summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Include m4 directories in tarballStephen Gallagher2009-09-1510-7/+25
| | | | Necessary for RPM builds on RHEL5
* INI Error handling and interface cleanupDmitri Pal2009-09-152-30/+86
| | | | | | | | Inspired by issue #173 I reviewed the other function of the interface and found a lot of problems with its error handling. Also made INI use collection public interfaces.
* added child timeout handlerSumit Bose2009-09-143-6/+104
|
* fix the wrong usage of an offsetSumit Bose2009-09-141-1/+1
|
* add krb5ccache_dir and krb5ccname_template optionSumit Bose2009-09-149-60/+713
| | | | | | | | The configuration options krb5ccache_dir and krb5ccname_template are added to the Kerberos provider to create the user's credential caches the same way as pam_krb5 does. Due to the design of the sssd and the supported ccache types of MIT Kerberos only files are allowed.
* make cli_pid mandatory and increase version number of pam protocolSumit Bose2009-09-143-4/+28
|
* remove unused client locale from PAM protocolSumit Bose2009-09-141-19/+0
|
* Let the PAM client send its PIDSumit Bose2009-09-145-14/+63
| | | | | | - the client sends the PID as uint32_t and sssd will use uint32_t too - fix a possible type issue where a uint32_t is sent as int32 in internal dbus communication
* Turn ldap driver options into multitypeSimo Sorce2009-09-146-194/+376
| | | | | | | | | | This patch makes basic options multiype, the init function assigns a type from the initialization array, and processes values fetched from confdb accordingly. 4 types are supported so far: string, number, blob and boolean Also convert defines into enums where appropriate. Add fetch functions that check the requested type.
* Make the offline status backend-globalSimo Sorce2009-09-146-215/+94
| | | | | Add helpers functions to query/set the offline status per backend. Now all providers share the same offline status.
* Exit if the sssd is launched as a user other than rootStephen Gallagher2009-09-111-0/+9
|
* Print error message when connection to the config db failsStephen Gallagher2009-09-111-0/+2
|
* use fork+exec for kerberos helperSumit Bose2009-09-115-195/+477
|
* add change password target to krb5 backendSumit Bose2009-09-116-209/+464
|
* Update documentation and examplesSimo Sorce2009-09-113-18/+31
| | | | | | | Remove the "legacy" option from examples and man pages. Legacy is is finally R.I.P Add docs for ldapSchema in sssd-ldap man page.
* Complete the removal of "legacy" option.Simo Sorce2009-09-1110-76/+243
| | | | | | | | | The code was still dependent on it for the ldap driver. Changed the driver code to depend on the schema type. Fix defaults for user and groups trees. ATM if you use the rfc2307bis schema you have to put users and groups in 2 separate trees (what people does by default anyway. If this limitation will turn to be too hard, we will change this later.
* Fix getgrnam and getgrgid callsSimo Sorce2009-09-111-7/+9
| | | | | The patch that added check_cache() broke them, no results returned for any group with actual members ...
* Add strtoint32 and strtouint32 testsStephen Gallagher2009-09-112-0/+465
|
* Add 'make tests' targetStephen Gallagher2009-09-1112-0/+33
|
* Fix ldap enumeration async taskSimo Sorce2009-09-111-12/+16
| | | | | | | | | The request was being freed, instead of marking it done and let the callback free it when done. This was causing us to access freed memory, when trying to set the next run. Let the callback add new runs and free the request instead as normally we would do with any other tevent_req async call. Courtesy of valgrind again.
* Fix memory mishandling.Simo Sorce2009-09-111-10/+7
| | | | | | | | By attaching the reply to a subreq, we ended up freeing the operations list element before we used it to skip to the next one. Do not steal the context and let the unlocking code free the old reply, when it moves onto processing the next one. Got this one with valgrind.
* Fix first-time confdb generationStephen Gallagher2009-09-111-1/+1
| | | | We were talloc_free()-ing the cdb_file string too early.
* ELAPI Better separation from collection internals.Dmitri Pal2009-09-111-20/+24
| | | | | | This patch eliminates the need to include collection's private header and uses only public interface.
* COLLECTION Functions to deal with hashDmitri Pal2009-09-113-17/+71
| | | | | | | | | | | | | | | The hashing logic was internal to the collection item. But if someone wants to effectively deal with the items and compare the property to a string he should compare hashes first. But it was not possible without the provided functions. As a result some of the ELAPI modules had to take advantage of knowledge of the item structure. This is bad. So this patch lays foundation for refactoring of the ELAPI code that was using internals of the item directly (file_util.c mostly). Also patch adds a unit test that was required for testing new functionality and for ticket #83
* Add copyright noticesJakub Hrozek2009-09-1116-0/+328
| | | | Fixes: #138
* Small changes to the example config and manpageJakub Hrozek2009-09-112-18/+29
| | | | | | | | | Remove magicPrivateGroups since it's set automatically, use bool values for enumerate. Also add a notice about krb5 auth-module with a link to specialized manpage to sssd.conf(5) similar to what we have for ldap auth-module. Move both outside proxy domain description.
* Read the configuration parsing before daemonizationStephen Gallagher2009-09-102-83/+106
| | | | | | | We will now parse the config file and validate the confdb contents before processing the rest of the monitor startup. This will allow us to return an appropriate error code to the shell if the configuration is invalid.
* Remove unused event context argument from confdb_initStephen Gallagher2009-09-106-7/+5
| | | | | | Because the confdb always operates synchronously, it maintains its own private event context internally. The event context argument passed to it is never used, so we'll remove it to avoid confusion.
