summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add sockaddr_storage to sdap_serviceSumit Bose2011-06-305-0/+62
|
* fix typosSimo Sorce2011-06-271-5/+5
|
* Fall back to polling when inotify failsJan Zeleny2011-06-241-28/+68
|
* Log nsupdate messageJakub Hrozek2011-06-211-0/+3
| | | | https://fedorahosted.org/sssd/ticket/893
* Test NULL server hostname in fail over testsJakub Hrozek2011-06-161-8/+16
|
* Provide TTL structure names for c-ares < 1.7Jakub Hrozek2011-06-162-0/+11
| | | | | | | | | | | https://fedorahosted.org/sssd/ticket/898 In c-ares 1.7, the upstream renamed the addrttl/addr6ttl structures to ares_addrttl/ares_addr6ttl so they are in the ares_ namespace. Because they are committed to stable ABI, the contents are the same, just the name changed -- so it is safe to just #define the new name for older c-ares version in case the new one is not detected in configure time.
* Do not check pwdAttributeSumit Bose2011-06-161-9/+0
| | | | | | | It is not safe to check pwdAttribute to see if server side password policies are active. Only if a LDAP_CONTROL_PASSWORDPOLICYRESPONSE is present the bind response we can assume that there is a server side password policy.
* Switch resolver to using resolv_hostent and honor TTLJakub Hrozek2011-06-1510-276/+401
|
* Resolve hosts by name from DNS into resolv_hostentJakub Hrozek2011-06-151-0/+254
|
* Resolve hosts by name from files into resolv_hostentJakub Hrozek2011-06-151-0/+92
|
* Add new resolv_hostent data structure and utility functionsJakub Hrozek2011-06-152-0/+200
|
* Fix proxy provider return code for secondary missing groupsSumit Bose2011-06-151-1/+3
|
* Add missing libsss_util to proxy providerSumit Bose2011-06-151-0/+1
|
* Unit test for parge_argsJakub Hrozek2011-06-151-0/+58
|
* Make parse_args skip extra spacesJakub Hrozek2011-06-151-16/+24
| | | | https://fedorahosted.org/sssd/ticket/871
* Fix two typosSumit Bose2011-06-151-2/+3
|
* Delete cached ccache file if password is expiredSumit Bose2011-06-151-8/+63
|
* Non-posix group processing - ldap provider and nss responderJan Zeleny2011-06-023-31/+90
|
* Non-posix group processing - sysdb changesJan Zeleny2011-06-023-23/+32
|
* Added sysdb_attrs_get_bool() functionJan Zeleny2011-06-022-0/+24
|
* Escape IPv6 IP addresses in the IPA providerJakub Hrozek2011-06-021-4/+26
| | | | https://fedorahosted.org/sssd/ticket/880
* Use escaped IP addresses in LDAP providerJakub Hrozek2011-06-021-6/+56
|
* Add a utility function to escape IPv6 address for use in URIsJakub Hrozek2011-06-022-0/+11
|
* Add utility function to return IP address as stringJakub Hrozek2011-06-024-17/+31
|
* Add online callback only once for TGT renewalSumit Bose2011-06-021-25/+44
|
* Ensure that SSSD always Requires: the primary-arch sssd-clientStephen Gallagher2011-05-311-1/+1
| | | | https://bugzilla.redhat.com/show_bug.cgi?id=709333
* Fix typo in initgroups negative cache checkStephen Gallagher2011-05-311-1/+1
|
* Changing default to Default for consistencyKaushik Banerjee2011-05-311-1/+1
|
* Add more detail to ldap_uri manpage entryStephen Gallagher2011-05-271-1/+13
|
* Sanitize username during initgroups callSumit Bose2011-05-251-1/+7
|
* Separate return paths for success and failure in sdap_nested_group_check_cacheJakub Hrozek2011-05-251-6/+10
|
* Make "password" the default for ldap_default_authtok_typeStephen Gallagher2011-05-242-1/+4
|
* Fix uninitialized scalar variable in sdap_nested_group_check_cacheJakub Hrozek2011-05-241-2/+4
| | | | https://fedorahosted.org/sssd/ticket/878
* Fix uninitialized pointer read in sdap_x_deref_parse_entryJakub Hrozek2011-05-241-1/+1
| | | | https://fedorahosted.org/sssd/ticket/877
* Fix bad comparison in sdap_has_deref_supportJakub Hrozek2011-05-241-1/+1
| | | | https://fedorahosted.org/sssd/ticket/876
* Import config.h earlierStephen Gallagher2011-05-233-5/+3
| | | | | | On RHEL 5 and other older platforms, failing to set _GNU_SOURCE early would cause some functions - such as strndup() - to be unavailable.
