sssd.git/src/providers, branch master

Fix chpass operations with LDAP provider

2010-08-04T18:37:52+00:00

The initial verification of the old password was returning an
error because we were not explicitly setting dp_err to
DP_ERR_SUCCESS and it was initialized earlier in the function to
DP_ERR_FATAL.

Clean up initgroups processing for RFC2307

2010-08-03T17:54:38+00:00

Instead of recursively updating all users of each group the user
being queried belongs to, just add or remove membership for the
requested user.

Fixes https://fedorahosted.org/sssd/ticket/478

Return proper error value when SRV lookup fails

2010-08-03T17:50:29+00:00

Fixes: #587

Fix check_time_rule() return value on failure

2010-08-03T17:50:29+00:00

The value returned in the 'done:' label was always EOK which is wrong as
any parsing errors are not returned to the caller.

Fixes: #583

be_pam_handler(): Fix potential NULL dereference

2010-08-03T17:50:29+00:00

Validate keytab at startup

2010-08-03T17:50:28+00:00

In addition to validating the keytab everytime a TGT is requested, we
also validate the keytab on back end startup to give early warning that
the keytab is not usable.

Fixes: #556

Fix getting default realm in the ldap child

2010-08-03T17:50:28+00:00

Fix IPA access backend handling of obsolete and missing HBAC entries:

2010-07-23T14:14:29+00:00

 - Ticket #567: Fix removal of obsolete HBAC host, rules and service records from sysdb.
 - Ticket #565: When no HBAC host record is found return PAM_PERM_DENIED instead of PAM_SYSTEM_ERROR.

Do not treat missing HBAC rules as an error

2010-07-23T14:14:29+00:00

Log TLS errors to syslog

2010-07-09T19:00:57+00:00

Also adds support for detecting LDAPS errors by adding a check for
SDAP_DIAGNOSTIC_MESSAGE after ldap_search_ext()