summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* IPA hosts refactoringJan Zeleny2012-02-2418-154/+156
|
* LDAP: Only use paging control on requests for multiple entriesStephen Gallagher2012-02-2416-40/+100
| | | | | | | | | | The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
* AUTOFS: Search all search bases for automounter map entriesJakub Hrozek2012-02-231-18/+86
| | | | https://fedorahosted.org/sssd/ticket/1168
* AUTOFS: Invoke implicit setautomntent if neededJakub Hrozek2012-02-232-45/+156
| | | | https://fedorahosted.org/sssd/ticket/1167
* libnl: fix the path to phy80211 subdirectoryJakub Hrozek2012-02-231-4/+20
|
* Move sudo_dom_ctx.user to local variablePavel Březina2012-02-232-8/+8
|
* Honor case_sensitive option in sudo responderPavel Březina2012-02-234-21/+100
| | | | https://fedorahosted.org/sssd/ticket/1205
* LDAP: Properly assign orig_dnStephen Gallagher2012-02-231-0/+1
| | | | This was only used for properly identifying debug messages.
* Save errno value before calling DEBUGJakub Hrozek2012-02-231-2/+4
|
* pam_sss: keep selinux optionalSimo Sorce2012-02-233-4/+7
| | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
* nss_group: Cache the result from sssd when the glibc provided buffer is too ↵Simo Sorce2012-02-231-8/+145
| | | | small.
* IPA: Add ipa_parse_search_base()Stephen Gallagher2012-02-233-19/+72
| | | | | | | | | | Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151
* Add tool to convert debug levelsStephen Gallagher2012-02-221-0/+100
| | | | | | | | | | | | | Older versions of SSSD (1.5 and earlier) would take a debug_level value set in the [sssd] section as authoritative for all other sections where not explicitly overridden. We changed this so that all sections need to set it if they want debug logs set. This script can be run to make the new version continue to produce the same logs as the old versions did, by explicitly adding debug_level to all domains and services that did not have it set already. Bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=753763
* Don't give memory context in confdb where not neededJan Zeleny2012-02-2117-55/+75
|
* remove unused functionJakub Hrozek2012-02-211-20/+0
|
* End request if ldap_parse_result failsJakub Hrozek2012-02-211-0/+3
|
* Include the fd_limit configuration optionJakub Hrozek2012-02-181-0/+1
|
* RESPONDERS: Make the fd_limit setting configurableStephen Gallagher2012-02-177-4/+63
| | | | | | | | | | This code will now attempt first to see if it has privilege to set the value as specified, and if not it will fall back to the previous behavior. So on systems with the CAP_SYS_RESOURCE capability granted to SSSD, it will be able to ignore the limits.conf hard limit. https://fedorahosted.org/sssd/ticket/1197
* RESPONDERS: Allow increasing the file-descriptor limitStephen Gallagher2012-02-174-0/+48
| | | | | | | This patch will increase the file descriptor limit to 8k or the limits.conf maximum, whichever is lesser. https://fedorahosted.org/sssd/ticket/1197
* Fix case insensitive service lookupsJakub Hrozek2012-02-171-6/+6
|
* LDAP: Ignore group member users that do not have name attributesStephen Gallagher2012-02-171-2/+2
| | | | | | | | Instead of failing the group lookup, just skip them. This was impacting some users of ActiveDirectory where not all users had the appropriate attributes. https://fedorahosted.org/sssd/ticket/1169
* NSS: Always return the same protocol that was requestedStephen Gallagher2012-02-172-9/+26
| | | | https://fedorahosted.org/sssd/ticket/1160
* Redesign purging of the sudo cachePavel Březina2012-02-173-94/+370
| | | | https://fedorahosted.org/sssd/ticket/1173
* Fix missing %endif in sssd.spec.inStephen Gallagher2012-02-151-0/+1
|
* Always include all manpage XML files in the distribution tarballStephen Gallagher2012-02-151-2/+3
|
* Move sss_ssh_* binaries to the main 'sssd' packageStephen Gallagher2012-02-151-6/+7
| | | | | The sssd-client subpackage is multilib, so it cannot contain conflicting /usr/bin executables.
* Refactor sss_result into sss_sudo_resultPavel Březina2012-02-145-36/+38
| | | | https://fedorahosted.org/sssd/ticket/1159
* SSH: Build man pages conditionallyJan Cholasta2012-02-142-4/+6
| | | | https://fedorahosted.org/sssd/ticket/1175
* Fix memory hierarchy when processing nested group membershipsJakub Hrozek2012-02-144-11/+14
| | | | https://fedorahosted.org/sssd/ticket/1186
* Ensure NULL-termination in get_uid_from_pid()Stephen Gallagher2012-02-141-0/+3
| | | | Coverity #12399
* Fix uninitialized value error in proxy providerStephen Gallagher2012-02-131-1/+1
| | | | Coverity #12467
* Check for failure in sss_packet_grow()Stephen Gallagher2012-02-131-5/+5
| | | | Coverity #12489
* Fix bad failure handling in be_sudo_handler()Stephen Gallagher2012-02-131-13/+13
| | | | | | | If the dbus_message_get_args() failed, we would have been dereferencing a NULL be_req. Coverity #12490
* Fix uninitialized in_transactionStephen Gallagher2012-02-132-2/+2
| | | | Coverity #12521 and #12491
* Add missing breaks to switch statementsStephen Gallagher2012-02-132-0/+2
| | | | Coverity #12525 and #12524
* Avoid uninitialized value comparisonStephen Gallagher2012-02-131-0/+3
| | | | Coverity #12526
* Fix missing NULL check after mallocStephen Gallagher2012-02-131-0/+4
| | | | Coverity #12528
* Remove dead codeStephen Gallagher2012-02-131-9/+0
| | | | Coverity #12529
* SSH: Verify that names received from client are valid UTF-8 in responderJan Cholasta2012-02-132-0/+21
| | | | | | | Also added a comment describing the wire format of client requests and responses. https://fedorahosted.org/sssd/ticket/1177
* Allocate setent structure on state, not on the client contextJakub Hrozek2012-02-134-9/+9
| | | | https://fedorahosted.org/sssd/ticket/1189
* Remove setent structure when callback is calledJakub Hrozek2012-02-135-22/+16
|
* Only fetch SELinux string if the user is foundJakub Hrozek2012-02-101-1/+2
|
* Fixed issue with netgroup update in IPA providerJan Zeleny2012-02-101-24/+34
| | | | | This issue led to a netgroup with one triple (-,-,domain) when it contained no triples on the IPA server.
* Use curly braces in pkgconfig metadata fileSumit Bose2012-02-101-1/+1
|
* SUDO responder: check if the input is a UTF-8 stringPavel Březina2012-02-101-0/+7
| | | | https://fedorahosted.org/sssd/ticket/1171
* Improve debug messages in sysdb_sudo_check_time()Pavel Březina2012-02-101-4/+16
|
* Fix group enumerationJakub Hrozek2012-02-102-2/+9
| | | | | | Also adds some more debugging and fixes a code style issue. https://fedorahosted.org/sssd/ticket/1182
* Add ssh service to sssd.api.confJan Cholasta2012-02-102-2/+7
|
* Add methods for activating and deactivating services to SSSDConfigJan Cholasta2012-02-103-0/+268
|
* fix typos in manualYuri Chornoivan2012-02-072-2/+2
|