.3.1]) commit 403a6fefe7a06c1136e0f0e40391e5f2ec6a8981 Author: Michal ?idek Date: Thu Sep 7 12:29:47 2017 +0200 Bump version info Changes have been made to: - libdhash - added new key type for constant strings (added interface) - libcollection - just updated code (no interface changes) - libini_config - allowed new combination of parsing flags (no interface changes) Reviewed-by: Lukas Slebodnik diff --git a/Makefile.am b/Makefile.am index 81e40e1..d032739 100644 --- a/Makefile.am +++ b/Makefile.am @@ -110,7 +110,7 @@ dist_include_HEADERS += dhash/dhash.h libdhash_la_SOURCES = dhash/dhash.c libdhash_la_DEPENDENCIES = dhash/libdhash.sym libdhash_la_LDFLAGS = \ - -version-info 1:2:0 \ + -version-info 2:0:1 \ -Wl,--version-script=$(top_srcdir)/dhash/libdhash.sym check_PROGRAMS += dhash_test dhash_example @@ -166,7 +166,7 @@ libcollection_la_SOURCES = \ trace/trace.h libcollection_la_DEPENDENCIES = collection/libcollection.sym libcollection_la_LDFLAGS = \ - -version-info 5:0:1 \ + -version-info 5:1:1 \ -Wl,--version-script=$(top_srcdir)/collection/libcollection.sym check_PROGRAMS += \ @@ -292,7 +292,7 @@ libini_config_la_LIBADD = \ libref_array.la \ libbasicobjects.la libini_config_la_LDFLAGS = \ - -version-info 7:0:2 \ + -version-info 7:1:2 \ -Wl,--version-script=$(top_srcdir)/ini/libini_config.sym dist_noinst_DATA += \ diff --git a/contrib/ding-libs.spec.in b/contrib/ding-libs.spec.in index 3fc079c..0f9b877 100644 --- a/contrib/ding-libs.spec.in +++ b/contrib/ding-libs.spec.in @@ -131,7 +131,7 @@ time properties %defattr(-,root,root,-) %doc COPYING COPYING.LESSER %{_libdir}/libdhash.so.1 -%{_libdir}/libdhash.so.1.0.2 +%{_libdir}/libdhash.so.1.1.0 %files -n libdhash-devel %defattr(-,root,root,-) @@ -175,7 +175,7 @@ and serialization %doc COPYING %doc COPYING.LESSER %{_libdir}/libcollection.so.4 -%{_libdir}/libcollection.so.4.1.0 +%{_libdir}/libcollection.so.4.1.1 %files -n libcollection-devel %defattr(-,root,root,-) @@ -304,7 +304,7 @@ structure %doc COPYING %doc COPYING.LESSER %{_libdir}/libini_config.so.5 -%{_libdir}/libini_config.so.5.2.0 +%{_libdir}/libini_config.so.5.2.1 %files -n libini_config-devel %defattr(-,root,root,-) commit b73372021f343e6ef50acadea8786bfb297af75c Author: Lukas Slebodnik Date: Mon Sep 4 19:24:06 2017 +0200 DHASH: Do not use c99 structure initialisation c99 allows to initialize a structure by specifying the structure element names e.g. point = { .x = 0, .y = 0}; But it was used just in unit test and therefore it does not make a sense to increase requirements from c89 -> c99 Reviewed-by: Michal ?idek merges: https://pagure.io/SSSD/ding-libs/pull-request/3180 diff --git a/dhash/dhash_ut_check.c b/dhash/dhash_ut_check.c index 246e162..e724931 100644 --- a/dhash/dhash_ut_check.c +++ b/dhash/dhash_ut_check.c @@ -40,9 +40,16 @@ START_TEST(test_key_const_string) hash_table_t *htable; int ret; hash_value_t ret_val; - hash_value_t enter_val1 = {.type = HASH_VALUE_INT, .i = 1}; - hash_value_t enter_val2 = {.type = HASH_VALUE_INT, .i = 2}; - hash_key_t key = {.type = HASH_KEY_CONST_STRING, .c_str = "constant"}; + hash_value_t enter_val1; + hash_value_t enter_val2; + hash_key_t key; + + enter_val1.type = HASH_VALUE_INT; + enter_val1.i = 1; + enter_val2.type = HASH_VALUE_INT; + enter_val2.i = 2; + key.type = HASH_KEY_CONST_STRING; + key.c_str = "constant"; ret = hash_create(HTABLE_SIZE, &htable, NULL, NULL); fail_unless(ret == 0); @@ -87,11 +94,15 @@ START_TEST(test_key_string) hash_table_t *htable; int ret; hash_value_t ret_val; - hash_value_t enter_val1 = {.type = HASH_VALUE_INT, .i = 1}; - hash_value_t enter_val2 = {.type = HASH_VALUE_INT, .i = 2}; + hash_value_t enter_val1; + hash_value_t enter_val2; hash_key_t key; char str[] = "non_constant"; + enter_val1.type = HASH_VALUE_INT; + enter_val1.i = 1; + enter_val2.type = HASH_VALUE_INT; + enter_val2.i = 2; key.type = HASH_KEY_STRING; key.str = str; @@ -139,9 +150,16 @@ START_TEST(test_key_ulong) hash_table_t *htable; int ret; hash_value_t ret_val; - hash_value_t enter_val1 = {.type = HASH_VALUE_INT, .i = 1}; - hash_value_t enter_val2 = {.type = HASH_VALUE_INT, .i = 2}; - hash_key_t key = {.type = HASH_KEY_ULONG, .ul = 68ul}; + hash_value_t enter_val1; + hash_value_t enter_val2; + hash_key_t key; + + enter_val1.type = HASH_VALUE_INT; + enter_val1.i = 1; + enter_val2.type = HASH_VALUE_INT; + enter_val2.i = 2; + key.type = HASH_KEY_ULONG; + key.ul = 68ul; ret = hash_create(HTABLE_SIZE, &htable, NULL, NULL); fail_unless(ret == 0); commit 321e84768a75fb5bbbbec8922d50f1de59affe4c Author: Lukas Slebodnik Date: Mon Sep 4 17:45:49 2017 +0200 COLLECTION: Fix misused comma Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/collection/collection_tools.c b/collection/collection_tools.c index 7e60285..36282a0 100644 --- a/collection/collection_tools.c +++ b/collection/collection_tools.c @@ -647,7 +647,7 @@ int col_print_item(struct collection_item *handle, const char *name) else { if (buf_data.buffer != NULL) { if (buf_data.length > 0) buf_data.length--; - buf_data.buffer[buf_data.length] = '\0', + buf_data.buffer[buf_data.length] = '\0'; printf("%s\n", buf_data.buffer); free(buf_data.buffer); } commit c43a7f0005bd0a5e14a9ca33e10fe2b1413f9e74 Author: Lukas Slebodnik Date: Mon Sep 4 17:44:56 2017 +0200 INI: Fix doxygen comment for ini_errobj_create Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/ini/ini_configobj.h b/ini/ini_configobj.h index 9d5b516..476ecec 100644 --- a/ini/ini_configobj.h +++ b/ini/ini_configobj.h @@ -2071,7 +2071,7 @@ struct ini_errobj; * hold error messages from generators. To add messages to * the structure use \ref ini_errobj_add_msg. * - * @param[out] errobj container for errors. + * @param[out] _errobj container for errors. * * @return Zero on success, nonzero value in case