summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Update version to 0.99.0sssd-0_99_0Stephen Gallagher2009-11-301-1/+1
|
* Remove unneeded debugging codeSumit Bose2009-11-251-9/+0
|
* Fix an internal error when cache_credentials=FALSESumit Bose2009-11-251-1/+4
|
* Fix bug with bad ldb pkg-config filesStephen Gallagher2009-11-251-1/+1
|
* Update PL translationraven2009-11-251-7/+6
|
* Get TGT in a child process.Jakub Hrozek2009-11-2510-165/+1081
| | | | | | | To avoid blocking in a synchronous call, the TGT is saved in a separate process Fixes: #277
* Split helpers for child processesJakub Hrozek2009-11-258-174/+267
| | | | | Moves several functions out of providers/krb5 hierarchy into a separate module so it can be shared by the ldap child.
* In IPA, the realm is always the domain uppercased.Simo Sorce2009-11-251-2/+7
|
* Make ldb lib dir configurableSumit Bose2009-11-252-1/+19
|
* Use ldb modules from build root for testsSumit Bose2009-11-252-0/+5
|
* Fix internal options numbers testSimo Sorce2009-11-251-12/+24
| | | | | | Unfortunately since we changed the defines to an enum the preprocessor test stopped working. Turn tests into runtime tests that will abort the process.
* Really check return value from pam_set_itemSumit Bose2009-11-231-3/+3
|
* Fix ticket #289Simo Sorce2009-11-231-0/+18
| | | | | When I converted fill_grent to speed up enumerations I left out this check by mistake.
* Update translation strings for string freezeStephen Gallagher2009-11-236-383/+463
|
* Read KDC info from file instead from environmentSumit Bose2009-11-2313-74/+477
| | | | | | Then name or IP adress of the KDC is written into the pubconf directory into a file named kdcinfo.REALM. The locator plugin will then read this file and pass the data to the kerberos libraries.
* Speed up user requests while offlineStephen Gallagher2009-11-236-52/+102
| | | | | | | | | This adds a new boolean option to sss_dp_send_acct_req() called fast_reply. If we make a request to the backends and we are currently offline, this option will determine whether we should immediately return from the cache (acceptable for NSS requests) or potentially wait for an online check to complete (required for PAM requests).
* Make backend request type a bitfieldStephen Gallagher2009-11-233-5/+5
|
* Update NL translationStephen Gallagher2009-11-231-6/+6
|
* Update PL translationStephen Gallagher2009-11-231-79/+80
|
* Add ldap_pwd_policy optionSumit Bose2009-11-237-45/+129
|
* Add initial failover support for ldap and ipaSimo Sorce2009-11-2022-69/+938
| | | | | | | The retun values are still not directly used with ldap libraries that still do their own name resolution, but this patch introduces a very basic framework to have a multiple providers in one domain use and share a single failover service if they want to.
* Raise some timeoutsSimo Sorce2009-11-202-3/+3
| | | | | When using high debug levels or valgrind the code maybe slow enough that these timeouts were too strict.
* Filter by id range before actually storing entries.Simo Sorce2009-11-204-31/+89
| | | | This way we do not need to check for id ranges on every search.
* Optimize sysdb_enumgrentSimo Sorce2009-11-203-504/+203
| | | | | This brings down the time needed to enumerate my group database from 2.4 seconds to 0.15 seconds.
* Only display errors in unit testsStephen Gallagher2009-11-2010-11/+21
| | | | | If you want to turn verbosity back on, just set the environment variable CK_VERBOSITY=verbose
* Enhance check for remote hostsSumit Bose2009-11-202-55/+97
|
* Add ipa_authSumit Bose2009-11-205-1/+352
| | | | | | | | To support IPA DS to Kerberos password migration a seperate authentication target is added. It calls the Kerberos authentication target and in the case of a 'Preauthentication Error' the LDAP authentication target. On success the Kerberos target is called again to request the TGT.
* Add reference to sssd-krb5 man page.Simo Sorce2009-11-201-0/+3
| | | | Thanks to Marko Myllynen for spotting this.
