sssd.git/src/responder/pac, branch refactor sssd with jhrozek's patches SYSDB: Remove unnecessary domain parameter from several sysdb calls 2012-09-24T16:23:15+00:00 Jakub Hrozek jhrozek@redhat.com 2012-09-21T21:41:42+00:00 95f5e7963a36b7b68859ce91ae4b232088bbaa09 The domain can be read from the sysdb object. Removing the domain string makes the API more self-contained. 
The domain can be read from the sysdb object. Removing the domain string
makes the API more self-contained.
pac responder: limit access by checking UIDs 2012-07-10T13:07:26+00:00 Sumit Bose sbose@redhat.com 2012-07-05T08:50:08+00:00 2d257ccf620ce1b611f89cec8f0a94c88c2f2881 A check for allowed UIDs is added in the common responder code directly after accept(). If the platform does not support reading the UID of the peer but allowed UIDs are configured, access is denied. Currently only the PAC responder sets the allowed UIDs for a socket. The default is that only root is allowed to access the socket of the PAC responder. Fixes: https://fedorahosted.org/sssd/ticket/1382 
A check for allowed UIDs is added in the common responder code directly
after accept(). If the platform does not support reading the UID of the
peer but allowed UIDs are configured, access is denied.

Currently only the PAC responder sets the allowed UIDs for a socket. The
default is that only root is allowed to access the socket of the PAC
responder.

Fixes: https://fedorahosted.org/sssd/ticket/1382
Set file descriptor limits in pac responder 2012-07-06T15:44:45+00:00 Sumit Bose sbose@redhat.com 2012-07-02T12:28:03+00:00 f1a7e4a6e4f2d453077da8b3606feebb7669ef4f 






Add range support to PAC responder
2012-06-21T19:30:21+00:00

Sumit Bose
sbose@redhat.com

2012-06-18T10:32:58+00:00

e13baa8dab9741d9221d3794fd8abf3d461f8d6d












PAC responder: add the core functionality
2012-06-21T19:30:21+00:00

Sumit Bose
sbose@redhat.com

2012-06-18T10:01:27+00:00

ee099cd5656b60c7384493b923ddf9af5cf5d4f5

This adds support for parsing PAC and storing information contained
within. In particular the user and all his memberships are stored.  In
case it is necessary, getgrgid() requests are sent to provider for group
resolution.





This adds support for parsing PAC and storing information contained
within. In particular the user and all his memberships are stored.  In
case it is necessary, getgrgid() requests are sent to provider for group
resolution.







PAC responder: add some utility functions
2012-06-21T19:30:20+00:00

Jan Zeleny
jzeleny@redhat.com

2012-06-11T10:03:45+00:00

e3f0014bb64b7e93979948936cf93cf869d3dc44












PAC responder: add basic infrastructure
2012-06-21T19:30:20+00:00

Sumit Bose
sbose@redhat.com

2011-05-13T16:44:15+00:00

b9e5bd09a5ff7009537a18914dbebcf10498f592

This adds only the basic outline of the PAC responder, it won't support
any operations, it will just start and initialize itself.





This adds only the basic outline of the PAC responder, it won't support
any operations, it will just start and initialize itself.