of error. */ commit 64e54a72d7e997c6a8f12ac43ca3c0c27dabe93a Author: Lukas Slebodnik Date: Mon Sep 4 17:37:03 2017 +0200 COLLECTION: Remove unused macros Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/collection/collection.c b/collection/collection.c index 3d834eb..f7d089b 100644 --- a/collection/collection.c +++ b/collection/collection.c @@ -44,11 +44,6 @@ #define EINTR_INTERNAL 10000 -/* Potential subject for management with libtools */ -#define DATE_FORMAT "%c" - -#define TIME_ARRAY_SIZE 100 - /* Magic numbers for hashing */ #if SIZEOF_LONG == 8 #define FNV1a_prime 1099511628211ul commit b892f7220a692e64774c307c26156276d788087b Author: Lukas Slebodnik Date: Mon Sep 4 17:28:04 2017 +0200 Do not define _GNU_SOURCE Let autotools to detect gnu features. Patch also prefer AC_USE_SYSTEM_EXTENSIONS to deprecated AC_GNU_SOURCE https://www.gnu.org/software/autoconf/manual/autoconf-2.67/html_node/Obsolete-Macros.html#index-AC_005fGNU_005fSOURCE-1960 Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/configure.ac b/configure.ac index 048d3ad..1e8e0d2 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,10 @@ AC_INIT([ding-libs], [sssd-devel at lists.fedorahosted.org]) AC_CONFIG_SRCDIR([README]) AC_CONFIG_AUX_DIR([build]) -AC_GNU_SOURCE + +m4_ifdef([AC_USE_SYSTEM_EXTENSIONS], + [AC_USE_SYSTEM_EXTENSIONS], + [AC_GNU_SOURCE]) AM_INIT_AUTOMAKE([-Wall foreign subdir-objects]) AM_PROG_CC_C_O m4_ifdef([AM_PROG_AR], [AM_PROG_AR]) diff --git a/ini/ini_augment.c b/ini/ini_augment.c index 11b0e3b..af5c0b6 100644 --- a/ini/ini_augment.c +++ b/ini/ini_augment.c @@ -21,7 +21,6 @@ along with INI Library. If not, see . */ -#define _GNU_SOURCE /* for vasprintf */ #include "config.h" #include #include diff --git a/ini/ini_configmod.c b/ini/ini_configmod.c index 02a188f..da4175c 100644 --- a/ini/ini_configmod.c +++ b/ini/ini_configmod.c @@ -19,12 +19,11 @@ along with INI Library. If not, see . */ -#define _GNU_SOURCE /* for asprintf */ +#include "config.h" #include #include #include #include -#include "config.h" #include "trace.h" #include "ref_array.h" #include "simplebuffer.h" diff --git a/ini/ini_fileobj.c b/ini/ini_fileobj.c index 421d22b..d478d93 100644 --- a/ini/ini_fileobj.c +++ b/ini/ini_fileobj.c @@ -18,7 +18,6 @@ You should have received a copy of the GNU Lesser General Public License along with INI Library. If not, see . */ -#define _GNU_SOURCE /* for asprintf */ #include "config.h" #include #include commit 6002a75d2d24a69c46651db0bc723feb7d6aae2b Author: Lukas Slebodnik Date: Mon Sep 4 17:14:24 2017 +0200 INI: Fix warning Walloc-size-larger-than ini/ini_get_value.c: In function ?get_bin_config_value?: ini/ini_get_value.c:552:11: warning: argument 1 range [18446744072635809792, 18446744073709551615] exceeds maximum object size 9223372036854775807 [-Walloc-size-larger-than=] value = malloc(len / 2); ~~~~~~^~~~~~~~~~~~~~~~~ In file included from ini/ini_get_value.c:27:0: /usr/include/stdlib.h:424:14: note: in a call to allocation function ?malloc? declared here extern void *malloc (size_t __size) __THROW __attribute_malloc__ __wur; ^~~~~~ Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/ini/ini_get_value.c b/ini/ini_get_value.c index 0afadd0..2441c14 100644 --- a/ini/ini_get_value.c +++ b/ini/ini_get_value.c @@ -501,12 +501,12 @@ const char *get_const_string_config_value(struct collection_item *item, int *err char *get_bin_config_value(struct collection_item *item, int *length, int *error) { - int i; + unsigned i; char *value = NULL; const char *buff; int size = 0; unsigned char hex; - int len; + unsigned len; const char *str; TRACE_FLOW_STRING("get_bin_config_value", "Entry"); commit 7db68eb4d8b1955abfefd0676db9329aa6f5f372 Author: Lukas Slebodnik Date: Mon Sep 4 17:09:06 2017 +0200 DHASH: Suppress gcc7 warning Such comment is recognized by -Wimplicit-fallthrough=4 dhash/dhash.c: In function ?hash_iter_next?: dhash/dhash.c:748:23: warning: this statement may fall through [-Wimplicit-fallthrough=] state = HI_STATE_2; ~~~~~~^~~~~~~~~~~~ dhash/dhash.c:750:13: note: here case HI_STATE_2: ^~~~ dhash/dhash.c:756:23: warning: this statement may fall through [-Wimplicit-fallthrough=] state = HI_STATE_3A; ~~~~~~^~~~~~~~~~~~~ dhash/dhash.c:758:13: note: here case HI_STATE_3A: ^~~~ Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/dhash/dhash.c b/dhash/dhash.c index 98439e8..6b4b51d 100644 --- a/dhash/dhash.c +++ b/dhash/dhash.c @@ -746,6 +746,7 @@ static hash_entry_t *hash_iter_next(struct hash_iter_context_t *iter_arg) } iter->j = 0; state = HI_STATE_2; + /* FALLTHROUGH */ case HI_STATE_2: if (iter->j >= iter->table->segment_size) { @@ -754,6 +755,7 @@ static hash_entry_t *hash_iter_next(struct hash_iter_context_t *iter_arg) } iter->p = iter->s[iter->j]; state = HI_STATE_3A; + /* FALLTHROUGH */ case HI_STATE_3A: if (iter->p == NULL) { commit 7a95fde3853d260146a5706e53c4750777db281c Author: Lukas Slebodnik Date: Mon Sep 4 16:34:56 2017 +0200 INI: Fix memory leaks in unit test test_ini_augment_empty_dir Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/ini/ini_augment_ut_check.c b/ini/ini_augment_ut_check.c index 36a28ec..f7e3b66 100644 --- a/ini/ini_augment_ut_check.c +++ b/ini/ini_augment_ut_check.c @@ -308,6 +308,9 @@ START_TEST(test_ini_augment_empty_dir) val = ini_get_int32_config_value(vo, 1, 100, NULL); fail_unless(val == 1, "Expected attribute value not found.\n"); + ini_free_attribute_list(attrs_list); + ini_free_section_list(section_list); + ini_config_destroy(result_cfg); ini_config_destroy(ini_cfg); ini_config_file_destroy(file_ctx); remove(empty_dir_path); commit 5ef9d8106848e2d436a7ba6729bc281f3e1a15b2 Author: Lukas Slebodnik Date: Mon Sep 4 16:20:13 2017 +0200 INI: Fix usage of buiddir in ini_augment_ut_check The function getenv does not return dynamically allocated string. Therefore we cannot call free for value returned from this function. Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 ==26075== 1 errors in context 1 of 4: ==26075== Invalid free() / delete / delete[] / realloc() ==26075== at 0x4C30D18: free (vg_replace_malloc.c:530) ==26075== by 0x401E31: test_ini_augment_merge_sections (ini_augment_ut_check.c:224) ==26075== by 0x505A9EB: ??? (in /usr/lib64/libcheck.so.0.0.0) ==26075== by 0x505AEED: srunner_run_tagged (in /usr/lib64/libcheck.so.0.0.0) ==26075== by 0x401223: main (ini_augment_ut_check.c:337) ==26075== Address 0x1fff0006c1 is on thread 1's stack diff --git a/ini/ini_augment_ut_check.c b/ini/ini_augment_ut_check.c index ee1162d..36a28ec 100644 --- a/ini/ini_augment_ut_check.c +++ b/ini/ini_augment_ut_check.c @@ -76,7 +76,7 @@ START_TEST(test_ini_augment_merge_sections) "key1 = augment\n" "key3 = exists\n"; - char *builddir; + const char *builddir; uint32_t flags[3] = { INI_MS_DETECT , INI_MS_DETECT | INI_MS_PRESERVE, INI_MS_DETECT | INI_MS_OVERWRITE }; @@ -91,7 +91,7 @@ START_TEST(test_ini_augment_merge_sections) builddir = getenv("builddir"); if (builddir == NULL) { - builddir = strdup("."); + builddir = "."; } snprintf(base_path, PATH_MAX, "%s/tmp_augment_base.conf", builddir); @@ -221,7 +221,6 @@ START_TEST(test_ini_augment_merge_sections) remove(base_path); remove(augment_path); - free(builddir); } END_TEST @@ -238,7 +237,7 @@ START_TEST(test_ini_augment_empty_dir) struct ini_cfgobj *result_cfg = NULL; int size; char empty_dir_path[PATH_MAX] = {0}; - char *builddir; + const char *builddir; int32_t val; char base_cfg[] = "[section_one]\n" @@ -246,7 +245,7 @@ START_TEST(test_ini_augment_empty_dir) builddir = getenv("builddir"); if (builddir == NULL) { - builddir = strdup("."); + builddir = "."; } ret = snprintf(empty_dir_path, PATH_MAX, "%s/tmp_empty_dir", builddir); commit 522866dd20d6f9ec210ce73d78e7fb939d145ba8 Author: Lukas Slebodnik Date: Mon Sep 4 16:12:54 2017 +0200 BUILD: Fix linking of ini_augment_ut_check libref_array was used in the unit test but it was mot linked with libref_array CCLD ini_augment_ut_check /usr/bin/ld: ini/ini_augment_ut_check-ini_augment_ut_check.o: undefined reference to symbol 'ref_array_destroy@@REF_ARRAY_0.1.1' .libs/libref_array.so.1: error adding symbols: DSO missing from command line collect2: error: ld returned 1 exit status make[1]: *** [Makefile:1287: ini_augment_ut_check] Error 1 Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3179 diff --git a/Makefile.am b/Makefile.am index 63ff6fe..81e40e1 100644 --- a/Makefile.am +++ b/Makefile.am @@ -367,7 +367,8 @@ ini_configmod_ut_LDADD = libini_config.la libcollection.la \ ini_augment_ut_check_SOURCES = ini/ini_augment_ut_check.c ini_augment_ut_check_CFLAGS = $(AM_CFLAGS) $(CHECK_CFLAGS) -ini_augment_ut_check_LDADD = libini_config.la $(CHECK_LIBS) +ini_augment_ut_check_LDADD = libini_config.la $(CHECK_LIBS) \ + libref_array.la ini_configmod_ut_check_SOURCES = ini/ini_configmod_ut_check.c ini_configmod_ut_check_CFLAGS = $(AM_CFLAGS) $(CHECK_CFLAGS) commit 3d10336f7f23faff1de1ee575e819582b9a36d46 Author: Michal ?idek Date: Wed Aug 30 17:18:15 2017 +0200 INI: Add test for long values Resolves: https://pagure.io/SSSD/ding-libs/issue/3177 Reviewed-by: Jakub Hrozek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3178 diff --git a/ini/ini_parse_ut_check.c b/ini/ini_parse_ut_check.c index f5a671e..d72157b 100644 --- a/ini/ini_parse_ut_check.c +++ b/ini/ini_parse_ut_check.c @@ -235,6 +235,52 @@ START_TEST(test_ini_parse_section_key_conflict) } END_TEST +/* Maybe we should test even bigger values? */ +#define VALUE_LEN 10000 +/* The +100 is space for section name and key name. */ +#define CFGBUF_LEN (VALUE_LEN + 100) +START_TEST(test_ini_long_value) +{ + int ret; + struct ini_cfgobj *ini_cfg; + struct ini_cfgfile *file_ctx; + struct value_obj *vo; + char big_val_cfg[CFGBUF_LEN] = {0}; + char value[VALUE_LEN] = {0}; + char *value_got; + + /* The value is just a lot of As ending with '\0'*/ + memset(value, 'A', VALUE_LEN - 1); + + /* Create config file */ + ret = snprintf(big_val_cfg, CFGBUF_LEN, "[section]\nkey=%s", value); + + ret = ini_config_file_from_mem(big_val_cfg, strlen(big_val_cfg), + &file_ctx); + fail_unless(ret == EOK, "Failed to load config. Error %d.\n", ret); + + ret = ini_config_create(&ini_cfg); + fail_unless(ret == EOK, "Failed to create config. Error %d.\n", ret); + ret = ini_config_parse(file_ctx, INI_STOP_ON_ERROR, INI_MV1S_ALLOW, 0, + ini_cfg); + fail_if(ret != 0, "Failed to parse config. Error %d.\n", ret); + + ret = ini_get_config_valueobj("section", "key", ini_cfg, + INI_GET_FIRST_VALUE, &vo); + fail_unless(ret == EOK, "ini_get_config_valueobj returned %d\n: %s", ret, + strerror(ret)); + + value_got = ini_get_string_config_value(vo, &ret); + fail_unless(ret == EOK, "ini_get_int_config_value returned %d\n: %s", ret, + strerror(ret)); + + fail_unless(strcmp(value, value_got) == 0, "Expected and found values differ!