* Include string.h in sss_cli.hSumit Bose2011-05-231-0/+1
| | | | Since memcpy() is used in sss_cli.h it should be declared here, too.
* Build sssd utils as a libtool helper libraryStephen Gallagher2011-05-231-88/+98
| | | | | | This will speed up the build, as we are not recompiling the same sources multiple times for different binaries. These objects will now be built once and then statically linked in.
* Build SSSD plugins without a version numberStephen Gallagher2011-05-231-5/+5
| | | | | | | The version is both fake and unused, so we'll stop creating the versioned file and use only the unversioned .so. This is safe to do for now because all of the plugins are built at the same time as the interface.
* Remove unused defines from configure.acSumit Bose2011-05-231-12/+0
|
* Set _GNU_SOURCE globallySumit Bose2011-05-2314-23/+17
|
* Use dereference when processing RFC2307bis nested groupsJakub Hrozek2011-05-209-17/+487
| | | | | | | | Instead of issuing N LDAP requests when processing a group with N users, utilize the dereference functionality to pull down all the members in a single LDAP request. https://fedorahosted.org/sssd/ticket/799
* Refactor RFC2307bis nested group processingJakub Hrozek2011-05-201-123/+188
| | | | | | This patch splits checking cache and hash tables into standalone functions. This will make it easy to reuse the code in a new branch that uses dereferencing.
* Use fake users during RFC2307bis nested group processingJakub Hrozek2011-05-201-13/+165
| | | | | | Instead of downloading complete user data which is potentionally very slow, only download the necessary minimum information and store the users as dummy entries.
* Change sysdb_add_fake_user to add OriginalDNJakub Hrozek2011-05-203-3/+11
| | | | | RFC2307bis code relies heavily on originalDN, so the fake users need to have an option to store it, too.
* Generic dereference searchJakub Hrozek2011-05-202-0/+157
| | | | | | A generic wrapper around ASQ and OpenLDAP dereference searches. https://fedorahosted.org/sssd/ticket/635
* OpenLDAP dereference searchesJakub Hrozek2011-05-203-0/+376
| | | | | | | | This dereference method is supported at least by OpenLDAP and 389DS/RHDS For more details, see: http://tools.ietf.org/html/draft-masarati-ldap-deref-00
* Add support for Attribute Scoped QueriesJakub Hrozek2011-05-202-0/+207
| | | | | | For more details on ASQ, see: http://msdn.microsoft.com/en-us/library/aa366976%28VS.85%29.aspx http://msdn.microsoft.com/en-us/library/aa746418%28v=VS.85%29.aspx
* Generic dereference data structures and utilitiesJakub Hrozek2011-05-202-0/+45
| | | | These will be shared by both dereference methods in a later patch.
* sdap_get_generic_extJakub Hrozek2011-05-201-73/+202
| | | | | | | | | | | Add a private sdap_get_generic_ext_send()/_recv() request that exposes more of ldap_search_ext options, in particular the server contols. The existing sdap_generic_search_send()/_recv() request is now a thin wrapper around the new _ext request. The other important change is that an entry parsing is a callback now. That was done in order to allow custom parsing for results such as OpenLDAP deref or Attribute Scoped Queries.