summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* SSH: Add missing break statements to sss_ssh_format_pubkeyJan Cholasta2012-02-271-0/+2
|
* SSH: Add more debugging messagesJan Cholasta2012-02-275-8/+38
|
* SSH: Don't abort known_hosts update when host search failsJan Cholasta2012-02-271-1/+1
|
* SSH: Manage global known_hosts file in the responderJan Cholasta2012-02-273-78/+136
| | | | https://fedorahosted.org/sssd/ticket/1193
* SSH: Continue connecting to SSH server even when SSSD is not running in ↵Jan Cholasta2012-02-271-112/+85
| | | | | | | | | | sss_ssh_knownhostsproxy Additionally, don't drop the connection when the sss_ssh_knownhostsproxy process receives a signal. https://fedorahosted.org/sssd/ticket/1179 https://fedorahosted.org/sssd/ticket/1184
* UTIL: Add function for atomic I/OJan Cholasta2012-02-272-0/+44
|
* SSH: Refactor responder and client common codeJan Cholasta2012-02-277-170/+301
|
* SSH: Save SSH host name aliasesJan Cholasta2012-02-276-40/+119
|
* AUTOFS: speed up the client by requesting multiple entries at onceJakub Hrozek2012-02-273-78/+239
| | | | https://fedorahosted.org/sssd/ticket/1166
* Eliminate build-time requirement for nscdStephen Gallagher2012-02-273-12/+12
| | | | | | We will now use the autodetected location if available, or else fall back to a value provided by --with-nscd in configure and finally resort to a hard-coded default of /usr/sbin/nscd.
* LDAP: Remove unnecessary filter sanitizeStephen Gallagher2012-02-261-11/+5
| | | | | | The orig_dn here isn't being passed to a filter and therefore must not be santized, as the sanitization process would break DNs that contain (among other things) parentheses.
* Modifications to simplify list_missing_attrsJan Zeleny2012-02-248-44/+21
|
* Delete missing attributes from netgroups to be storedJan Zeleny2012-02-246-4/+45
| | | | https://fedorahosted.org/sssd/ticket/1136
* LDAP: Only use paging control on requests for multiple entriesStephen Gallagher2012-02-2416-40/+100
| | | | | | | | | | The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
* AUTOFS: Search all search bases for automounter map entriesJakub Hrozek2012-02-231-18/+86
| | | | https://fedorahosted.org/sssd/ticket/1168
* AUTOFS: Invoke implicit setautomntent if neededJakub Hrozek2012-02-232-45/+156
| | | | https://fedorahosted.org/sssd/ticket/1167
* libnl: fix the path to phy80211 subdirectoryJakub Hrozek2012-02-231-4/+20
|
* Move sudo_dom_ctx.user to local variablePavel Březina2012-02-232-8/+8
|
* Honor case_sensitive option in sudo responderPavel Březina2012-02-234-21/+100
| | | | https://fedorahosted.org/sssd/ticket/1205
* LDAP: Properly assign orig_dnStephen Gallagher2012-02-231-0/+1
| | | | This was only used for properly identifying debug messages.
* Save errno value before calling DEBUGJakub Hrozek2012-02-231-2/+4
|
* pam_sss: keep selinux optionalSimo Sorce2012-02-233-4/+7
| | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
* nss_group: Cache the result from sssd when the glibc provided buffer is too ↵Simo Sorce2012-02-231-8/+145
| | | | small.
