Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | IPA hosts refactoring | Jan Zeleny | 2012-02-24 | 18 | -154/+156 |
| | |||||
* | LDAP: Only use paging control on requests for multiple entries | Stephen Gallagher | 2012-02-24 | 16 | -40/+100 |
| | | | | | | | | | | The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one | ||||
* | AUTOFS: Search all search bases for automounter map entries | Jakub Hrozek | 2012-02-23 | 1 | -18/+86 |
| | | | | https://fedorahosted.org/sssd/ticket/1168 | ||||
* | AUTOFS: Invoke implicit setautomntent if needed | Jakub Hrozek | 2012-02-23 | 2 | -45/+156 |
| | | | | https://fedorahosted.org/sssd/ticket/1167 | ||||
* | libnl: fix the path to phy80211 subdirectory | Jakub Hrozek | 2012-02-23 | 1 | -4/+20 |
| | |||||
* | Move sudo_dom_ctx.user to local variable | Pavel Březina | 2012-02-23 | 2 | -8/+8 |
| | |||||
* | Honor case_sensitive option in sudo responder | Pavel Březina | 2012-02-23 | 4 | -21/+100 |
| | | | | https://fedorahosted.org/sssd/ticket/1205 | ||||
* | LDAP: Properly assign orig_dn | Stephen Gallagher | 2012-02-23 | 1 | -0/+1 |
| | | | | This was only used for properly identifying debug messages. | ||||
* | Save errno value before calling DEBUG | Jakub Hrozek | 2012-02-23 | 1 | -2/+4 |
| | |||||
* | pam_sss: keep selinux optional | Simo Sorce | 2012-02-23 | 3 | -4/+7 |
| | | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com> | ||||
* | nss_group: Cache the result from sssd when the glibc provided buffer is too ↵ | Simo Sorce | 2012-02-23 | 1 | -8/+145 |
| | | | | small. | ||||
* | IPA: Add ipa_parse_search_base() | Stephen Gallagher | 2012-02-23 | 3 | -19/+72 |
| | | | | | | | | | | Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151 | ||||
* | Add tool to convert debug levels | Stephen Gallagher | 2012-02-22 | 1 | -0/+100 |
| | | | | | | | | | | | | | Older versions of SSSD (1.5 and earlier) would take a debug_level value set in the [sssd] section as authoritative for all other sections where not explicitly overridden. We changed this so that all sections need to set it if they want debug logs set. This script can be run to make the new version continue to produce the same logs as the old versions did, by explicitly adding debug_level to all domains and services that did not have it set already. Bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=753763 | ||||
* | Don't give memory context in confdb where not needed | Jan Zeleny | 2012-02-21 | 17 | -55/+75 |
| | |||||
* | remove unused function | Jakub Hrozek | 2012-02-21 | 1 | -20/+0 |
| | |||||
* | End request if ldap_parse_result fails | Jakub Hrozek | 2012-02-21 | 1 | -0/+3 |
| | |||||
* | Include the fd_limit configuration option | Jakub Hrozek | 2012-02-18 | 1 | -0/+1 |
| | |||||
* | RESPONDERS: Make the fd_limit setting configurable | Stephen Gallagher | 2012-02-17 | 7 | -4/+63 |
| | | | | | | | | | | This code will now attempt first to see if it has privilege to set the value as specified, and if not it will fall back to the previous behavior. So on systems with the CAP_SYS_RESOURCE capability granted to SSSD, it will be able to ignore the limits.conf hard limit. https://fedorahosted.org/sssd/ticket/1197 | ||||
* | RESPONDERS: Allow increasing the file-descriptor limit | Stephen Gallagher | 2012-02-17 | 4 | -0/+48 |
| | | | | | | | This patch will increase the file descriptor limit to 8k or the limits.conf maximum, whichever is lesser. https://fedorahosted.org/sssd/ticket/1197 | ||||
* | Fix case insensitive service lookups | Jakub Hrozek | 2012-02-17 | 1 | -6/+6 |
| | |||||
* | LDAP: Ignore group member users that do not have name attributes | Stephen Gallagher | 2012-02-17 | 1 | -2/+2 |
| | | | | | | | | Instead of failing the group lookup, just skip them. This was impacting some users of ActiveDirectory where not all users had the appropriate attributes. https://fedorahosted.org/sssd/ticket/1169 | ||||
* | NSS: Always return the same protocol that was requested | Stephen Gallagher | 2012-02-17 | 2 | -9/+26 |