\n"); + free(value_got); + ini_config_destroy(ini_cfg); + ini_config_file_destroy(file_ctx); +} +END_TEST + static Suite *ini_parse_suite(void) { Suite *s = suite_create("ini_parse_suite"); @@ -242,6 +288,7 @@ static Suite *ini_parse_suite(void) TCase *tc_parse = tcase_create("ini_parse"); tcase_add_test(tc_parse, test_ini_parse_non_kvp); tcase_add_test(tc_parse, test_ini_parse_section_key_conflict); + tcase_add_test(tc_parse, test_ini_long_value); suite_add_tcase(s, tc_parse); commit 7099295e99467fdf66f3e6da86c8e8b972960219 Author: Michal ?idek Date: Wed Aug 30 15:27:23 2017 +0200 INI: Allow longer values then PATH_MAX The older API used fgets to read the values and the size of buffer to hold the line was fixed. With the new API we use getline to get the whole line and this does not require pre-allocated buffer. The check for lenght was not necessary here. Resolves: https://pagure.io/SSSD/ding-libs/issue/3177 Reviewed-by: Jakub Hrozek Merges: https://pagure.io/SSSD/ding-libs/pull-request/3178 diff --git a/ini/ini_parse.c b/ini/ini_parse.c index 55891ec..8d50725 100644 --- a/ini/ini_parse.c +++ b/ini/ini_parse.c @@ -338,31 +338,22 @@ static int parser_read(struct parser_obj *po) free(buffer); } else { - /* Check length */ - if (len >= BUFFER_SIZE) { - TRACE_ERROR_STRING("Too long", ""); - action = PARSE_ERROR; - po->last_error = ERR_LONGDATA; - free(buffer); + /* Trim end line */ + i = len - 1; + while ((i >= 0) && + ((buffer[i] == '\r') || + (buffer[i] == '\n'))) { + TRACE_INFO_NUMBER("Offset:", i); + TRACE_INFO_NUMBER("Code:", buffer[i]); + buffer[i] = '\0'; + i--; } - else { - /* Trim end line */ - i = len - 1; - while ((i >= 0) && - ((buffer[i] == '\r') || - (buffer[i] == '\n'))) { - TRACE_INFO_NUMBER("Offset:", i); - TRACE_INFO_NUMBER("Code:", buffer[i]); - buffer[i] = '\0'; - i--; - } - po->last_read = buffer; - po->last_read_len = i + 1; - action = PARSE_INSPECT; - TRACE_INFO_STRING("Line:", po->last_read); - TRACE_INFO_NUMBER("Linelen:", po->last_read_len); - } + po->last_read = buffer; + po->last_read_len = i + 1; + action = PARSE_INSPECT; + TRACE_INFO_STRING("Line:", po->last_read); + TRACE_INFO_NUMBER("Linelen:", po->last_read_len); } } commit 8ad8417d859997f849cf68a166259c2667214fa9 Author: Michal ?idek Date: Tue Aug 29 18:44:53 2017 +0200 INI: do not use readdir_r readdir_r has some limitations and was deprecated in favor of readdir. See man 3 readdir (not to confuse with man 2 readdir). Resolves: https://pagure.io/SSSD/ding-libs/issue/3175 Merges: https://pagure.io/SSSD/ding-libs/pull-request/3176 Reviewed-by: Jakub Hrozek diff --git a/ini/ini_augment.c b/ini/ini_augment.c index b92f030..11b0e3b 100644 --- a/ini/ini_augment.c +++ b/ini/ini_augment.c @@ -363,14 +363,11 @@ static int ini_aug_construct_list(char *dirname , int error = EOK; DIR *dir = NULL; - struct dirent *entry = NULL; struct dirent *entryp = NULL; char *snipname = NULL; char fullname[PATH_MAX + 1] = {0}; struct ref_array *ra_regex = NULL; bool match = false; - int len = 0; - int name_max; TRACE_FLOW_ENTRY(); @@ -399,55 +396,42 @@ static int ini_aug_construct_list(char *dirname , return EOK; } - /* Allocate memory for entry (as said in man pages)*/ - name_max = pathconf(dirname, _PC_NAME_MAX); - if (name_max == -1) /* Limit not defined, or error */ - name_max = 1024; /* Take a guess */ - len = offsetof(struct dirent, d_name) + name_max + 1; - entry = malloc(len); - if (entry == NULL) { - TRACE_ERROR_NUMBER("Failed to allocate memory.", ENOMEM); - ref_array_destroy(ra_regex); - closedir(dir); - return ENOMEM; - } - /* Loop through the directory */ while (true) { - error = readdir_r(dir, entry, &entryp); - if (error) { + errno = 0; + entryp = readdir(dir); + if (entryp == NULL && errno != 0) { + error = errno; TRACE_ERROR_NUMBER("Failed to read directory.", error); ref_array_destroy(ra_regex); closedir(dir); - free(entry); return error; } /* Stop looping if we reached the end */ if (entryp == NULL) break; - TRACE_INFO_STRING("Processing", entry->d_name); + TRACE_INFO_STRING("Processing", entryp->d_name); /* Always skip current and parent dirs */ - if ((strncmp(entry->d_name, + if ((strncmp(entryp->d_name, INI_CURRENT_DIR, sizeof(INI_CURRENT_DIR)) == 0) || - (strncmp(entry->d_name, + (strncmp(entryp->d_name, INI_PARENT_DIR, sizeof(INI_PARENT_DIR)) == 0)) continue; - error = path_concat(fullname, PATH_MAX, dirname, entry->d_name); + error = path_concat(fullname, PATH_MAX, dirname, entryp->d_name); if (error != EOK) { TRACE_ERROR_NUMBER("path_concat failed.", error); ref_array_destroy(ra_regex); closedir(dir); - free(entry); return error; } /* Match names */ - match = ini_aug_match_name(entry->d_name, ra_regex); + match = ini_aug_match_name(entryp->d_name, ra_regex); if (match) { if(ini_check_file_perm(fullname, check_perm, ra_err)) { @@ -458,7 +442,6 @@ static int ini_aug_construct_list(char *dirname , TRACE_ERROR_NUMBER("Failed to dup string.", ENOMEM); ref_array_destroy(ra_regex); closedir(dir); - free(entry); return ENOMEM; } @@ -469,7 +452,6 @@ static int ini_aug_construct_list(char *dirname , ENOMEM); ref_array_destroy(ra_regex); closedir(dir); - free(entry); return ENOMEM; } } @@ -482,7 +464,6 @@ static int ini_aug_construct_list(char *dirname , } } - free(entry); closedir(dir); ref_array_destroy(ra_regex); commit d4088fadf6c397f37359b4b0822365fc82dcb75b Author: Michal ?idek Date: Thu Aug 24 13:35:12 2017 +0200 INI: Unit test for augmentation with empty dir Merging a configuration with snippets from empty directory should result in the same configuration. Resolves: https://pagure.io/SSSD/ding-libs/issue/2776 Meges: https://pagure.io/SSSD/ding-libs/pull-request/3174 Reviewed-by: Alexander Scheel diff --git a/ini/ini_augment_ut_check.c b/ini/ini_augment_ut_check.c index be475a3..ee1162d 100644 --- a/ini/ini_augment_ut_check.c +++ b/ini/ini_augment_ut_check.c @@ -225,12 +225,103 @@ START_TEST(test_ini_augment_merge_sections) } END_TEST +START_TEST(test_ini_augment_empty_dir) +{ + int ret; + struct ini_cfgobj *ini_cfg; + struct ini_cfgfile *file_ctx; + struct value_obj *vo; + const char *patterns[] = { ".*", NULL }; + const char *sections[] = { ".*", NULL }; + char **section_list; + char **attrs_list; + struct ini_cfgobj *result_cfg = NULL; + int size; + char empty_dir_path[PATH_MAX] = {0}; + char *builddir; + int32_t val; + char base_cfg[] = + "[section_one]\n" + "one = 1\n"; + + builddir = getenv("builddir"); + if (builddir == NULL) { + builddir = strdup("."); + } + + ret = snprintf(empty_dir_path, PATH_MAX, "%s/tmp_empty_dir", builddir); + fail_if(ret > PATH_MAX || ret < 0, "snprintf failed\n"); + + ret = ini_config_file_from_mem(base_cfg, strlen(base_cfg), + &file_ctx); + fail_unless(ret == EOK, "Failed to load config. Error %d.