summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove default for ldap_use_start_tls in IPA providersStephen Gallagher2009-12-101-1/+1
|
* Add 'permit' and 'deny' access providers to SSSDConfig APIStephen Gallagher2009-12-102-5/+16
|
* Consolidate code for splitting strings by separatorJakub Hrozek2009-12-106-163/+107
| | | | | | | | There were two functions for parsing strings by a separator. This patch consolidates on the one previously used in confdb. This also allows stripping the tokens of whitespace. Fixes: #319
* Fix for #316Simo Sorce2009-12-101-3/+3
| | | | | We were never filling the group attrs because of an inverse return check. Plus fix a crash bug for using a pointer that is not a memory context.
* Add Swedish translation for SSSD serverGöran Uddeborg2009-12-102-0/+628
|
* Fix processing of Boolean values in SSSDConfigStephen Gallagher2009-12-104-23/+169
| | | | | | | Previously, we were just casting the strings to bool, but this meant that all boolean values were "True". This patch solves the problem and adds regression tests for it.
* Add missing SSSDConfig file for IPA for make installStephen Gallagher2009-12-102-0/+2
| | | | Update tests to include IPA options
* Document the failover feature in manpagesJakub Hrozek2009-12-104-4/+61
| | | | Fixes: #309
* Add Swedish translation for sss_clientGöran Uddeborg2009-12-102-0/+37
|
* Handle the special 02 upgrade case for 04->05Simo Sorce2009-12-101-0/+7
|
* Add rebuild task to memberof pluginSimo Sorce2009-12-105-8/+858
| | | | | | | | | | | This task allows us to rebuild memberuid and memberof attributes throughout the database. This way we can upgrade from version 0.4 databases that didn't generate and store memberuid. The task can be invoked by adding a speaicl named entry to the ldb file. The entry dn to use is: @MEMBEROF-REBUILD, the entry has no attributes and any attribute is ignored at present. The entry will not be stored in the database but will just trigger the task to execute a rebuild of the memberof and memberuid attributes
* Always update sysdb to the latest versionSumit Bose2009-12-101-3/+11
|
* INI: Cleaning FIXME comments.Dmitri Pal2009-12-103-7/+16
| | | | | | | Added configurable key length. Changed comments for the functions that are currently not used and reserved for future functionality.
* COLLECTION: Cleaning FIXME commentsDmitri Pal2009-12-103-20/+2
| | | | | | | I scanned through the code and made sure that the FIXME comments are either addressed or a corresponding ticket exists. I removed two comments that had "FIXME" in them. The tickets for those comments are #72 and #308.
* COLLECTION Create reference to the top level collectionDmitri Pal2009-12-103-21/+47
| | | | | | | | | | | | | This patch adds ability to create a reference to the top level collection. Previously one could get reference only to collection inside other collection. With this change it becomes possible to have two pointers to the same top level collection from multiple places. COLLECTION Adding comment. COLLECTION: Some tracing
* COMMON Improvements to the trace macroDmitri Pal2009-12-101-9/+15
| | | | | Added more distingushable indication to the trace messages that represent errors.
* Add German translationFabian Affolter2009-12-094-0/+696
|
* Add missing options to sssd-ipa configuraionStephen Gallagher2009-12-091-0/+72
|
* Properly deny id_provider=filesStephen Gallagher2009-12-092-6/+7
|
* Correctly restart server status after the timeoutMartin Nagy2009-12-091-1/+1
| | | | | | | The macro STATUS_DIFF() was wrong causing the result to always be lower than 0, therefore the timeout was never reached. Fixes: #302
* Add some debugging statements to fail_over and resolverMartin Nagy2009-12-092-5/+69
| | | | | These were very useful for debugging and hopefully still will be in the future.
* Ensure that list_active_domains returns the real valueStephen Gallagher2009-12-091-4/+16
| | | | | | | | Previously, we were accidentally filtering out domains that were not configured, so deleted domains might still appear in the active domain list. This patch should ensure that this never happens.
