summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* TESTS: Add a chpass test to krb5_childkrb5testJakub Hrozek2014-10-302-9/+54
* TESTS: Add a cwrap-enabled test for krb5_childJakub Hrozek2014-10-305-4/+258
* TESTS: Fix krb5_child testJakub Hrozek2014-10-301-1/+18
* NOUPSTREAM: Default to root if sssd user is not specifiedJakub Hrozek2014-10-301-1/+1
* BE: Make struct bet_queue_item private to sssd_beJakub Hrozek2014-10-302-10/+10
* BE: Become a regular user after initializationJakub Hrozek2014-10-301-0/+13
* KRB5: Do not switch_creds() if already the specified userJakub Hrozek2014-10-302-7/+27
* KRB5: Move all ccache operations to krb5_child.cJakub Hrozek2014-10-307-206/+223
* KRB5: Move checking for illegal RE to krb5_utils.cJakub Hrozek2014-10-305-89/+68
* KRB5: Move ccache-related functions to krb5_ccache.cJakub Hrozek2014-10-3011-708/+787
* KRB5: Drop privileges in the child, not the back endJakub Hrozek2014-10-302-20/+43
* BUILD: Install krb5_child as suid if running under non-privileged userJakub Hrozek2014-10-301-0/+2
* IPA: Move setting the SELinux context to a child processJakub Hrozek2014-10-295-20/+688
* UTIL: Remove more code duplication setting up child processesJakub Hrozek2014-10-295-58/+42
* UTIL: Remove code duplication of struct ioJakub Hrozek2014-10-294-76/+41
* LDAP: Drop privileges after kinit in ldap_childJakub Hrozek2014-10-293-35/+67
* LDAP: read the correct data type from ldap_child's input bufferJakub Hrozek2014-10-291-2/+2
* LDAP: Move sss_krb5_verify_keytab_ex to ldap_childJakub Hrozek2014-10-293-80/+79
* BUILD: Install ldap_child and as setuid if running under non-privileged userJakub Hrozek2014-10-291-0/+5
* KRB5: Add utility function to get a list of principals from keytabJakub Hrozek2014-10-291-1/+115
* nss: preserve service name in getsrv callMichal Zidek2014-10-291-2/+2
* RESPONDERS: Set default value for umaskPavel Reichl2014-10-298-0/+18
* RESPONDERS: Don't hard-code umask value in utility functionPavel Reichl2014-10-291-4/+4
* BUILD: Fix linking cwrap tests with -Wl,--as-neededLukas Slebodnik2014-10-271-1/+1
* RESPONDERS: refactor create_pipe_fd()Pavel Reichl2014-10-272-10/+13
* sdap_print_server: use getpeername() to get server addressSumit Bose2014-10-271-1/+1
* nss: group enumeration fixSumit Bose2014-10-271-0/+3
* TESTS: Add tests for the views-related option mapsJakub Hrozek2014-10-221-1/+2
* SBUS: Fix error handling after closing containerLukas Slebodnik2014-10-221-0/+2
* pyhbac,pysss: fix reference leaksPavel Reichl2014-10-222-12/+20
* GPO: Terminate request on errorJakub Hrozek2014-10-221-0/+2
* NSS: Possibility to use any shells in 'allowed_shells'Denis Kutin2014-10-222-6/+23
* MAN PAGE: modified sssd-ldap.5.xml for sssd ticket #2451Dan Lavu2014-10-221-1/+25
* SPEC: Print testsuite log for failed testLukas Slebodnik2014-10-221-1/+1
* SSH: Run the ssh responder as the SSSD userJakub Hrozek2014-10-222-2/+4
* SUDO: Run the sudo responder as the SSSD userJakub Hrozek2014-10-222-2/+3
* PAC: Run the pac responder as the SSSD userJakub Hrozek2014-10-222-2/+4
* AUTOFS: Run the autofs responder as the SSSD userJakub Hrozek2014-10-222-2/+3
* PAM: Run pam responder as nonrootMichal Zidek2014-10-222-2/+3
* PAM: Create pipe file descriptors before privileges are droppedMichal Zidek2014-10-221-4/+26
* responders: Do not initialize pipe fd if already presentMichal Zidek2014-10-229-14/+24
* TEST: Unit test for create_pipe_fdJakub Hrozek2014-10-221-0/+91
* responder_common: Create fd for pipe in helperMichal Zidek2014-10-222-72/+65
* NSS: Run as a user specified by monitorJakub Hrozek2014-10-222-1/+5
* SYSDB: Allow calling chown on the sysdb file from monitorMichal Zidek2014-10-223-1/+32
* MONITOR: Allow confdb to be accessed by nonroot userMichal Zidek2014-10-221-1/+12
* BE: Own the sbus socket as the SSSD userJakub Hrozek2014-10-223-4/+22
* SBUS: Allow connections from other UIDsJakub Hrozek2014-10-223-0/+27
* SBUS: Chown the sbus socket if neededJakub Hrozek2014-10-227-9/+39
* SSSD: Load a user to run a service as from configurationJakub Hrozek2014-10-226-0/+73