Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add ipa_hbac_support_srchost option to IPA provider | Jan Zeleny | 2011-11-29 | 9 | -36/+165 | |
| | | | | | don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078 | |||||
* | IPA migration fixes | Jakub Hrozek | 2011-11-29 | 3 | -97/+141 | |
| | | | | | | | * use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924 | |||||
* | Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connections | Jakub Hrozek | 2011-11-29 | 5 | -11/+43 | |
| | ||||||
* | RESPONDER: Refactor DP requests into tevent_req style | Stephen Gallagher | 2011-11-29 | 6 | -427/+641 | |
| | ||||||
* | LDAP: Try next failover server on any error | Stephen Gallagher | 2011-11-29 | 1 | -9/+5 | |
| | ||||||
* | Add -fno-strict-aliasing | Stephen Gallagher | 2011-11-28 | 1 | -1/+2 | |
| | ||||||
* | Fixed logically dead code in netgroup processing | Jan Zeleny | 2011-11-28 | 1 | -1/+1 | |
| | ||||||
* | Fixed uninitialized pointer read in netgroups processing | Jan Zeleny | 2011-11-28 | 1 | -0/+6 | |
| | ||||||
* | sss_cli.h - fix: function declaration after the header guard | Pavel Březina | 2011-11-28 | 1 | -2/+2 | |
| | ||||||
* | Fixed a typo in sysdb_upgrade_07() declaration | Jan Zeleny | 2011-11-28 | 1 | -1/+1 | |
| | ||||||
* | Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA provider | Jakub Hrozek | 2011-11-25 | 4 | -4/+18 | |
| | | | | | This was causing a segfault during HBAC processing and any ID lookups except for netgroups | |||||
* | Fix broken build due to commit of IPA netgroup support | Stephen Gallagher | 2011-11-23 | 1 | -0/+1 | |
| | ||||||
* | Added IPA account info handler | Jan Zeleny | 2011-11-23 | 4 | -1/+374 | |
| | | | | | Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider. | |||||
* | Added support for fetching netgroups in IPA provider | Jan Zeleny | 2011-11-23 | 2 | -0/+993 | |
| | ||||||
* | New IPA ID context | Jan Zeleny | 2011-11-23 | 3 | -22/+37 | |
| | ||||||
* | Added and modified options for IPA netgroups | Jan Zeleny | 2011-11-23 | 6 | -31/+199 | |
| | ||||||
* | Modified sdap_parse_search_base() | Jan Zeleny | 2011-11-23 | 4 | -16/+14 | |
| | ||||||
* | Renamed some LDAP routines | Jan Zeleny | 2011-11-23 | 6 | -41/+49 | |
| | | | | | These were renamed just ot make sure they are not mistook for IPA netgroup functions. | |||||
* | Set more strict permissions on keyring | Simo Sorce | 2011-11-22 | 3 | -1/+29 | |
| | | | | | We want to confine access to the keyring to the current process and not let root easily peek into the keyring contents. | |||||
* | Fixed unchecked value of setenv() in check_and_export_options() | Jan Zeleny | 2011-11-22 | 1 | -2/+5 | |
| | | | | https://fedorahosted.org/sssd/ticket/1080 | |||||
* | Cleanup: Remove unused parameters | Jakub Hrozek | 2011-11-22 | 36 | -185/+84 | |
| | ||||||
* | SYSDB: Make ENOENT log messages less threatening | Stephen Gallagher | 2011-11-22 | 1 | -16/+54 | |
| | | | | | Previously, they were reported with the prefix "Error:" which caused confusion among end-users while debugging. | |||||
* | Fix FTBFS related to -Werror=format-security | Krzysztof Klimonda | 2011-11-21 | 2 | -2/+2 | |
| | ||||||
* | RESPONDER: Ensure that all input strings are valid UTF-8 | Stephen Gallagher | 2011-11-18 | 7 | -2/+53 | |
| | ||||||
* | Prevent printing NULL in several places of LDAP provider | Jakub Hrozek | 2011-11-18 | 2 | -5/+9 | |
| | ||||||
* | Use one transaction instead of two during RFC2307bis group processing | Jakub Hrozek | 2011-11-11 | 1 | -31/+55 | |
| | | | | https://fedorahosted.org/sssd/ticket/1054 | |||||
