summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* remove redundant talloc_freeSumit Bose2009-10-051-3/+0
| | | | - this patch should fix bug #213, a double free in the sdap timeout handler
* ask for new password if password is expiredSumit Bose2009-10-051-7/+40
|
* move password handling into subroutinesSumit Bose2009-10-051-71/+117
|
* handle expired password during authenticationSumit Bose2009-10-051-2/+25
|
* Fix python sync operations and mem hierarchyJakub Hrozek2009-10-051-397/+191
| | | | | | | | | Similar to Simo's patch that fixed the tools, this one converts the python bindings to the start_transaction/end_transaction functions. Also fixes memory hierarchy so that tools_ctx is allocated in every operation and used as memory context for the operation instead of self->mem_ctx which simplifies cleanup.
* more documentation and test for sssd.confSumit Bose2009-10-052-0/+34
| | | | | - add a hint to the man page about permissions on sssd.conf - add a test if a symbolic link can be opened
* add utility call check_and_open_readonlySumit Bose2009-10-056-8/+315
| | | | | Use this new utility call to ensure that the config file is safe to read from.
* INI Add config_from_fd() to ini_configStephen Gallagher2009-10-053-22/+239
| | | | | | | Patch adds ability to read configuration using already open file descriptor. Started by Steve G and refined a bit by me.
* ELAPI Fixing warnings in the exampleDmitri Pal2009-10-051-2/+9
|
* ELAPI Resolving message attributeDmitri Pal2009-10-058-57/+536
| | | | | | | | | | | | This patch continues work started with the previous patch. It resolves message attribute. Message attribute is a special attribute in the event that may contain references to other attributes in the event. When message is resolved the references are replaced with actual values of the referenced attributes.
* ELAPI Event resolverDmitri Pal2009-10-0514-95/+828
| | | | | | | | | | | | | | | | | Started working on the async processing and realised that I need to have a good copy of the event with all the fields resolved so this patch has some foundation for the async functions (module elapi_async.c) but they are mostly stubbed out. The actual code will be added down the road. Instead the patch focuses on the code introduced in elapi_resolve.c module and the use of the functions from it. It also adds the implementation of the high level calls that initialize ELAPI with the external callbacks to be used during async processing (elapi_log.c).
* COLLECTION Enhancing hashing and iteration functionsDmitri Pal2009-10-054-8/+76
|
* COLLECTION Making iterations pinnableDmitri Pal2009-10-054-7/+220
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a feature that helps ELAPI. It makes lookup of the fields that need to be resolved for every event a bit faster. The idea is to be able to put a 'pin' into a specific place while iterating the collection and make this place a new "wrap around" place for the collection. This means that next time you iterate this collection you will start iterating from the next item and the item you got before pin will be last in your iteration cycle. Here is the example: Assume you have two collections that you need to compare and perform some action on collection 1 based on the presense of the item in collection 2. Collection1 = A, B, C, D, E. F Collection2 = A, C, F The usual approach is to try A from collection 1 against A, B, C from collection 2. "A" will be found right away. But to find "F" it has to be compared to "A" and "C" first. The fact that the collections are to some extent ordered can in some cases help to reduce the number of comparisons. If we found "C" in the list we can put a "pin" into the collection there causing the iterator to warp at this "pin" point. Since "D" and "E" are not in the second collection we will have to make same amount of comparisons in traditional or "pinned" case to not find them. To find "F" in pinned case there will be just one comparison. Traditional case = 1 + 3 + 2 + 3 + 3 + 3 = 15 Pinned case = 1 + 3 + 1 + 3 + 3 + 1 = 12 It is a 20% comparison reduction.
* COLLECTION Realigning collection codeDmitri Pal2009-10-054-330/+372
| | | | | | | | | | Created a new module to hold functions related to iterator and iterating collections. Planning to add new functions but the main collection module is already too big. So this patch just moves code around and fixes the build making foundation for the next patch.
* COLLECTION Adding item comparison and sortingDmitri Pal2009-10-057-5/+697
| | | | | | | | | | | Needed item comparison functions and realized that the easiest way to test them would be using sorting. Since there already been a ticket #73 to do that I added function to sort collection based on different properties of the item. COLLECTION Fixing issues with comparisons COLLECTION Adding do-while to macro
* Fix long timeout on ldap operationSimo Sorce2009-10-012-5/+14
| | | | | Always use the network timeout defined in the options. But raise defaults to 60 seconds or enumerations can easily fail.
* Fix tools sync operations and mem hierarchySimo Sorce2009-10-0110-319/+193
| | | | | | | Tools were using nested loops that are illegal. (and enforced in latest tevent with a nice abort()) Fix them by creating appropriate synchronous transaction calls. Also fix tools_ctx mem hierarchy setup.
* Initial implementation of sasl bind supportSimo Sorce2009-10-017-59/+567
| | | | | | Inits krb5 credentials, if sasl mech is GSSAPI. Tested with GSSAPI and host keytab as well as user credentials. Updates also manpages with the new options.
* update sysdb tests to new config file versionSumit Bose2009-10-011-12/+3
|
* Update polish translation for 0.6.0Piotr Drąg2009-10-012-75/+28
|
* Change requirement on libldb to libldb >= 0.9.3Stephen Gallagher2009-09-301-1/+1
|
* Updating release script to use the VERSION fileStephen Gallagher2009-09-291-1/+1
|
* Fix infinite loop with empty group enumerationStephen Gallagher2009-09-291-13/+15
| | | | | | Loop control variable was not being incremented. I also converted a goto loop into a do...while loop to make it easier to follow the logic.