* SSSDConfig.get_domain() should properly detect active stateStephen Gallagher2009-12-092-0/+30
|
* Don't build the SRV and TXT parsing code except for testsJakub Hrozek2009-12-092-8/+18
|
* Import ares 1.7.0 helpersJakub Hrozek2009-12-0910-116/+374
|
* Change ares usage to be c-ares 1.7.0 compatibleJakub Hrozek2009-12-093-87/+102
| | | | | | * Rename structure accordingly to ares upstream * Use new ares parsing functions in the wrappers * fix tests for ares 1.7
* SSSDConfig API: fix deactivate_domain()Stephen Gallagher2009-12-092-2/+73
| | | | | deactivate_domain() would crash if it attempted to deactivate an already-inactive domain
* Fix egg-info file generation in the spec fileMartin Nagy2009-12-091-4/+4
| | | | | | | We were actually listing files that are on the system, not those that we created in the $RPM_BUILD_ROOT. Also, by doing an echo with the regular expression, we put more than one file on one line. Rpmbuild doesn't like that and will not generate the rpms.
* Reduce code duplication between LDAP child and Kerberos childJakub Hrozek2009-12-094-234/+160
| | | | Fixes: #294
* Fix RPM spec for RHEL6Stephen Gallagher2009-12-091-1/+6
|
* Do not start with provider=filesJakub Hrozek2009-12-081-0/+6
| | | | Fixes: #233
* Fix SSSDConfig API bugs around [de-]activation of domainsStephen Gallagher2009-12-082-7/+152
| | | | | | | | | Adds two new public functions: SSSDConfig.activate_domain() SSSDConfig.deactivate_domain() These two functions are used during the save_domain() call to ensure that the active domain list is always kept up to date.
* Fix broken SSSDChangeConf.set() functionStephen Gallagher2009-12-081-1/+1
| | | | | | The set function didn't do anything at all. It needed to use the ipachangeconf.merge() function to behave properly instead of mergeNew()
* Reduce the verbosity of the SSSDConfigTestStephen Gallagher2009-12-081-4/+4
| | | | Now it will report only failures or final success
* Add SSSDDomain.set_name() function to SSSDConfig APIStephen Gallagher2009-12-082-3/+77
| | | | This function will change the name of an existing domain
* Add comments to document latest changesSimo Sorce2009-12-081-0/+7
|
* dhash: Add private pointer for delete callbackSimo Sorce2009-12-086-15/+38
| | | | | Also pass a flag to the delete callback to tell it if this is a normal entry removal or we are cleaning up the tbale definitively.
* Add Spanish translationbeckerde2009-12-082-174/+201
|
* Add Portuguese translationruigo2009-12-084-0/+693
|
* Run dhash testsStephen Gallagher2009-12-081-0/+2
| | | | Previously we were only building them but not running them.
* Make SSSDDomain.remove_provider() remove configured optionsStephen Gallagher2009-12-082-6/+54
| | | | | | | We will remove all options for a provider that are not also required by another configured provider. (For example, we will not remove krb5_realm when deleting the krb5 auth provider if the LDAP provider is in use, since it may still require this argument).
* SSSDDomain.remove_provider() requires only the provider typeStephen Gallagher2009-12-082-12/+18
| | | | | There was no valid reason to require the backend type when specifying a provider to remove.
* Fix potential uninitialized value error in responder_dp.cStephen Gallagher2009-12-081-1/+1
| | | | | | If we fell into the default case of the switch statement, we would attempt to talloc_free() a random memory location. This patch guarantees that sdp_req is NULL if it has not been initialized.
* Fix potential uninitialized value errors in nsssrv_cmd.cStephen Gallagher2009-12-081-1/+2
|
* Avoid returning uninitialized result.Stephen Gallagher2009-12-081-0/+1
| | | | | If grouplist was a zero-length array, we would return ret unitialized.
* Add allocation error checkStephen Gallagher2009-12-081-7/+10
|
* Change dhash API to be talloc-friendlySimo Sorce2009-12-084-55/+82
|
* Add dummy credentials to an empty ccache fileSumit Bose2009-12-081-2/+54
| | | | | | | | | Application like krb5-auth-dialog might get confused if there is a credential cache file without any credentials in it. This patch adds an expired credential where only the client and the server principal are set. The client principal is the user's principal and the server principal corresponds to a TGT principal of the realm the user belongs to.
* Fail on nonexistent input fileJakub Hrozek2009-12-082-3/+12
|
* Handle spaces in config parserJakub Hrozek2009-12-083-2/+43
| | | | Fixes: #301