* | Squash transactions in sdap_initgr_common_store | Jakub Hrozek | 2011-11-11 | 1 | -6/+25 | |
| | | | | https://fedorahosted.org/sssd/ticket/1053 | |||||
* | configAPI: Fix removing in old domain when saving a new domain | Jakub Hrozek | 2011-11-10 | 1 | -2/+2 | |
| | ||||||
* | Typo fixes | Marko Myllynen | 2011-11-10 | 2 | -2/+2 | |
| | | | | Fix few trivial types reported by Yuri. | |||||
* | SBUS: Fix DEBUG log matching | Stephen Gallagher | 2011-11-10 | 1 | -7/+8 | |
| | | | | | | This log message should only be displayed at the most verbose of log levels. Since it didn't match, it was resulting in a Coverity error warning of the printing of an uninitialized value (fd). | |||||
* | Fix typos in manual pages | Yuri Chornoivan | 2011-11-10 | 4 | -4/+4 | |
| | ||||||
* | Fixed translation bug | Thorsten Scherf | 2011-11-08 | 1 | -1/+1 | |
| | ||||||
* | LDAP: Remove redundant groups from the lookup list | Stephen Gallagher | 2011-11-08 | 1 | -23/+0 | |
| | ||||||
* | Fixed empty loginShell in proxy provider | Jan Zeleny | 2011-11-07 | 1 | -4/+32 | |
| | | | | https://fedorahosted.org/sssd/ticket/892 | |||||
* | Fixed possible resource leak in create_mail_spool() | Jan Zeleny | 2011-11-07 | 1 | -9/+9 | |
| | | | | https://fedorahosted.org/sssd/ticket/1071 | |||||
* | Fixed possible resource leak in get_uid_from_pid() | Jan Zeleny | 2011-11-07 | 1 | -4/+10 | |
| | | | | https://fedorahosted.org/sssd/ticket/1069 | |||||
* | Use correct state struct in sdap_initgr_rfc2307bis_next_base | Jakub Hrozek | 2011-11-07 | 1 | -2/+3 | |
| | ||||||
* | Fix segfault in sdap_get_initgr_user | Jakub Hrozek | 2011-11-07 | 1 | -1/+2 | |
| | ||||||
* | Periodic translation file update | Stephen Gallagher | 2011-11-02 | 74 | -13664/+33273 | |
| | ||||||
* | SYSDB: add index for nameAlias | Stephen Gallagher | 2011-11-02 | 3 | -1/+97 | |
| | ||||||
* | Handle group renaming correctly | Jan Zeleny | 2011-11-02 | 1 | -2/+7 | |
| | | | | https://fedorahosted.org/sssd/ticket/1040 | |||||
* | Support to request canonicalization in LDAP/IPA provider | Jan Zeleny | 2011-11-02 | 10 | -1/+45 | |
| | | | | https://fedorahosted.org/sssd/ticket/957 | |||||
* | Add support to request canonicalization on krb AS requests | Jan Zeleny | 2011-11-02 | 10 | -6/+68 | |
| | | | | https://fedorahosted.org/sssd/ticket/957 | |||||
* | Add wrapper for krb5_get_init_creds_opt_set_canonicalize | Jan Zeleny | 2011-11-02 | 3 | -0/+14 | |
| | ||||||
* | Fixes debug-tests.c coverity issues: NEGATIVE_RETURNS, FORWARD_NULL | Pavel Březina | 2011-11-02 | 1 | -49/+140 | |
| | | | | https://fedorahosted.org/sssd/ticket/1046 | |||||
* | RESPONDER: Fix segfault in sss_packet_send() | Stephen Gallagher | 2011-11-02 | 1 | -0/+5 | |
| | | | | | | | | | There are several places (all error-handling) where sss_cmd_done() is called with no response packet created. As a short-term solution, we need to check whether the packet is NULL and simply return EINVAL. client_send() (the consumer) will then forcibly disconnect the client (which will return PAM_SYSTEM_ERR to the client). | |||||
* | LDAP: Add support for multiple search bases for group enumeration | Stephen Gallagher | 2011-11-02 | 4 | -24/+101 | |
| | ||||||
* | LDAP: Add support for multiple search bases for user enumeration | Stephen Gallagher | 2011-11-02 | 4 | -8/+49 | |
| | ||||||
* | LDAP: Convert ldap_*_search_filter | Stephen Gallagher | 2011-11-02 | 3 | -59/+23 | |
| | | | | | | Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter. | |||||
* | LDAP: Update manpages with multiple search base information | Stephen Gallagher | 2011-11-02 | 1 | -1/+56 | |
| |