| | | | | https://fedorahosted.org/sssd/ticket/1160 | ||||
* | Redesign purging of the sudo cache | Pavel Březina | 2012-02-17 | 3 | -94/+370 |
| | | | | https://fedorahosted.org/sssd/ticket/1173 | ||||
* | Fix missing %endif in sssd.spec.in | Stephen Gallagher | 2012-02-15 | 1 | -0/+1 |
| | |||||
* | Always include all manpage XML files in the distribution tarball | Stephen Gallagher | 2012-02-15 | 1 | -2/+3 |
| | |||||
* | Move sss_ssh_* binaries to the main 'sssd' package | Stephen Gallagher | 2012-02-15 | 1 | -6/+7 |
| | | | | | The sssd-client subpackage is multilib, so it cannot contain conflicting /usr/bin executables. | ||||
* | Refactor sss_result into sss_sudo_result | Pavel Březina | 2012-02-14 | 5 | -36/+38 |
| | | | | https://fedorahosted.org/sssd/ticket/1159 | ||||
* | SSH: Build man pages conditionally | Jan Cholasta | 2012-02-14 | 2 | -4/+6 |
| | | | | https://fedorahosted.org/sssd/ticket/1175 | ||||
* | Fix memory hierarchy when processing nested group memberships | Jakub Hrozek | 2012-02-14 | 4 | -11/+14 |
| | | | | https://fedorahosted.org/sssd/ticket/1186 | ||||
* | Ensure NULL-termination in get_uid_from_pid() | Stephen Gallagher | 2012-02-14 | 1 | -0/+3 |
| | | | | Coverity #12399 | ||||
* | Fix uninitialized value error in proxy provider | Stephen Gallagher | 2012-02-13 | 1 | -1/+1 |
| | | | | Coverity #12467 | ||||
* | Check for failure in sss_packet_grow() | Stephen Gallagher | 2012-02-13 | 1 | -5/+5 |
| | | | | Coverity #12489 | ||||
* | Fix bad failure handling in be_sudo_handler() | Stephen Gallagher | 2012-02-13 | 1 | -13/+13 |
| | | | | | | | If the dbus_message_get_args() failed, we would have been dereferencing a NULL be_req. Coverity #12490 | ||||
* | Fix uninitialized in_transaction | Stephen Gallagher | 2012-02-13 | 2 | -2/+2 |
| | | | | Coverity #12521 and #12491 | ||||
* | Add missing breaks to switch statements | Stephen Gallagher | 2012-02-13 | 2 | -0/+2 |
| | | | | Coverity #12525 and #12524 | ||||
* | Avoid uninitialized value comparison | Stephen Gallagher | 2012-02-13 | 1 | -0/+3 |
| | | | | Coverity #12526 | ||||
* | Fix missing NULL check after malloc | Stephen Gallagher | 2012-02-13 | 1 | -0/+4 |
| | | | | Coverity #12528 | ||||
* | Remove dead code | Stephen Gallagher | 2012-02-13 | 1 | -9/+0 |
| | | | | Coverity #12529 | ||||
* | SSH: Verify that names received from client are valid UTF-8 in responder | Jan Cholasta | 2012-02-13 | 2 | -0/+21 |
| | | | | | | | Also added a comment describing the wire format of client requests and responses. https://fedorahosted.org/sssd/ticket/1177 | ||||
* | Allocate setent structure on state, not on the client context | Jakub Hrozek | 2012-02-13 | 4 | -9/+9 |
| | | | | https://fedorahosted.org/sssd/ticket/1189 | ||||
* | Remove setent structure when callback is called | Jakub Hrozek | 2012-02-13 | 5 | -22/+16 |
| | |||||
* | Only fetch SELinux string if the user is found | Jakub Hrozek | 2012-02-10 | 1 | -1/+2 |
| | |||||
* | Fixed issue with netgroup update in IPA provider | Jan Zeleny | 2012-02-10 | 1 | -24/+34 |
| | | | | | This issue led to a netgroup with one triple (-,-,domain) when it contained no triples on the IPA server. | ||||
* | Use curly braces in pkgconfig metadata file | Sumit Bose | 2012-02-10 | 1 | -1/+1 |
| | |||||
* | SUDO responder: check if the input is a UTF-8 string | Pavel Březina | 2012-02-10 | 1 | -0/+7 |
| | | | | https://fedorahosted.org/sssd/ticket/1171 | ||||
* | Improve debug messages in sysdb_sudo_check_time() | Pavel Březina | 2012-02-10 | 1 | -4/+16 |
| | |||||
* | Fix group enumeration | Jakub Hrozek | 2012-02-10 | 2 | -2/+9 |
| | | | | | | Also adds some more debugging and fixes a code style issue. https://fedorahosted.org/sssd/ticket/1182 | ||||
* | Add ssh service to sssd.api.conf | Jan Cholasta | 2012-02-10 | 2 | -2/+7 |
| | |||||
* | Add methods for activating and deactivating services to SSSDConfig | Jan Cholasta | 2012-02-10 | 3 | -0/+268 |
| | |||||
* | fix typos in manual | Yuri Chornoivan | 2012-02-07 | 2 | -2/+2 |
| |