Commit message (Collapse)AuthorAgeFilesLines
* Package SSSDConfig APIStephen Gallagher2009-10-133-0/+64
* Add plugin configuration schema for proxy providerStephen Gallagher2009-10-131-0/+7
* Add new SSSDConfig python APIStephen Gallagher2009-10-139-0/+2111
| | | | Also adds unit tests for the SSSDConfig API
* Make dp requests more robustSimo Sorce2009-10-131-36/+109
| | | | | | | This should fix #218 It should also prevent us from leaking memory in case the original request times out and should prevent races with the callbacks beeing freed after sdp_req is freed and thus dereferencing freed memory in the callbacks detructors.
* Fix long timeout on ldap operationSimo Sorce2009-10-132-5/+14
| | | | | Always use the network timeout defined in the options. But raise defaults to 60 seconds or enumerations can easily fail.
* Fix infinite loop with empty group enumerationStephen Gallagher2009-10-131-13/+15
| | | | | | Loop control variable was not being incremented. I also converted a goto loop into a do...while loop to make it easier to follow the logic.
* Update polish translation for 0.6.0Piotr Drąg2009-10-132-75/+28
* Update version to 0.6.0sssd-0_6_0Stephen Gallagher2009-09-257-358/+294
| | | | Update gettext strings
* add defines for large file support to standard CFLAGSSumit Bose2009-09-251-0/+2
| | | | | | - this fixes a compiler warning about the redefinition of SIZEOF_OFF_T in the python bindings, because python is compiled with large file support.
* Let backend respond while fetching large resultsSimo Sorce2009-09-251-2/+11
| | | | | | | Timers always come before fd events, wait 5 microseconds between processing operations so that tevent has a chance of cactching an fd event in between. This allows the backend to reply to pings even while processing very large ldap results (importanty especially during the first enumeration).
* remove krb5_try_simple_upn option and make it a default fallbackSumit Bose2009-09-254-24/+17
* Convert the example config to v2 format, upgrade config on update onlyJakub Hrozek2009-09-252-78/+60
* Send debug messages to logfileJakub Hrozek2009-09-2515-11/+129
| | | | | | | | | | | | | Introduces a new option --debug-to-files which makes SSSD output its debug information to a file instead of stderr, which is still the default. Also introduces a new confdb option debug_to_files which does the same, but can be specified per-service in the config file. The logfiles are stored in /var/log/sssd by default. Changes the initscript to log to files by default.
* fix possible short reads in kerberos providerSumit Bose2009-09-252-15/+46
* Split out an sssd-clients packageSimo Sorce2009-09-251-6/+27
* add new config options ldap_tls_cacert and ldap_tls_cacertdirSumit Bose2009-09-255-67/+115
* script to upgrade config to v2Jakub Hrozek2009-09-253-0/+361
* Manpages updateJakub Hrozek2009-09-253-224/+193
* Upgrade confdb to version 2Stephen Gallagher2009-09-2521-237/+310
| | | | | This converts a great many configuration options to the new standard format.
* toggle debug output of sssd_krb5_locator_plugin with an environment variableSumit Bose2009-09-251-36/+55
* Temporarily disable automatic config file rereadStephen Gallagher2009-09-251-1/+7
| | | | | | | | | The backends do not honor the reloadConfig SBUS message right now, so if an admin changes the sssd.conf file, it will update only the monitor, potentially leaving the SSSD as a whole in a bad state. This patch will simply comment out monitor_config_file() for the time being until is fixed.
* added support for older MIT kerberos versionssbose2009-09-248-12/+177
| | | | | | | | | - make the build of the locator plugin optional - added a man page for the locator plugin - use krb5.h if krb5/krb5.h cannot be found - added alternatives for missing functions - set -DDBUS_API_SUBJECT_TO_CHANGE if libdbus version is lesser than 1.0.0
* Handle suspend casesSimo Sorce2009-09-241-6/+13
| | | | | | When a laptop is suspended it may be dormant for hours. Do not check just the kast time a ping was successful, keep a counter with the failed pings instead.
