summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* add sysdb_delete_recursive request to sysdb APISumit Bose2009-11-024-4/+282
|
* Make debug message less irritating.Sumit Bose2009-11-021-2/+2
| | | | | | The 'Unable to load' debug message is now only shown when the backend target is given explicitly in the config file. I the other case we let the caller decided how to handle this error condition.
* set ipa_hostname if not given in config fileSumit Bose2009-11-021-0/+20
|
* Fix segfault when SASL is not used at allSimo Sorce2009-10-302-2/+4
|
* remove old sysdb file before starting testsSumit Bose2009-10-301-0/+8
|
* Fix compiler warnings in krb5_utils-tests.Sumit Bose2009-10-301-21/+21
|
* Add AM_CFLAGS to unit testsSumit Bose2009-10-301-8/+12
|
* Add support to get rootDSE from the LDAP server.Simo Sorce2009-10-296-121/+398
| | | | | | | | | | | | Also fic sdap_get_generic_send() to be a bit more "generic" :-) Also figs bugs within it. This patch allow us 2 good things. A) we check that the server effectively supports GSSAPI auth before we try to use it. B) against IPA it substantially cuts delays when the server is offline because it uses a 5 second async timeout on the connection and doesn't try to do a slow synchronous kinit+sasl_bind if the server is not even available.
* Clean up warnings in dhash testsStephen Gallagher2009-10-292-9/+9
|
* Tidy up ipa optionsSimo Sorce2009-10-299-223/+239
| | | | | | | | | | | | | | Do not replicate every and each option we may want to set in ipa. Just read out ldap and krb provider options (added reference in the manual too, and removed mention of ipa specific timeout values, use ldap options for that) Avoid calling auth module initialization twice, just pass the auth context to the chpass module too. Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be used for both users and groups. the user and group search bases can still be set separately if necessary but they are now optional and set to be identical to SDAP_SEARCH_BASE if not explicitly specified in the configuration.
* Allow sysdb_search_entry request to return more than one resultSumit Bose2009-10-293-27/+178
|
* added a ASQ search API for sysdbSumit Bose2009-10-293-0/+356
|
* Kill the ldap connection when we go offlineSimo Sorce2009-10-281-5/+16
| | | | | | This patch uses a wrapper to kill the ldap connection when we are marked offline. This also makes sure we do not try to reuse a bad connection handler after a fatal error.
* Fix sssd.api.conf with correct entry_cache_timeoutStephen Gallagher2009-10-282-2/+5
| | | | | Changeset 3a21103f61bf9b60256cc2d0da54b757b634319f moved the wrong option to the domain list, and also didn't update the unit tests.
* Do not migrate Data ProviderJakub Hrozek2009-10-271-22/+57
| | | | | | Add a way to make changes to the most recent format of config files. Use it to remove all traces of Data Provider from the config file which is being migrated.
* Move responsibility for entry expiration timeoutSimo Sorce2009-10-2717-75/+109
| | | | | The providers are now responsible for determining how long a cached entry is considered valid. The default is the same as before (600s)
* Add proper support for IPA/AD schemasSimo Sorce2009-10-274-202/+574
| | | | | | Nested groups weren't properly handled. Add 2 pass strategy to update groups memberships Stuff work as expected when enumeration is enabled now.
* Fix segfaultSimo Sorce2009-10-271-1/+1
| | | | | | Fix copy/paste error that picked up the wrong request structure to pass down. This was causing the talloc code that checks for the right signature to fail and abort as the 2 request structures have different state structures attacched.
* Remove [dp] section from example configStephen Gallagher2009-10-272-13/+3
| | | | | Also remove references to the DP service from the sssd.conf manpages.
* store original DN with cached group objects if availableSumit Bose2009-10-271-0/+16
|
* Updating polish translation for 0.7.0Piotr Drąg2009-10-272-36/+33
| | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
* Remove DP from example configurationStephen Gallagher2009-10-261-1/+1
|
* Use standard coding practice to set last loginSimo Sorce2009-10-261-90/+128
| | | | | | | | | This rewrite should also fix a segfault in the code that may happen when exiting in case of error conditions. The previous code was attaching the transaction handle to llreq structure and then calling prepare_reply() from within the request handlers which could ultimately free the preq and llreq and handle before the transaction request was actually completed by tevent.
* Zero pointers on freeSimo Sorce2009-10-261-4/+4
| | | | | If the pointer stays around, zero it when it is freed, so we do not risk access to released memory in case of bugs.
* Add IPA conf templateSimo Sorce2009-10-261-0/+9
|
* Read the right buffer, avoids potential segfaultsSimo Sorce2009-10-261-5/+5
| | | | Also fix some debug message levels
* Copy option overrides.Simo Sorce2009-10-261-0/+26
| | | | | We were not copying IPA named options to the ldap id options list. So the ldap_id provider was always using just the default settings.