* Improve handling of ccache filesSumit Bose2009-11-208-206/+1081
| | | | | | | - save current ccache file to sysdb - use the saved ccache file if the user has running processes - create an empty ccache if offline - return enviroment variables if offline
* Correctly escape DN value.Simo Sorce2009-11-201-6/+42
| | | | | In building the DN string we weren't correctly escaping the value of the RDN component. This patches fixes that.
* Better behavior on cleanupSimo Sorce2009-11-204-20/+44
| | | | | | | | | | | | With the previous code in domains with many users and enumeration enable we would eventually end up making thousands of individual searches for entries in the clean-up process. Change the code to do a full enumeration before a cleanup so we do one single big search to update all entries and only then search for entries to purge. This also fixes the fact that the cleanup task was running at every enumeration instead of running every "ldap_purge_cache_timeout" seconds.
* Add empty NL translationStephen Gallagher2009-11-204-0/+654
|
* Validate Kerberos credentials with local keytabSumit Bose2009-11-2016-43/+326
|
* upgrade_config fixes for SSSD 0.6 and laterJakub Hrozek2009-11-201-1/+19
| | | | | | | | | Incorporates changes we made to v2 after 0.6, or that were missed by the original upgrade script: * removes magic_private_groups option * removes libPath option * changes provider=files to provider=proxy proxy_lib_name=files * changes store-legacy-passwords to store_legacy_passwords
* SSSDConfigAPI fixesJakub Hrozek2009-11-202-399/+133
| | | | | | | | | * splitlist is a function * shared SSSDConfigObject to reduce code duplication * added missing exception class * fixed some typos * remove extra 'pass' in unittests * use assertRaises in unittests
* Convert SSSDConfig API to ipachangeconfJakub Hrozek2009-11-203-59/+70
| | | | | | | With this patch, SSSDConfigAPI is able to keep comments and ordering of sections. Fixes: #226
* Change the upgrade script to use ipachangeconfJakub Hrozek2009-11-202-189/+165
| | | | | | | With this patch, the upgrade script we use for changing the config files is able to keep ordering and comments. Fixes: #249
* SSSDChangeConf - a wrapper around ipachangeconfJakub Hrozek2009-11-201-0/+91
| | | | | Provides a convenient wrapper around ipachangeconf that is closer API-wise to ConfigParser
* Add Simo's ipachangeconfJakub Hrozek2009-11-203-0/+461
|
* Fix sysdb upgrade bugStephen Gallagher2009-11-191-1/+1
| | | | | | After completing an upgrade successfully, we were still falling into the "version not found" case. We should be exiting the function after performing the upgrade.
* Make the password field configurable in NSSJakub Hrozek2009-11-186-4/+17
| | | | | | | | Per the discussion on sssd-devel list, nss_sss should not return a hardcoded value but this should rather be configurable to allow whatever the OS or distribution thinks is the best for the particular case. Fixes: #266
* Adding Japanese translationnoriko2009-11-184-0/+654
|
* Add Italian translation for sss_clientdeneb2009-11-182-0/+41
|
* Add French translation to sss_clientBouska2009-11-182-0/+37
|
* Update translatable stringsStephen Gallagher2009-11-186-39/+69
|
* Failover fixes and additionsSimo Sorce2009-11-183-7/+25
|
* Store initgr expire time on initgr callSimo Sorce2009-11-181-6/+17
|
* Change the pam code to perform an initgroups callSimo Sorce2009-11-181-1/+1
| | | | | | An initgroups call refreshes both the user and the user's groups, this is ideal for pam so that we don't need addiotnal initgroups calls (initgroups calls are cached too now) during the login process.
* Change initgroups code to use and check the cacheSimo Sorce2009-11-182-218/+109
| | | | | | | We were previously always ending up contacting the backend because we had no way to know if an initgroups call for the same user had ever been called. Add attribute to hold this information and rely on backends to update it. If they don't we fallback to the previous behvior of asking the backend.
* Fix crash due to uninitialized timeout variableSimo Sorce2009-11-181-0/+1
| | | | | This slipped through in previous patches. Fixes #283
generated by cgit (git 2.34.1) at 2024-04-26 23:46:31 +0000