* Properly detect negative/invalid values for the minId and maxIdStephen Gallagher2009-09-101-6/+53
|
* Add strtoint32 and strtouint32 convenience functionsStephen Gallagher2009-09-105-0/+144
|
* Fix Ldap id backend offline codeSimo Sorce2009-09-102-14/+83
| | | | | | | After the recent changes we lost the capability to actually go offline. Put back code that would mark the backend as offline when timeouts happen. Make sure the enumeration code also obbeys the offline timeout, and contributes in determining if we are offline or not.
* COLLECTION Improvements to copy functionsDmitri Pal2009-09-104-51/+191
| | | | | | | | | | | | | | | | | | | | This patch adds better options for copying collections in flat mode. It allows caller of the interface to control prefixing of the fields when one collection is appended to another. It also avoids creating prefixes when the collection is simply copied in flat mode. Also for ELAPI I realized that the most efficient way to deal with the "resolved" event (event where all templeted values are actually replaced with the real values) is to add a callback capability to a copy collection function so that the callback can be used to modify the data (resolve it) while the copy operation is in progress. This approach eliminates the need for separate set of lookups after the event is already copied.
* Update manpage to reflect new syntax for enumerateStephen Gallagher2009-09-101-12/+6
|
* Check for valid min and max IDs in confdb_get_domainsStephen Gallagher2009-09-101-1/+7
|
* Add support for the EntryCacheNoWaitRefreshTimeoutStephen Gallagher2009-09-095-2/+75
| | | | | | | | This timeout specifies the lifetime of a cache entry before it is updated out-of-band. When this timeout is hit, the request will still complete from cache, but the SSSD will also go and update the cached entry in the background to extend the life of the cache entry and reduce the wait time of a future request.
* Consolidate cache lookups in the NSSStephen Gallagher2009-09-091-177/+93
| | | | | | getpwnam, getpwuid, getgrnam and getgrgid will now use a common function, check_cache, for determining whether to return a cached value or to go to the provider.
* Cleanups for library linkingsbose2009-09-091-2/+1
| | | | | - remove unused PAM_LIBS from LDAP and Kerberos provider - add OPENLDAP_LIBS to LDAP provider
* more fixes for older libpcre versionssbose2009-09-092-3/+10
| | | | | - older version of libpcre only support the Python syntax (?P<name>) for named subpatterns
* COLLECTION Copy collection flat with concatenated namesDmitri Pal2009-09-095-239/+365
| | | | | | | | | | | | | | | | | | | | | This patch addresses several issues: a) Adds capability to add or copy the collections in flattened mode but construct names of attributes in dotted notation. For example when you append collection "sub" with items "foo" and "bar" previously you could add them as "foo" and "bar" not you can flatten them and the names will be "sub.foo" and "sub.bar" this allows better processing of the attributes in the elapi message. b) Removes old implemntation of the copy collection function. c) Removes the col_set_timestamp, this functionality has been moved to ELAPI long ago. d) Updates collection unit test. e) Updates elapi to use new functionality f) Updates elapi unit test Have run under valgrind with no problems.
* ELAPI Laying foundation for the async processingDmitri Pal2009-09-086-90/+175
| | | | | | | A relatively small patch aligning headers and a small portion of code for upcoming implementation of the async event processing. Cleanup of the test config file.
* ELAPI Adding file provider and CSV formatDmitri Pal2009-09-0820-139/+2250
| | | | | | | | | | | | | | | | | | | | | This patch creates the infrastructure for logging of the event from the top of the interface to the bottom. It is a start. A lot of functionality is left aside. The attempt of this patch is pass event from caller of the ELAPI interface via targets to sinks then to providers and do serialization creating entity that is ready to be written to a file. It also implements more specific provider related configuration parameters. Also it addresses couple suggestions that were brought up against previous patch. ELAPI Correcting issues This patch addresses the issues found during the review of the previous patches and addresses ticket #166.
* ELAPI sinks and providersDmitri Pal2009-09-089-143/+1016
| | | | | | | | | This patch drills down to the next level of ELAPI functionality. I adds the creation and loading of the sinks. It also implements a skeleton for the first low level provider which will be capable of writing to a file. The configuration ini file is extended to define new configuration parameters and their meanings.
* Remove shadow-utils support from toolsJakub Hrozek2009-09-088-763/+73
| | | | | Removes the ability to proxy to shadow-utils. Also remove all the supporting functions for getting domain type, domain by id etc.
* Tools are allowed to touch only the 'local' domainSimo Sorce2009-09-088-76/+35
|
* Split database in multiple filesSimo Sorce2009-09-0826-335/+1184
| | | | | The special persistent local database retains the original name. All other backends now have their own cache-NAME.ldb file.
* Fix two possible uninitialized valuesSimo Sorce2009-09-082-4/+5
| | | | Make counter for used messages explicit.
* initialize sockaddr_in structureSumit Bose2009-09-081-0/+10
|
* fix libdbus configure checkSumit Bose2009-09-082-1/+2
| | | | | - remove unneeded CFLAGS component - do not leak LDFLAGS used by configure check to final Makefile
* configure cleanupsSumit Bose2009-09-0315-22/+31
| | | | | - replaced mailing list address - let sssd base components read version from VERSION
* Avoid crash when timestamp is NULLRalf Haferkamp2009-09-031-1/+3
| | | | | Check if the timestamp argument of sdap_save_group_recv is NULL before using it.
generated by cgit (git 2.34.1) at 2024-04-27 04:14:56 +0000