summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* sysdb: convert sysdb_delete_userSimo Sorce2010-04-126-356/+115
|
* sysdb: convert sysdb_search_usersSimo Sorce2010-04-123-169/+72
|
* sysdb remove sldb_request_send, not used anymoreSimo Sorce2010-04-121-125/+0
|
* sysdb: convert sysdb_asq_searchSimo Sorce2010-04-124-358/+140
|
* sysdb: convert sysdb_store_customSimo Sorce2010-04-124-258/+93
|
* sysdb: convert sysdb_search_customSimo Sorce2010-04-124-371/+229
|
* sysdb: convert sysdb_cache_passwordSimo Sorce2010-04-126-209/+62
|
* sysdb: convert sysdb_mod/add/remove_group_memberSimo Sorce2010-04-124-628/+117
|
* sysdb: convert sysdb_store/add(_basic)_groupSimo Sorce2010-04-126-850/+294
|
* sysdb: convert sysdb_store/add(_basic)_userSimo Sorce2010-04-126-891/+430
|
* sysdb: convert sysdb_get_new_idSimo Sorce2010-04-122-397/+136
|
* sysdb: convert sysdb_set_entry/user/group_attrSimo Sorce2010-04-127-589/+144
|
* sysdb: convert sysdb_search_group_by_name/gidSimo Sorce2010-04-124-596/+277
|
* sysdb: convert sysdb_search_user_by_name/uidSimo Sorce2010-04-124-616/+219
|
* sysdb: convert sysdb_search_entry and sysdb_delete_recursiveSimo Sorce2010-04-125-456/+121
|
* sysdb: convert sysdb_delete_customSimo Sorce2010-04-123-147/+36
|
* sysdb: use sysdb_delete_entry in recursive deleteSimo Sorce2010-04-121-58/+8
|
* sysdb: convert sysdb_delete_entryStephen Gallagher2010-04-129-430/+101
|
* sysdb: start conversion from async to syncSimo Sorce2010-04-121-0/+4
| | | | allow nesting during transition
* Support docdir and abs_builddirStephen Gallagher2010-04-122-0/+7
| | | | | | | | Old versions of autoconf (before 2.60) did not include support for the docdir and abs_builddir variables. This patch emulates support for them. Fixes https://fedorahosted.org/sssd/ticket/422
* Updating IT translationGuido Grazioli2010-04-081-135/+160
|
* Adding interface documentationDmitri Pal2010-04-086-20/+1728
| | | | Package refarray documentation by default
* SELinux login managementJakub Hrozek2010-04-0813-0/+437
| | | | | | | | | | Adds a new option -Z to sss_useradd and sss_usermod. This option allows user to specify the SELinux login context for the user. On deleting the user with sss_userdel, the login mapping is deleted, so subsequent adding of the same user would result in the default login context unless -Z is specified again. MLS security is not supported as of this patch.
* Move SELinux related functions into its own moduleJakub Hrozek2010-04-084-60/+86
| | | | Fix whitespace errors
* Adding Russion TranslationDmitry Drozdov2010-04-072-0/+861
|
* Protect against check-and-open race conditionsStephen Gallagher2010-04-063-30/+79
| | | | | | | | | | | | | | | | | There is a small window between running lstat() on a filename and opening it where it's possible for the file to have been modified. We were protecting against this by saving the stat data from the original file and verifying that it was the same file (by device and inode) when we opened it again, but this is an imperfect solution, as it is still possible for an attacker to modify the permissions during this window. It is much better to simply open the file and test on the active file descriptor. Resolves https://fedorahosted.org/sssd/ticket/425 incidentally, as without the initial lstat, we are implicitly accepting symlinks and only verifying the target file.