* Fix migration script for pre-0.5 local domainsJakub Hrozek2009-10-261-2/+11
| | | | | | | Configuration files before 0.5.0 did not enforce provider= in local domains it did special-case by domain name (LOCAL). Our script was relying on provider= value, this patch adds the special-casing in case the domain was called LOCAL.
* Update version to 0.7.0sssd-0_7_0Stephen Gallagher2009-10-237-238/+509
| | | | Update gettext strings
* Add support for offline auth cache timeoutStephen Gallagher2009-10-229-3/+217
| | | | | | | | | This adds a new option (offline_credentials_expiration) to the [PAM] section of the sssd.conf If the user does not perform an online authentication within the timeout (in days), they will be denied auth once the timeout passes.
* Add pam_ctx (similar to nss_ctx) for storing global PAM configStephen Gallagher2009-10-222-5/+25
|
* User home directories managementJakub Hrozek2009-10-2219-60/+1984
| | | | | | Create and populate user directories on useradd, delete them on userdel Fixes: #212
* Fix setting the schema in the ipa providerSimo Sorce2009-10-221-0/+3
|
* fix a compiler warning about redefinition of DEBUGSumit Bose2009-10-221-15/+19
|
* update ipa auth options to new option schemeSumit Bose2009-10-224-110/+134
|
* update krb5 option handling to new option schemeSumit Bose2009-10-229-131/+296
|
* Bring SSSDConfig API options up-to-dateStephen Gallagher2009-10-223-21/+68
|
* add store/search/delete interface for custom sysdb objectsSumit Bose2009-10-224-0/+933
|
* Delete sssd-i18n.h and put it's old contents into util.hMartin Nagy2009-10-227-37/+10
| | | | Also include talloc.h, tevent.h and ldb.h as system headers in util.h.
* Various improvements to the resolv test suiteMartin Nagy2009-10-223-59/+223
| | | | | | | | | | | | | * The resolv test case can now test for TXT and SRV resolving by specifying -t host and -s host respectively. The -n flag must still be passed in to enable network tests. * Added test for the little complicated resolv_copy_hostent() function. * Leak checking using the new tests common functions. * Fix indentation for test_internet, since the whole function was modified to be able to handle SRV and TXT replies. * Initialize the debug variable in main(). Also removed one unused variable in krb5_utils-tests.c
* Add a new set of helpful common functions for testsMartin Nagy2009-10-223-1/+125
| | | | | | | | | | | | | | | | | | | | | | The leak_check_setup() and leak_check_teardown() functions can be added to a test case with tcase_add_checked_fixture(). They will make sure that all tests are checked for memory leaks. However, since talloc is hierarchical and automatically frees the children, this will not catch all cases, but might still be helpful. The check_leaks(ctx, bytes) function takes a talloc context as an argument and the number of bytes it should be using up (children included). The total byte size used up by the context is determined by the talloc_total_size() function. If the size doesn't agree, check_leaks() will print out a talloc report on the context and makes the current test fail. The check_leaks_push() and check_leaks_pop() both take a talloc context as an argument. Every time push is called, the context is "pushed" onto an internal stack and it's current size is noted. When the context is later "poped", the pop function will make sure that the size is the same as when it was pushed. It will also check that it's not called out-of-order or if the stack isn't empty.
* Use talloc to copy data from c-aresMartin Nagy2009-10-222-27/+212
| | | | | | | | | | | C-ares either returned a malloc-ed memory or it automatically freed the memory after out callback has returned. This patch will make sure that anything that the resolv_* function return is allocated by talloc and can be safely freed by talloc_free(). This will break the resolv tests to the point they will not be compilable. This will be addressed in a later patch with other improvements to the tests.
* Resolver: Use talloc_get_type() for type safetyMartin Nagy2009-10-221-5/+5
|
* Fix potential memory leaks in the data providerMartin Nagy2009-10-221-2/+4
|
* Use correct talloc context in sss_names_init()Martin Nagy2009-10-221-2/+2
|
* Better offline/enumeration behaviorSimo Sorce2009-10-221-10/+12
| | | | | | | | Go offline in case of hard errors too. It makes no sense to keep trying too often when you have bad credentials for example. Also delay starting the enumeration thread so that we finish initializations first (bind to ldap is still a blocking operation and this may interfere with clients/monitor registrations).
* added generic LDAP search sdap_get_generic_send/_recvSumit Bose2009-10-224-0/+304
|
* Fix RPM builds on older versions of rpmbuildStephen Gallagher2009-10-201-3/+4
| | | | | | Older versions of rpmbuild do not accept multiple '-f' options being specified, so we'll add the krb5_locator_plugin.so to the sss_daemon.lang filelist instead of putting it in its own file.
* Start implementing ipa specific options.Simo Sorce2009-10-208-8/+779
| | | | | First step generate ldap options from ipa options. Add sssd-ipa man page too.
* Set the Default-Stop LSB option for the SSSD sysv init scriptStephen Gallagher2009-10-201-0/+1
|
generated by cgit (git 2.34.1) at 2024-05-20 19:52:05 +0000