\n", ret); + + ret = ini_config_create(&ini_cfg); + fail_unless(ret == EOK, "Failed to create config. Error %d.\n", ret); + ret = ini_config_parse(file_ctx, INI_STOP_ON_ERROR, INI_MV1S_ALLOW, 0, + ini_cfg); + fail_unless(ret == EOK, "Failed to parse configuration. Error %d.\n", ret); + + /* Create an empty directory */ + ret = mkdir(empty_dir_path, 0700); + if (ret == -1) { + ret = errno; + fail_if(ret != EEXIST, + "Failed to create empty directory. Error %d.\n", errno); + } + + ret = ini_config_augment(ini_cfg, + empty_dir_path, + patterns, + sections, + NULL, + INI_STOP_ON_ANY, + INI_MV1S_OVERWRITE, + INI_PARSE_NOWRAP, + INI_MV2S_OVERWRITE, + &result_cfg, + NULL, + NULL); + + fail_unless(ret == EOK); + + /* If the snippet directory is empty, result_cfg should be the original + * ini_cfg and not NULL */ + fail_if(result_cfg == NULL); + + /* Now check if the content of result_cfg is what we expected */ + section_list = ini_get_section_list(result_cfg, &size, NULL); + fail_unless(size == 1); + fail_unless(strcmp(section_list[0], "section_one") == 0); + + attrs_list = ini_get_attribute_list(result_cfg, section_list[0], + &size, NULL); + fail_unless(size == 1); + fail_unless(strcmp(attrs_list[0], "one") == 0); + + ret = ini_get_config_valueobj(section_list[0], + attrs_list[0], + result_cfg, + INI_GET_FIRST_VALUE, + &vo); + fail_unless(ret == 0); + + val = ini_get_int32_config_value(vo, 1, 100, NULL); + fail_unless(val == 1, "Expected attribute value not found.\n"); + + ini_config_destroy(ini_cfg); + ini_config_file_destroy(file_ctx); + remove(empty_dir_path); +} +END_TEST + static Suite *ini_augment_suite(void) { Suite *s = suite_create("ini_augment_suite"); TCase *tc_augment = tcase_create("ini_augment"); tcase_add_test(tc_augment, test_ini_augment_merge_sections); + tcase_add_test(tc_augment, test_ini_augment_empty_dir); suite_add_tcase(s, tc_augment); commit e322192d1711677e78b197915b1a12537a0e510b Author: Alexander Scheel Date: Wed Jul 26 13:35:45 2017 -0400 INI: Test INI_MS_DETECT non-exclusive behavior This adds test cases for the non-exclusive behavior of INI_MS_DETECT. Signed-off-by: Alexander Scheel Reviewed-by: Michal ?idek Merges: https://pagure.io/SSSD/ding-libs/issue/3167 diff --git a/Makefile.am b/Makefile.am index ca9710e..63ff6fe 100644 --- a/Makefile.am +++ b/Makefile.am @@ -70,11 +70,13 @@ libpath_utils_la_LDFLAGS = \ if HAVE_CHECK check_PROGRAMS += path_utils_ut \ + ini_augment_ut_check \ From tjaalton at moszumanska.debian.org Sat Dec 23 04:20:56 2017 From: tjaalton at moszumanska.debian.org (Timo Aaltonen) Date: Sat, 23 Dec 2017 04:20:56 +0000 Subject: [Pkg-sssd-devel] ding-libs: Changes to 'refs/tags/debian/0.6.1-1' Message-ID: Tag 'debian/0.6.1-1' created by Timo Aaltonen at 2017-12-23 04:20 +0000 tagging package ding-libs version debian/0.6.1-1 -----BEGIN PGP SIGNATURE----- iQIcBAABCAAGBQJaPdmEAAoJEMtwMWWoiYTczO0P/jzD0jfPQL0jyg+/8TO7X+pW ct1m8jiKLIS2WDsyoYbZMOGRlvg0Hk5ZHW0bt1tthXCx6QjE8hN36q1+h1CJp5Yj +SE7pEWV3WlxjuIQJNkAeuC7BqgchIcwNH7u6LwWfztr0e/xv+BwHXj28eOZdyPq hnAvJrLXcuzQ5SEEZskdlYHvciydSEHPs+tg14jX8e46hfh5Y2hqmHHrdeCv1svo kahMqPU3Kia6Rdr+9AFG3bn2sdU7LnNguvs4z6ZUTryLuvpwdVywa+/s07gKLqus 4mNR3cBzLQf8yRJC8He+vX1MxUll+utL4l15hfJoh+ZxiOuiB8MzndEEuP3pkVPy 6PthZLsDHDBQBX6JCbMN2AGDFxgQvdLRazQcDQaaJP8AEu0h5yn26FbevHT7ZngH M6gO/UO0lRIv4tfSI/QG/3ncVDNEePsvUrBKUwCgqsW8tlvOCCjq19ysaRgld73Y T/WtxH4+jYY/FVFu81Bg5MTUyVZisSdcmwnBj/5aQdWk3HSYXDAXal231TdQY1+N Sx6xHEKUCwUr38OISPr1E3Kufk4UHWZgetgAqtWlHDQp8i63jyJMeEDpnzGsXUZc 6fCMCJKQyIcRVHyqFDtzR7iqtksGRZQMTgAgbxE2qW3boESCP+i4d5oEAuA3J0OD ux52TBMlMbL94UPq4de+ =ygbk -----END PGP SIGNATURE----- Changes since debian/0.6.0-1: Alexander Scheel (8): Fix build with TRACE_LEVEL Document use of basic regex in ini_config_augment INI: Fix ini_config parsing SEGVs INI: Tests for section/key name collisions INI: Prevent null return_cfg during augment INI: Add INI_MS_DETECT merge notifications INI: Extend INI_MS_DETECT to be non-exclusive INI: Test INI_MS_DETECT non-exclusive behavior Lukas Slebodnik (10): BUILD: Fix linking of ini_augment_ut_check INI: Fix usage of buiddir in ini_augment_ut_check INI: Fix memory leaks in unit test test_ini_augment_empty_dir DHASH: Suppress gcc7 warning INI: Fix warning Walloc-size-larger-than Do not define _GNU_SOURCE COLLECTION: Remove unused macros INI: Fix doxygen comment for ini_errobj_create COLLECTION: Fix misused comma DHASH: Do not use c99 structure initialisation Michal ?idek (9): ini_augment: Use full path when reporting pattern mismatch DHASH: Add check based unit test GIT: Add commit template INI: Unit test for augmentation with empty dir INI: do not use readdir_r INI: Allow longer values then PATH_MAX INI: Add test for long values Bump version info Update versions before 0.6.1 release Philip Prindeville (1): DHASH: Add new key type HASH_KEY_CONST_STRING Timo Aaltonen (6): Merge branch 'upstream' update changelog Update urls. Bump debhelper to 10. Bump policy to 4.1.2, no changes. releasing package ding-libs version 0.6.1-1 --- .git-commit-template | 9 + Makefile.am | 27 ++- collection/collection.c | 5 collection/collection_tools.c | 2 configure.ac | 5 contrib/ding-libs.spec.in | 6 debian/changelog | 9 + debian/compat | 2 debian/control | 7 debian/copyright | 2 debian/rules | 2 debian/watch | 2 dhash/dhash.c | 31 ++- dhash/dhash.h | 4 dhash/dhash_ut_check.c | 226 +++++++++++++++++++++++++++ dhash/examples/dhash_test.c | 3 ini/ini.d/merge.validator | 16 - ini/ini_augment.c | 120 ++++++-------- ini/ini_augment_ut_check.c | 343 ++++++++++++++++++++++++++++++++++++++++++ ini/ini_configmod.c | 3 ini/ini_configobj.c | 71 +++++--- ini/ini_configobj.h | 9 - ini/ini_defines.h | 5 ini/ini_fileobj.c | 1 ini/ini_get_value.c | 4 ini/ini_get_valueobj.c | 1 ini/ini_parse.c | 71 +++----- ini/ini_parse_ut_check.c | 157 +++++++++++++++++++ version.m4 | 6 29 files changed, 962 insertions(+), 187 deletions(-) --- From ftpmaster at ftp-master.debian.org Sat Dec 23 04:30:45 2017 From: ftpmaster at ftp-master.debian.org (Debian FTP Masters) Date: Sat, 23 Dec 2017 04:30:45 +0000 Subject: [Pkg-sssd-devel] Processing of ding-libs_0.6.1-1_source.changes Message-ID: ding-libs_0.6.1-1_source.changes uploaded successfully to localhost along with the files: ding-libs_0.6.1-1.dsc ding-libs_0.6.1.orig.tar.gz ding-libs_0.6.1-1.diff.gz ding-libs_0.6.1-1_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org) From ftpmaster at ftp-master.debian.org Sat Dec 23 04:34:02 2017 From: ftpmaster at ftp-master.debian.org (Debian FTP Masters) Date: Sat, 23 Dec 2017 04:34:02 +0000 Subject: [Pkg-sssd-devel] ding-libs_0.6.1-1_source.changes ACCEPTED into unstable Message-ID: Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 23 Dec 2017 06:19:59 +0200 Source: ding-libs Binary: libpath-utils-dev libpath-utils1 libdhash-dev libdhash1 libcollection-dev libcollection4 libref-array-dev libref-array1 libini-config-dev libini-config5 libbasicobjects-dev libbasicobjects0 Architecture: source Version: 0.6.1-1 Distribution: unstable Urgency: medium Maintainer: Debian SSSD Team Changed-By: Timo Aaltonen Description: libbasicobjects-dev - Basic object types for C -- development files libbasicobjects0 - Basic object types for C libcollection-dev - Development files for libcollection libcollection4 - Collection data-type for C libdhash-dev - Development files for libdhash libdhash1 - Dynamic hash table libini-config-dev - Development files for libini_config libini-config5 - INI file parser for C libpath-utils-dev - Development files for libpath_utils libpath-utils1 - Filesystem Path Utilities libref-array-dev - Development files for refcounted array for C libref-array1 - refcounted array for C Changes: ding-libs (0.6.1-1) unstable; urgency=medium . * New upstream release. * Update urls. * Bump debhelper to 10. * Bump policy to 4.1.2, no changes. Checksums-Sha1: 519210ee1852f59ce2370ebe8a4811ab965a117e 2551 ding-libs_0.6.1-1.dsc dab4c855b065bd728021437af81ae726c31c5272 904092 ding-libs_0.6.1.orig.tar.gz 71b868b864858a8fcedd174dd301ed20ffe62761 6933 ding-libs_0.6.1-1.diff.gz 7ffa35ca2fce16a83ad00a033e4d1ca56ab122dc 6629 ding-libs_0.6.1-1_source.buildinfo Checksums-Sha256: 9cb35b7e02f8f3707dbc39e7887383924d9ac937f77b7837a77d44aeeb47b8ea 2551 ding-libs_0.6.1-1.dsc a319a327deb81f2dfab9ce4a4926e80e1dac5dcfc89f4c7e548cec2645af27c1 904092 ding-libs_0.6.1.orig.tar.gz 5174990d159cefa6aea21ab13e461f1dede9c62db0f0255a5d654c074bf3742d 6933 ding-libs_0.6.1-1.diff.gz d85feb2ab286f0b4b3663ffcdbe940e5cfee8ab8d36a7fd771483a396f205351 6629 ding-libs_0.6.1-1_source.buildinfo Files: 6d5edbe4628933d71e1590e571af4f96 2551 libs extra ding-libs_0.6.1-1.dsc 141ffba92d7703b7efc2595971305de7 904092 libs extra ding-libs_0.6.1.orig.tar.gz c79aa0d822343d0ffdcf48d144045d43 6933 libs extra ding-libs_0.6.1-1.diff.gz 712e0fb157eb8dcd225f48a4a652d3f7 6629 libs extra ding-libs_0.6.1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJaPdmLAAoJEMtwMWWoiYTci/QQAIa0dsKb53y1AJWfFbIU/vVX yWpnXRigiyUuEVtaC9GOfbXmyhpVBGnk6oSLr+8LtpUDbG9WawUL5W2YSvjutGVe 4HXikSzu0bnN/HREPUerVk6QJU5VhNrL+6gnarv0Blr5+NLcc/iqwEbD1YpFOLvA MxMRGQ9xWMyY9LEI6kxLntDjrPBw8UsDeQ2Kih8UYKbsG6PM3381wLWcai3bqgE4 LTNQpD2DnAk/5/bTvOEw5dfjje6MDhrU1zNy5pgsNZLmANlswUbJxK9/KCYhIKjc W8LvE6k0+RYWxfHIr2gE0MTLrgcxdL4QPMm1RAImmbwY8Hr155yh4/KchQOVrAg7 UnsLtB6CW7pVtUoFHDfIUiN8ttOAxbELYRrcDgTe+lIbzCz7znoq+L72mYidl7c8 yuKum83Ej6lgbr1VDapR3MoxykkKs0I+PhXs5smPVt88LIjnHW/+qriBUd5Gvurz ImQoTMkD8l2NlAX3ILzgrdlFMfWyCun4BBHn5RMe+/0mDXwhizk7PSbtOV4kWq3n wTxoCCiRnno2fP3K2/5Vhpgo4y/hZdYsrSyXcgQ5bv+eHKXOlex0jaFwge+8yOyj gHY4GpEZnBUr9pqJd4jOzGAXtwI8tPHUGfyNgex0w+orgCjEDVZ9UI6IHEOeNyJF HFZdssSDiNf0zYyiHWk1 =/LBg -----END PGP SIGNATURE----- Thank you for your contribution to Debian. From noreply at release.debian.org Mon Dec 25 04:39:12 2017 From: noreply at release.debian.org (Debian testing watch) Date: Mon, 25 Dec 2017 04:39:12 +0000 Subject: [Pkg-sssd-devel] sssd 1.16.0-1 MIGRATED to testing Message-ID: FYI: The status of the sssd source package in Debian's testing distribution has changed. Previous version: 1.15.3-3 Current version: 1.16.0-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later changes on the next day. See https://release.debian.org/testing-watch/ for more information. From tjaalton at moszumanska.debian.org Mon Dec 25 19:38:41 2017 From: tjaalton at moszumanska.debian.org (Timo Aaltonen) Date: Mon, 25 Dec 2017 19:38:41 +0000 Subject: [Pkg-sssd-devel] sssd: Changes to 'master' Message-ID: debian/changelog | 7 +++++++ debian/rules | 8 +++----- debian/sssd-common.install | 2 ++ 3 files changed, 12 insertions(+), 5 deletions(-) New commits: commit 6eaef1f23147bfa983b2618e1b7831776e14848e Author: Timo Aaltonen Date: Mon Dec 25 21:38:34 2017 +0200 releasing package sssd version 1.16.0-2 diff --git a/debian/changelog b/debian/changelog index f930ced..d1bcd2b 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,9 +1,9 @@ -sssd (1.16.0-2) UNRELEASED; urgency=medium +sssd (1.16.0-2) unstable; urgency=medium * Enable default config. (Closes: #858968) * Enable files domain. - -- Timo Aaltonen Mon, 25 Dec 2017 21:23:00 +0200 + -- Timo Aaltonen Mon, 25 Dec 2017 21:38:26 +0200 sssd (1.16.0-1) unstable; urgency=medium commit 039d8677861782652075c0cbc07b4ebc989c20e3 Author: Timo Aaltonen Date: Mon Dec 25 21:28:10 2017 +0200 Enable files domain. diff --git a/debian/changelog