* IPA: Add ipa_parse_search_base()Stephen Gallagher2012-02-233-19/+72
| | | | | | | | | | Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151
* Add tool to convert debug levelsStephen Gallagher2012-02-221-0/+100
| | | | | | | | | | | | | Older versions of SSSD (1.5 and earlier) would take a debug_level value set in the [sssd] section as authoritative for all other sections where not explicitly overridden. We changed this so that all sections need to set it if they want debug logs set. This script can be run to make the new version continue to produce the same logs as the old versions did, by explicitly adding debug_level to all domains and services that did not have it set already. Bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=753763
* remove unused functionJakub Hrozek2012-02-211-20/+0
|
* End request if ldap_parse_result failsJakub Hrozek2012-02-211-0/+3
|
* RESPONDERS: Allow increasing the file-descriptor limitStephen Gallagher2012-02-174-0/+48
| | | | | | | This patch will increase the file descriptor limit to 8k or the limits.conf maximum, whichever is lesser. https://fedorahosted.org/sssd/ticket/1197
* Fix case insensitive service lookupsJakub Hrozek2012-02-171-6/+6
|
* LDAP: Ignore group member users that do not have name attributesStephen Gallagher2012-02-171-2/+2
| | | | | | | | Instead of failing the group lookup, just skip them. This was impacting some users of ActiveDirectory where not all users had the appropriate attributes. https://fedorahosted.org/sssd/ticket/1169
* NSS: Always return the same protocol that was requestedStephen Gallagher2012-02-172-9/+26
| | | | https://fedorahosted.org/sssd/ticket/1160
* Redesign purging of the sudo cachePavel Březina2012-02-173-94/+370
| | | | https://fedorahosted.org/sssd/ticket/1173
* Fix missing %endif in sssd.spec.insssd-1_8_0_beta3sssd-1_7_93Stephen Gallagher2012-02-151-0/+1
|
* Bumping version to 1.7.93 for beta 3Stephen Gallagher2012-02-151-1/+1
|
* Always include all manpage XML files in the distribution tarballStephen Gallagher2012-02-151-2/+3
|
* Move sss_ssh_* binaries to the main 'sssd' packageStephen Gallagher2012-02-151-6/+7
| | | | | The sssd-client subpackage is multilib, so it cannot contain conflicting /usr/bin executables.
* Refactor sss_result into sss_sudo_resultPavel Březina2012-02-145-36/+38
| | | | https://fedorahosted.org/sssd/ticket/1159
* SSH: Build man pages conditionallyJan Cholasta2012-02-142-4/+6
| | | | https://fedorahosted.org/sssd/ticket/1175
* Fix memory hierarchy when processing nested group membershipsJakub Hrozek2012-02-144-11/+14
| | | | https://fedorahosted.org/sssd/ticket/1186
* Ensure NULL-termination in get_uid_from_pid()Stephen Gallagher2012-02-141-0/+3
| | | | Coverity #12399
* Fix uninitialized value error in proxy providerStephen Gallagher2012-02-131-1/+1
| | | | Coverity #12467
* Check for failure in sss_packet_grow()Stephen Gallagher2012-02-131-5/+5
| | | | Coverity #12489
* Fix bad failure handling in be_sudo_handler()Stephen Gallagher2012-02-131-13/+13
| | | | | | | If the dbus_message_get_args() failed, we would have been dereferencing a NULL be_req. Coverity #12490
* Fix uninitialized in_transactionStephen Gallagher2012-02-132-2/+2
| | | | Coverity #12521 and #12491
* Add missing breaks to switch statementsStephen Gallagher2012-02-132-0/+2
| | | | Coverity #12525 and #12524
* Avoid uninitialized value comparisonStephen Gallagher2012-02-131-0/+3
| | | | Coverity #12526
* Fix missing NULL check after mallocStephen Gallagher2012-02-131-0/+4
| | | | Coverity #12528
* Remove dead codeStephen Gallagher2012-02-131-9/+0
| | | | Coverity #12529
* SSH: Verify that names received from client are valid UTF-8 in responderJan Cholasta2012-02-132-0/+21
| | | | | | | Also added a comment describing the wire format of client requests and responses. https://fedorahosted.org/sssd/ticket/1177
* Allocate setent structure on state, not on the client contextJakub Hrozek2012-02-134-9/+9
| | | | https://fedorahosted.org/sssd/ticket/1189