* add a man page for pam_sssSumit Bose2009-09-236-23/+214
* Remove provider=filesJakub Hrozek2009-09-235-90/+1
| | | | | | | Remove this provider type, as well as any references in the docs and examples to the "LEGACYLOCAL" migration domain. Fixes: #165
* use getaddrinfo to resolve IP address of KDCSumit Bose2009-09-231-17/+58
* Don't try to use initgroups_dyn if not availableSimo Sorce2009-09-231-0/+3
| | | | Fixes a segfault seen in the wild with providers=files
* Fix copy&paste of wrong structureSimo Sorce2009-09-231-2/+2
* Allow entering parent groups as FQDNJakub Hrozek2009-09-238-7/+83
| | | | | | | | Allow entering parent groups for groupadd,useradd,usermod as FQDN. Since members and parents must be from the same domain, error out if we can't determine the domain of member. Fixes: #121
* Revert "Use syslog for logging error conditions in SSSD"Stephen Gallagher2009-09-2329-460/+403
| | | | | | | | This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
* Make configure script compatible with older python versionsStephen Gallagher2009-09-221-7/+16
| | | | | | | | Older python versions (such as that used in RHEL5) do not have a python-config executable to report CFLAGS and LIBS. In order to support such versions of python, we will duplicate the logic that python-config would have performed directly in our configure script
* ELAPI: Ticket 161: Initialize structures with calloc instead of enumerating ↵Jakub Hrozek2009-09-215-36/+6
| | | | members
* Several fixes and enhancements for config file processingStephen Gallagher2009-09-211-15/+78
| | | | | | | 1) Add get_entry_as_bool function 2) Make all parameters in confdb_get_domain_internal() use macro names for the attributes. This will make it easer to convert them to the version 2 config file.
* ELAPI: fix varargs call, update unit testsJakub Hrozek2009-09-213-8/+58
* Use syslog for logging error conditions in SSSDJakub Hrozek2009-09-2129-398/+455
| | | | | This is just a band-aid until ELAPI is fully functional and ready to use.
* Provide python bindings for sysdbJakub Hrozek2009-09-219-1/+1540
| | | | | | | | Implement a set of python bindings for the sysdb with feature set similar to what is available in the tools. The primary consumers would be applications like system-config-users. Resolves: Ticket #102
* Decouple synchronous sysdb interface from toolsJakub Hrozek2009-09-2111-1020/+1845
| | | | | | | | Instead of working directly with async code in tools, create synchronous wrappers that could be used by tools and python bindings. Also resolves many issues with code duplication in tools and thus fixes ticket #87
* Refactor tools codeJakub Hrozek2009-09-218-268/+244
| | | | | | | | | | | | | | | | Move parameter parsing in tools before attempting to do anything that might fail - so that we have debug_level set correctly for potential error messages. That allows printing the --help and --usage messages without being root. Fix code duplicates in tools and refactor its code a little to lay ground for decoupling the synchronous interfaces. Remove some legacy tools leftovers, re-add sensible error message on removing nonexistent users/groups which was removed by accident. Fixes: Trac ticket #75 Fix typo in groupdel: fixes ticket #136
* Include groupSearchBase in sssd-ldap(5) manpageStephen Gallagher2009-09-181-1/+11
* Add missing reference to sssd-ldap(5) in sssd.conf(5) manpageStephen Gallagher2009-09-181-0/+3
* Add documentation for installing build dependenciesJeff Schroeder2009-09-181-1/+8
| | | | Signed-off-by: Stephen Gallagher <>
* Add binaries and backup files to .gitignoreJakub Hrozek2009-09-181-0/+14
* Better handle groups w/o membersSimo Sorce2009-09-171-6/+122
| | | | | | | | | | There was a chance that groups w/o members could end up causing a failure to store the group. This would happen in case the structure used by glibc to fill up the group data was "dirty". Always memset structures before passing them to te libc and also check if there are any members, before calling the async function. Finally add some tracing at level 7 so that it is easier to follow what is going on in case of touble.
* Fix copy&paste error.Simo Sorce2009-09-171-4/+4
* Add missing updates to LINGUAS for pl translationStephen Gallagher2009-09-162-0/+2
* Add pl translationPiotr Drąg2009-09-162-0/+291
* ELAPI: Fix dispatcher structure initializationJakub Hrozek2009-09-161-10/+1
* Check if SSL/TLS handler is already in placeSumit Bose2009-09-161-1/+8
| | | | | | | | | Authentication against a LDAP server should always use an encrypted connection. To acchive this the LDAP provider calls ldap_start_tls which will fail if the connection is already encrypted, e.g. if an ldaps tunnel is already established. Because the error message from ldap_start_tls is not specific we check the status with ldap_tls_inplace before calling ldap_start_tls.
* Add PRERELEASE_VERSION variable for use in sssd.spec.inStephen Gallagher2009-09-152-1/+11
| | | | | | This will add a second, optional line to the VERSION file that will be used by the automated build scripts to create snapshot versions.
* Allow rerunning autoreconf from the tarballStephen Gallagher2009-09-152-0/+4
| | | | | | We were missing two files from the tarball distribution that prevented autoreconf from running successfully: VERSION and replace/autoconf-2.60.m4