b/debian/changelog index 8eb75a3..f930ced 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,6 +1,7 @@ sssd (1.16.0-2) UNRELEASED; urgency=medium * Enable default config. (Closes: #858968) + * Enable files domain. -- Timo Aaltonen Mon, 25 Dec 2017 21:23:00 +0200 diff --git a/debian/rules b/debian/rules index 6cfb4a5..d7c7cd4 100755 --- a/debian/rules +++ b/debian/rules @@ -36,6 +36,7 @@ override_dh_auto_configure: --with-ssh \ --with-initscript=systemd \ --with-systemdunitdir=/lib/systemd/system \ + --enable-files-domain \ --with-sudo override_dh_auto_test: commit 74ffb6b975cc3d650479d25d4709dae6d7c80b61 Author: Timo Aaltonen Date: Mon Dec 25 21:25:49 2017 +0200 Enable default config. (Closes: #858968) diff --git a/debian/changelog b/debian/changelog index 4671da4..8eb75a3 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +sssd (1.16.0-2) UNRELEASED; urgency=medium + + * Enable default config. (Closes: #858968) + + -- Timo Aaltonen Mon, 25 Dec 2017 21:23:00 +0200 + sssd (1.16.0-1) unstable; urgency=medium * New upstream release. diff --git a/debian/rules b/debian/rules index 8cd7fb8..6cfb4a5 100755 --- a/debian/rules +++ b/debian/rules @@ -34,7 +34,8 @@ override_dh_auto_configure: --disable-rpath \ --with-autofs \ --with-ssh \ - --with-initscript=systemd --with-systemdunitdir=/lib/systemd/system \ + --with-initscript=systemd \ + --with-systemdunitdir=/lib/systemd/system \ --with-sudo override_dh_auto_test: @@ -66,10 +67,6 @@ override_dh_install: find $(CURDIR)/debian/tmp/ -name '*.egg-info' -exec rm '{}' ';' rm -f $(CURDIR)/debian/tmp/etc/rc.d/init.d/sssd - # we don't need a default config, yet anyway - rm -f $(CURDIR)/debian/tmp/usr/lib/*/sssd/conf/sssd.conf - rm -f $(CURDIR)/debian/tmp/etc/pam.d/sssd-shadowutils - # match nn/nn/nnnn, replace with the date from changelog sed -i 's/[0-1][0-9]\/[0-3][0-9]\/[0-9][0-9][0-9][0-9]/${PKGDATE}/g' $(CURDIR)/debian/tmp/usr/share/man/man*/* diff --git a/debian/sssd-common.install b/debian/sssd-common.install index 40f2874..e1cac15 100644 --- a/debian/sssd-common.install +++ b/debian/sssd-common.install @@ -1,3 +1,4 @@ +etc/pam.d/sssd-shadowutils lib/systemd/system/sssd.service lib/systemd/system/sssd-secrets.service lib/systemd/system/sssd-secrets.socket @@ -20,6 +21,7 @@ usr/lib/*/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so usr/lib/*/ldb/modules/ldb/memberof.so usr/lib/*/libnfsidmap/sss.so usr/lib/*/samba/idmap/sss.so +usr/lib/*/sssd/conf/sssd.conf usr/lib/*/sssd/libsss_cert.so usr/lib/*/sssd/libsss_child.so usr/lib/*/sssd/libsss_crypt.so From tjaalton at moszumanska.debian.org Mon Dec 25 19:45:10 2017 From: tjaalton at moszumanska.debian.org (Timo Aaltonen) Date: Mon, 25 Dec 2017 19:45:10 +0000 Subject: [Pkg-sssd-devel] sssd: Changes to 'refs/tags/debian/1.16.0-2' Message-ID: Tag 'debian/1.16.0-2' created by Timo Aaltonen at 2017-12-25 19:38 +0000 tagging package sssd version debian/1.16.0-2 -----BEGIN PGP SIGNATURE----- iQIcBAABCAAGBQJaQVO6AAoJEMtwMWWoiYTcvrwP/2CkZdCSpFj6WogR3w654mJA eWvpPZQLtJIEEL99nEQaeBXA852nTJzbji2Upli1R4/Z0Ga1bDm1JyKJDF/07y41 /QcDF0XcxB3zEv/pwrTSNMLtlbx4+o5z2iNPjgGd3xxqTPAe7YjiG1RIXNWSVgdA Z622dwkYAuigUFStffdG42zKHC4upMv18T4QR8Y7mGrqvxipd0sF/QlBz4lCVHQh IWLOsPfLZmt8dt76Nek8dBP7hZKNB7elKaijvztm2AhpN1dpBnp8UsEVRMcgyvNC Q20ayP5etp2kReZ2XRgepMx+TkJwOnuRv0T6DVGOc2rLGlNp+RnumvfhrzPc8J8c lLAioKN9rs+cOyJYtfZz5cdkVeoD7dC9EzExf64Wv8uQ5t9/I8JZlpDrgIqSxdDV o/rq/IgKgE7WQOmd+Mqv9rHqKNTU7eGV+Z6/DoKNA91N6D0knL9Sf8ij/ICtzkyk aP+ezdMQKBP00AbbuVJ8nEAjPt9gNb2jn4P+Z4pA2oaWQ2ww0YlUc/VYXCokU82b Yav2egd5WD9M7eL5Pbl4TuGoQ0+HYUSJA+B17RS+/ouf009a8fJmJgahGEYSDNx1 L5lcWJkNN5kKqoL12uy1gCPjEOYhBZq/8ZNs/Jp7WA+rtH6W+7qN/XrSLKCn7qx6 CC0IzpVJpBBnqVe852bi =ReZ6 -----END PGP SIGNATURE----- Changes since debian/1.16.0-1: Timo Aaltonen (3): Enable default config. (Closes: #858968) Enable files domain. releasing package sssd version 1.16.0-2 --- debian/changelog | 7 +++++++ debian/rules | 8 +++----- debian/sssd-common.install | 2 ++ 3 files changed, 12 insertions(+), 5 deletions(-) --- From ftpmaster at ftp-master.debian.org Mon Dec 25 19:47:46 2017 From: ftpmaster at ftp-master.debian.org (Debian FTP Masters) Date: Mon, 25 Dec 2017 19:47:46 +0000 Subject: [Pkg-sssd-devel] Processing of sssd_1.16.0-2_source.changes Message-ID: sssd_1.16.0-2_source.changes uploaded successfully to localhost along with the files: sssd_1.16.0-2.dsc sssd_1.16.0-2.diff.gz sssd_1.16.0-2_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org) From owner at bugs.debian.org Mon Dec 25 19:51:03 2017 From: owner at bugs.debian.org (Debian Bug Tracking System) Date: Mon, 25 Dec 2017 19:51:03 +0000 Subject: [Pkg-sssd-devel] Bug#858968: marked as done (installing sssd leaves systemd in degraded state) References: <3285bc20-7c84-6875-723b-72fe1c7d6a11@aixigo.de> Message-ID: Your message dated Mon, 25 Dec 2017 19:48:47 +0000 with message-id and subject line Bug#858968: fixed in sssd 1.16.0-2 has caused the Debian Bug report #858968, regarding installing sssd leaves systemd in degraded state to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner at bugs.debian.org immediately.) -- 858968: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858968 Debian Bug Tracking System Contact owner at bugs.debian.org with problems -------------- next part -------------- An embedded message was scrubbed... From: Harald Dunkel Subject: installing sssd leaves systemd in degraded state Date: Wed, 29 Mar 2017 08:15:46 +0200 Size: 3001 URL: -------------- next part -------------- An embedded message was scrubbed... From: Timo Aaltonen Subject: Bug#858968: fixed in sssd 1.16.0-2 Date: Mon, 25 Dec 2017 19:48:47 +0000 Size: 7592 URL: From ftpmaster at ftp-master.debian.org Mon Dec 25 19:48:47 2017 From: ftpmaster at ftp-master.debian.org (Debian FTP