* Tighten up permission.Simo Sorce2009-09-282-2/+13
| | | | | | | SSSD may contain passwords and other sensitive data, make sure we always keep its permission tight. Also make /etc/sssd permission very strict, just in case, admins may inadvertently copy an sssd.conf file without checking it's permissions.
* Update version to 0.6.0sssd-0_6_0Stephen Gallagher2009-09-257-358/+294
| | | | Update gettext strings
* add defines for large file support to standard CFLAGSSumit Bose2009-09-251-0/+2
| | | | | | - this fixes a compiler warning about the redefinition of SIZEOF_OFF_T in the python bindings, because python is compiled with large file support.
* Let backend respond while fetching large resultsSimo Sorce2009-09-251-2/+11
| | | | | | | Timers always come before fd events, wait 5 microseconds between processing operations so that tevent has a chance of cactching an fd event in between. This allows the backend to reply to pings even while processing very large ldap results (importanty especially during the first enumeration).
* remove krb5_try_simple_upn option and make it a default fallbackSumit Bose2009-09-254-24/+17
|
* Convert the example config to v2 format, upgrade config on update onlyJakub Hrozek2009-09-252-78/+60
|
* Send debug messages to logfileJakub Hrozek2009-09-2515-11/+129
| | | | | | | | | | | | | Introduces a new option --debug-to-files which makes SSSD output its debug information to a file instead of stderr, which is still the default. Also introduces a new confdb option debug_to_files which does the same, but can be specified per-service in the config file. The logfiles are stored in /var/log/sssd by default. Changes the initscript to log to files by default.
* fix possible short reads in kerberos providerSumit Bose2009-09-252-15/+46
|
* Split out an sssd-clients packageSimo Sorce2009-09-251-6/+27
|
* add new config options ldap_tls_cacert and ldap_tls_cacertdirSumit Bose2009-09-255-67/+115
|
* script to upgrade config to v2Jakub Hrozek2009-09-253-0/+361
|
* Manpages updateJakub Hrozek2009-09-253-224/+193
|
* Upgrade confdb to version 2Stephen Gallagher2009-09-2521-237/+310
| | | | | This converts a great many configuration options to the new standard format.
* toggle debug output of sssd_krb5_locator_plugin with an environment variableSumit Bose2009-09-251-36/+55
|
* Temporarily disable automatic config file rereadStephen Gallagher2009-09-251-1/+7
| | | | | | | | | The backends do not honor the reloadConfig SBUS message right now, so if an admin changes the sssd.conf file, it will update only the monitor, potentially leaving the SSSD as a whole in a bad state. This patch will simply comment out monitor_config_file() for the time being until https://fedorahosted.org/sssd/ticket/91 is fixed.
* added support for older MIT kerberos versionssbose2009-09-248-12/+177
| | | | | | | | | - make the build of the locator plugin optional - added a man page for the locator plugin - use krb5.h if krb5/krb5.h cannot be found - added alternatives for missing functions - set -DDBUS_API_SUBJECT_TO_CHANGE if libdbus version is lesser than 1.0.0
* Handle suspend casesSimo Sorce2009-09-241-6/+13
| | | | | | When a laptop is suspended it may be dormant for hours. Do not check just the kast time a ping was successful, keep a counter with the failed pings instead.
* add a man page for pam_sssSumit Bose2009-09-236-23/+214
|
* Remove provider=filesJakub Hrozek2009-09-235-90/+1
| | | | | | | Remove this provider type, as well as any references in the docs and examples to the "LEGACYLOCAL" migration domain. Fixes: #165
* use getaddrinfo to resolve IP address of KDCSumit Bose2009-09-231-17/+58
|
* Don't try to use initgroups_dyn if not availableSimo Sorce2009-09-231-0/+3
| | | | Fixes a segfault seen in the wild with providers=files
* Fix copy&paste of wrong structureSimo Sorce2009-09-231-2/+2
|
* Allow entering parent groups as FQDNJakub Hrozek2009-09-238-7/+83
| | | | | | | | Allow entering parent groups for groupadd,useradd,usermod as FQDN. Since members and parents must be from the same domain, error out if we can't determine the domain of member. Fixes: #121
* Revert "Use syslog for logging error conditions in SSSD"Stephen Gallagher2009-09-2329-460/+403
| | | | | | | | This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
* Make configure script compatible with older python versionsStephen Gallagher2009-09-221-7/+16
| | | | | | | | Older python versions (such as that used in RHEL5) do not have a python-config executable to report CFLAGS and LIBS. In order to support such versions of python, we will duplicate the logic that python-config would have performed directly in our configure script
* ELAPI: Ticket 161: Initialize structures with calloc instead of enumerating ↵Jakub Hrozek2009-09-215-36/+6
| | | | members
* Several fixes and enhancements for config file processingStephen Gallagher2009-09-211-15/+78
| | | | | | | 1) Add get_entry_as_bool function 2) Make all parameters in confdb_get_domain_internal() use macro names for the attributes. This will make it easer to convert them to the version 2 config file.
generated by cgit (git 2.34.1) at 2024-05-02 20:59:53 +0000