summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Protect against check-and-open race conditionsStephen Gallagher2010-04-063-30/+79
| | | | | | | | | | | | | | | | | There is a small window between running lstat() on a filename and opening it where it's possible for the file to have been modified. We were protecting against this by saving the stat data from the original file and verifying that it was the same file (by device and inode) when we opened it again, but this is an imperfect solution, as it is still possible for an attacker to modify the permissions during this window. It is much better to simply open the file and test on the active file descriptor. Resolves https://fedorahosted.org/sssd/ticket/425 incidentally, as without the initial lstat, we are implicitly accepting symlinks and only verifying the target file.
* Make sss_userdel check for logged in usersJakub Hrozek2010-04-063-3/+154
| | | | | | | | | | sss_userdel now warns if the deleted user was logged in at the time of deletion. Also adds a new parameter --kick to userdel that kills all user processes before actually deleting ther user. Fixes: #229
* Add userdel_cmd paramJakub Hrozek2010-04-066-0/+104
| | | | Fixes: #231
* Do not revert options to defaults in SSSDConfig.get_domain()Stephen Gallagher2010-03-311-1/+1
| | | | | | | | | There was a faulty check in get_domain() that led to the *_provider options being re-added, sometimes after options related to them had already been set. If those options had a default value, they would be overwritten by the default. Fixes: https://fedorahosted.org/sssd/ticket/441
* Add regression test for https://fedorahosted.org/sssd/ticket/441Stephen Gallagher2010-03-312-0/+6
|
* Fix typo in ldap_id_use_start_tls option descriptionStephen Gallagher2010-03-311-1/+1
|
* Allow arbitrary-length PAM messagesStephen Gallagher2010-03-257-43/+55
| | | | | | | | | The PAM standard allows for messages of any length to be returned to the client. We were discarding all messages of length greater than 255. This patch dynamically allocates the message buffers so we can pass the complete message. This resolves https://fedorahosted.org/sssd/ticket/432
* Fix path_utils_ut segfaultStephen Gallagher2010-03-251-2/+3
| | | | | | | | | In the case where the allocated buffer is not large enough to hold the resulting absolute path, we were writing out a null terminator outside of the buffer, instead of at its beginning. Also fixes potential issue where split_path would not initialize the count to zero if it returned a failure.
* Add a test for domain_to_basedn()Sumit Bose2010-03-251-0/+47
|
* Fix LDAP search paths for IPA HBACSumit Bose2010-03-256-43/+84
| | | | | | - use domain_to_basedn() to construct LDAP search paths for IPA HBAC - move domain_to_basedn() to a separate file to simplify the build of a test
* Add krb5_kpasswd to IPA providerEugene Indenbom2010-03-252-2/+3
| | | | The krb5 options were out of sync, causing a runtime abort.
* Regression test against RHBZ #576856Jakub Hrozek2010-03-253-5/+7
|
* Allow running with read only rootJakub Hrozek2010-03-253-1/+7
| | | | | | | Packages /etc/rwtab.d/sssd file that allows SSSD to run on a read-only root filesystem. Fixes: #428
* Fix warnings from -Wmissing-field-initializersSumit Bose2010-03-257-26/+28
| | | | This patch removes some tab-indentations from pamsrv.c, too.
* Set LDAP_OPT_RESTART for ldap_sasl_interactive_bind_s()Sumit Bose2010-03-251-0/+7
| | | | | | | This option is needed for the rare case where a poll() call during ldap_sasl_interactive_bind_s() is interrupted by a signal. LDAP_OPT_RESTART enables the handling of the EINTR error instead of returning an error.
* Fix kinit after password changeSumit Bose2010-03-251-2/+6
| | | | | | | | | | In an environment with slave KDCs and a central server where password changes are allowed the request for a new TGT immediately after the password change should be made against this server, because the slave server might not know the new password. To achieve this the Kerberos localtor plugin now returns the address of the kpasswd server as master_kdc.
* Generate doxygen documentation for path_utilsJakub Hrozek2010-03-256-113/+1849
|
* Unit tests for path_utilsJakub Hrozek2010-03-253-0/+741
| | | | Fixes: #81
* Fixes for path_utilsJakub Hrozek2010-03-251-63/+109
| | | | | | | | | * Do not segfault on passing NULL path to get_{dir,base}name * There is no way dirname can return "..", remove that code * Buffer overflow in path_concat * Expand . in get_basename * Return NULL rather than crash in split_path on passing NULL path * Be more defensive in directory_list
* Update zh_TW translationCheng-Chia Tseng2010-03-221-69/+101
|
* Improvements for LDAP Password Policy supportRalf Haferkamp2010-03-226-20/+201
| | | | | | | | Display warnings about remaining grace logins and password expiration to the user, when LDAP Password Policies are used. Improved detection if LDAP Password policies are supported by LDAP Server.