Masters) Date: Mon, 25 Dec 2017 19:48:47 +0000 Subject: [Pkg-sssd-devel] sssd_1.16.0-2_source.changes ACCEPTED into unstable Message-ID: Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 25 Dec 2017 21:38:26 +0200 Source: sssd Binary: sssd sssd-common sssd-ad sssd-ad-common sssd-dbus sssd-ipa sssd-kcm sssd-krb5 sssd-krb5-common sssd-ldap sssd-proxy sssd-tools libnss-sss libpam-sss libipa-hbac0 libipa-hbac-dev libsss-certmap0 libsss-certmap-dev libsss-idmap0 libsss-idmap-dev libsss-nss-idmap0 libsss-nss-idmap-dev libsss-sudo libsss-simpleifp0 libsss-simpleifp-dev libwbclient-sssd libwbclient-sssd-dev python-libipa-hbac python-libsss-nss-idmap python-sss python3-libipa-hbac python3-libsss-nss-idmap python3-sss Architecture: source Version: 1.16.0-2 Distribution: unstable Urgency: medium Maintainer: Debian SSSD Team Changed-By: Timo Aaltonen Description: libipa-hbac-dev - FreeIPA HBAC Evaluator library -- development files libipa-hbac0 - FreeIPA HBAC Evaluator library libnss-sss - Nss library for the System Security Services Daemon libpam-sss - Pam module for the System Security Services Daemon libsss-certmap-dev - Certificate mapping library for SSSD -- development files libsss-certmap0 - Certificate mapping library for SSSD libsss-idmap-dev - ID mapping library for SSSD -- development files libsss-idmap0 - ID mapping library for SSSD libsss-nss-idmap-dev - SID based lookups library for SSSD -- development files libsss-nss-idmap0 - SID based lookups library for SSSD libsss-simpleifp-dev - SSSD D-Bus responder helper library -- development files libsss-simpleifp0 - SSSD D-Bus responder helper library libsss-sudo - Communicator library for sudo libwbclient-sssd - SSSD libwbclient implementation libwbclient-sssd-dev - SSSD libwbclient implementation -- development files python-libipa-hbac - Python bindings for the FreeIPA HBAC Evaluator library python-libsss-nss-idmap - Python bindings for the SID lookups library python-sss - Python module for the System Security Services Daemon python3-libipa-hbac - Python3 bindings for the FreeIPA HBAC Evaluator library python3-libsss-nss-idmap - Python3 bindings for the SID lookups library python3-sss - Python3 module for the System Security Services Daemon sssd - System Security Services Daemon -- metapackage sssd-ad - System Security Services Daemon -- Active Directory back end sssd-ad-common - System Security Services Daemon -- PAC responder sssd-common - System Security Services Daemon -- common files sssd-dbus - System Security Services Daemon -- D-Bus responder sssd-ipa - System Security Services Daemon -- IPA back end sssd-kcm - System Security Services Daemon -- Kerberos KCM server implementa sssd-krb5 - System Security Services Daemon -- Kerberos back end sssd-krb5-common - System Security Services Daemon -- Kerberos helpers sssd-ldap - System Security Services Daemon -- LDAP back end sssd-proxy - System Security Services Daemon -- proxy back end sssd-tools - System Security Services Daemon -- tools Closes: 858968 Changes: sssd (1.16.0-2) unstable; urgency=medium . * Enable default config. (Closes: #858968) * Enable files domain. Checksums-Sha1: 04f76fbc89a81e69177fa7375f1ad422f442b2ce 4587 sssd_1.16.0-2.dsc 3df657f921daa27ac77eb0355760ef163cc1c796 50207 sssd_1.16.0-2.diff.gz afaf609cdcee5f8352982d6e6968df0b1d62c362 10211 sssd_1.16.0-2_source.buildinfo Checksums-Sha256: b7133bfcd83508fcc190199eb9c4c9e37883dc1efd4d20085d06b1b8f23adbb6 4587 sssd_1.16.0-2.dsc 33414aff84769bd12e9ec31d69dfc6a85840c120c8fc906d5f24651d586c0c13 50207 sssd_1.16.0-2.diff.gz 745f851ef5d6ee77afe583f6866f10e3646ff73982a8e0743aed1e7f0bec03c3 10211 sssd_1.16.0-2_source.buildinfo Files: 5efbbc79504bf86c108f9aa5a1a2fb26 4587 utils extra sssd_1.16.0-2.dsc 3cd2ea9b1c8f26b0e874938cff4fecea 50207 utils extra sssd_1.16.0-2.diff.gz d976262817cdd8d18be8017aa2f6ac80 10211 utils extra sssd_1.16.0-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJaQVPVAAoJEMtwMWWoiYTcyuYQAKpbYhibiUAF8XPR6DaGCCIt Ag+diThNBPERwiDg4F1ME94nYspW8v265iVvh+CUoGod15okgo1njYux17pL28ax t0N5US7bRbzrHIhtalMytpP/N27swnmHXRJTpBoiGeyLP/W4hRzU+eRvlXycCjP8 NPRDDvJHbx3Ty5UX5V8B0KC58fuwPT2pU8l4NZejFHjbJjf9QciVyk4KtDW9CnrB dKo9a8vjB+6BTRKbiHO3KI9dysPArDDegxa1OuuCecUjvRuwpfCI1KfuWjRgLvgG WhJfv2gtoVVrieq1uedFsWql6CGgonQBNVHIWdX8BN8yBeSmNDVeikKNlmrju6n0 D0+ziYJXQ2RvmPfxO5dY4P2kMKqkEs6ADyBzdkzNEO3EIuon3Fr8l239lm6uJ+rT ppv4l4PVpBEPeheXgTDigsh0SZD+6LWM6SMIuehhLIQnQWzbcI5eaJjy7T2JNNE0 63Dy8f6TnZM//xtDLQDcEfwICPrOErLn0UQOjXQJ10D0DjTUUMv/zoIy3NSgU5Mv Fex9A6ujiSnHKurQjwavJP4J2CSaKjQhFqDaO6G+WLGa3Rpg17EkU04zDERN4wGk RSn7eCJSdxgWSDbEuMqoIQn8HZCl2T1YJRBu6GrOe1NG9Pl0g6iERiWYeC6mqV8J mU/BiSZJiflLIax/vzfF =ifRt -----END PGP SIGNATURE----- Thank you for your contribution to Debian. From noreply at release.debian.org Thu Dec 28 04:39:13 2017 From: noreply at release.debian.org (Debian testing watch) Date: Thu, 28 Dec 2017 04:39:13 +0000 Subject: [Pkg-sssd-devel] ding-libs 0.6.1-1 MIGRATED to testing Message-ID: FYI: The status of the ding-libs source package in Debian's testing distribution has changed. Previous version: 0.6.0-1 Current version: 0.6.1-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later changes on the next day. See https://release.debian.org/testing-watch/ for more information. From noreply at release.debian.org Sun Dec 31 04:39:16 2017 From: noreply at release.debian.org (Debian testing watch) Date: Sun, 31 Dec 2017 04:39:16 +0000 Subject: [Pkg-sssd-devel] sssd 1.16.0-2 MIGRATED to testing Message-ID: FYI: The status of the sssd source package in Debian's testing distribution has changed. Previous version: 1.16.0-1 Current version: 1.16.0-2 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later changes on the next day. See https://release.debian.org/testing-watch/ for more information.