* Make sss_userdel check for logged in usersJakub Hrozek2010-04-063-3/+154
| | | | | | | | | | sss_userdel now warns if the deleted user was logged in at the time of deletion. Also adds a new parameter --kick to userdel that kills all user processes before actually deleting ther user. Fixes: #229
* Add userdel_cmd paramJakub Hrozek2010-04-066-0/+104
| | | | Fixes: #231
* Do not revert options to defaults in SSSDConfig.get_domain()Stephen Gallagher2010-03-311-1/+1
| | | | | | | | | There was a faulty check in get_domain() that led to the *_provider options being re-added, sometimes after options related to them had already been set. If those options had a default value, they would be overwritten by the default. Fixes: https://fedorahosted.org/sssd/ticket/441
* Add regression test for https://fedorahosted.org/sssd/ticket/441Stephen Gallagher2010-03-312-0/+6
|
* Fix typo in ldap_id_use_start_tls option descriptionStephen Gallagher2010-03-311-1/+1
|
* Allow arbitrary-length PAM messagesStephen Gallagher2010-03-257-43/+55
| | | | | | | | | The PAM standard allows for messages of any length to be returned to the client. We were discarding all messages of length greater than 255. This patch dynamically allocates the message buffers so we can pass the complete message. This resolves https://fedorahosted.org/sssd/ticket/432
* Fix path_utils_ut segfaultStephen Gallagher2010-03-251-2/+3
| | | | | | | | | In the case where the allocated buffer is not large enough to hold the resulting absolute path, we were writing out a null terminator outside of the buffer, instead of at its beginning. Also fixes potential issue where split_path would not initialize the count to zero if it returned a failure.
* Add a test for domain_to_basedn()Sumit Bose2010-03-251-0/+47
|
* Fix LDAP search paths for IPA HBACSumit Bose2010-03-256-43/+84
| | | | | | - use domain_to_basedn() to construct LDAP search paths for IPA HBAC - move domain_to_basedn() to a separate file to simplify the build of a test
* Add krb5_kpasswd to IPA providerEugene Indenbom2010-03-252-2/+3
| | | | The krb5 options were out of sync, causing a runtime abort.
* Regression test against RHBZ #576856Jakub Hrozek2010-03-253-5/+7
|
* Allow running with read only rootJakub Hrozek2010-03-253-1/+7
| | | | | | | Packages /etc/rwtab.d/sssd file that allows SSSD to run on a read-only root filesystem. Fixes: #428
* Fix warnings from -Wmissing-field-initializersSumit Bose2010-03-257-26/+28
| | | | This patch removes some tab-indentations from pamsrv.c, too.
* Set LDAP_OPT_RESTART for ldap_sasl_interactive_bind_s()Sumit Bose2010-03-251-0/+7
| | | | | | | This option is needed for the rare case where a poll() call during ldap_sasl_interactive_bind_s() is interrupted by a signal. LDAP_OPT_RESTART enables the handling of the EINTR error instead of returning an error.
* Fix kinit after password changeSumit Bose2010-03-251-2/+6
| | | | | | | | | | In an environment with slave KDCs and a central server where password changes are allowed the request for a new TGT immediately after the password change should be made against this server, because the slave server might not know the new password. To achieve this the Kerberos localtor plugin now returns the address of the kpasswd server as master_kdc.
* Generate doxygen documentation for path_utilsJakub Hrozek2010-03-256-113/+1849
|
* Unit tests for path_utilsJakub Hrozek2010-03-253-0/+741
| | | | Fixes: #81
* Fixes for path_utilsJakub Hrozek2010-03-251-63/+109
| | | | | | | | | * Do not segfault on passing NULL path to get_{dir,base}name * There is no way dirname can return "..", remove that code * Buffer overflow in path_concat * Expand . in get_basename * Return NULL rather than crash in split_path on passing NULL path * Be more defensive in directory_list
* Update zh_TW translationCheng-Chia Tseng2010-03-221-69/+101
|
* Improvements for LDAP Password Policy supportRalf Haferkamp2010-03-226-20/+201
| | | | | | | | Display warnings about remaining grace logins and password expiration to the user, when LDAP Password Policies are used. Improved detection if LDAP Password policies are supported by LDAP Server.
* Ensure the SSSDConfig creates sssd.conf with the correct modeStephen Gallagher2010-03-222-4/+87
|
* Lower debug level of unexpected LDAP result codesSumit Bose2010-03-221-0/+5
|
* Add generic error messageJakub Hrozek2010-03-221-0/+4
|
* Fix config file error messageJakub Hrozek2010-03-222-2/+2
|
generated by cgit (git 2.34.1) at 2024-06-30 06:09:47 +0000