* Ensure the SSSDConfig creates sssd.conf with the correct modeStephen Gallagher2010-03-222-4/+87
|
* Lower debug level of unexpected LDAP result codesSumit Bose2010-03-221-0/+5
|
* Add generic error messageJakub Hrozek2010-03-221-0/+4
|
* Fix config file error messageJakub Hrozek2010-03-222-2/+2
|
* Update version in master branch to 1.1.90Stephen Gallagher2010-03-221-1/+1
|
* Fix multiple errors with destructors.Simo Sorce2010-03-191-2/+22
| | | | | | | | | | | | | | | | | This commits cleans up 3 segfaults/valgrind errors due to access to freed memory. 1. The spy wasn't clearing conn_spy causing the svc_destructor to try to clear the spy destructor when the spy was already freed 2. get_config_service was not setting the svc_destrcutor on services depending on the orderof frees at exit this was causing the spy destructor to try to access freed memory because it was not neutralized when the service was freed. 3. at exit the mt_ctx could be freed before services causing the svc_destrcutor to try to access freed memory when removing the service from the service list in the monitor context.
* Fix invalid read cause by premature free of tmpctxSimo Sorce2010-03-191-13/+10
|
* Add translated help text for ldap_tls_cacertdirStephen Gallagher2010-03-181-1/+2
|
* Add missing ldap_tls_cacertdir option to SSSDConfig APIStephen Gallagher2010-03-181-0/+1
|
* Update PT translationRui Gouveia2010-03-181-8/+8
|
* Fix error message for ldap_start_tlsStephen Gallagher2010-03-181-1/+1
|
* Fix a series of memory leaks in the SBUSStephen Gallagher2010-03-175-17/+30
|
* Add UK translationYuri Chornoivan2010-03-172-0/+877
|
* use logfiles for debug messagesRalf Haferkamp2010-03-171-1/+1
|
* Fixes for client communicationSumit Bose2010-03-172-9/+17
| | | | | | | - catch all errors of send() and recv(), not only EAGAIN - check if send() or recv() return EWOULDBLOCK or EINTR - remove unused parameter from client_send() and client_recv() - fix a debugging message
* Fixing type conversion in INI interface.Dmitri Pal2010-03-173-35/+197
| | | | Additional changes.
* Fixed buffer alignment in exchange_credentials().George McCollister2010-03-152-8/+16
| | | | | | buf needs to be 32 bit aligned on ARM. Also made the fix on the server side. Signed-off-by: George McCollister <George.McCollister@gmail.com>
* Fix segfault in the locator pluginJakub Hrozek2010-03-151-25/+26
|
* Convert collection to use sized values.Dmitri Pal2010-03-153-75/+83
| | | | | | | This patch replaces int with int32_t, unsigned with uint32_t, long with int64_t, unsigned long with uint64_t as values that collection can store and hold.
* Build and package libini_config docsStephen Gallagher2010-03-153-4/+3
|
* Adding interface description using doxygen.Dmitri Pal2010-03-154-161/+2728
|
* Updating PT translation for 1.1.0Rui Gouveia2010-03-151-0/+5
|
* Updating ES translation for 1.1.0Héctor Daniel Cabrera2010-03-151-2/+7
|
* Updating PL translation for 1.1.0Piotr Drąg2010-03-151-2/+6
|
* Clean up changelog for sssd.specStephen Gallagher2010-03-151-39/+2
| | | | | | Since we don't keep the changelog up to date, it makes more sense to simply truncate it to always report that it is an automated build.
* Use correct python macros in sssd.specStephen Gallagher2010-03-151-2/+4
| | | | | | | | This patch brings our spec file into compliance with Fedora python requirements. See http://fedoraproject.org/wiki/Packaging/Python#Macros for more details
* Properly handle dbus send attempts on a closed connectionStephen Gallagher2010-03-157-133/+109
| | | | | | | | dbus_connection_send_with_reply() will report success and return a NULL pending_reply when the connection is not open for communication. This patch creates a new wrapper around dbus_connection_send_with_reply() to properly detect this condition and report it as an error.
* Updating translation files for string freeze.Stephen Gallagher2010-03-1512-24/+72
|
* Prompt for old password even when running as rootRalf Haferkamp2010-03-151-2/+4
| | | | | When changing an expired password (during e.g. login) the PAM module needs to prompt for the old password even when running as root.
generated by cgit (git 2.34.1) at 2024-11-15 17:15:19 +0000