summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Updating translations for the 1.11 beta2 releasesssd-1_11_0_beta2sssd-1_10_92Jakub Hrozek2013-07-2436-3928/+4584
|
* Every time release allocated memory in function py_sss_getgrouplistLukas Slebodnik2013-07-241-0/+2
| | | | Coverity: 11922
* Lower timeout to contact DNS serverMichal Zidek2013-07-241-1/+1
| | | | | | | | c-ares timeout to wait for response from DNS server before moving to next DNS server is lowered from 5s to 2s. Partially solves https://fedorahosted.org/sssd/ticket/1966
* Set default DNS resolution timeout to 6 seconds.Michal Zidek2013-07-242-3/+3
| | | | | | | | Partially solves ticket: https://fedorahosted.org/sssd/ticket/1966 To avoid the problem mentioned in the ticket above, option dns_discovery_domain must be set properly.
* LDAP: Use domain-specific name where appropriateJakub Hrozek2013-07-245-112/+159
| | | | | | | | | The subdomain users user FQDN in their name attribute. However, handling of whether to use FQDN in the LDAP code was not really good. This patch introduces a utility function and converts code that was relying on user/group names matching to this utility function. This is a temporary fix until we can refactor the sysdb API in #2011.
* Fix possible dereference of a NULL pointer.Lukas Slebodnik2013-07-231-1/+1
| | | | | | We check if function ipa_get_ad_id_ctx returns NULL, but function ipa_get_ad_id_ctx could never return NULL. This issue was found by scan-build.
* pysss: prevent crashing when group is unresolvableAlexander Bokovoy2013-07-231-2/+13
| | | | | | In unlikely case that an NSS module returns a reference to a group and we are unable to resolve it shortly after that, make sure these groups are skipped.
* Remove unused constant.Michal Zidek2013-07-231-2/+0
|
* KRB5: Do not send PAC in server modeJakub Hrozek2013-07-235-7/+27
| | | | | | | | The krb5 child contacts the PAC responder for any user except for the IPA native users if the PAC is configured. This works fine for the general case but the ipa_server_mode is a special one. The PAC responder is there, but since in the server mode we should be operating as AD provider default, the PAC shouldn't be analyzed either in this case.
* SUDO: realloc with sizeof(uint32_t) when adding uint32_tJakub Hrozek2013-07-221-1/+1
|
* pysss: add pysss.getgrouplist(username)Alexander Bokovoy2013-07-221-0/+59
| | | | | | | | | | getgrouplist(3) call is missing from Python older than Python 3.3 Introduce supplementary binding to provide getgrouplist as part of pysss interface. Since getgrouplist() can be run against any domain, place it at top module rather than pysss.local namespace. pysss.getgrouplist(username) -> tuple(group list as strings)
* build: fix dependencies for pysss moduleAlexander Bokovoy2013-07-221-0/+1
| | | | https://fedorahosted.org/sssd/ticket/2025
* Fix autotols warnings: macro xyz not found in libraryLukas Slebodnik2013-07-221-4/+2
|
* Fix warnings: uninitialized variableLukas Slebodnik2013-07-224-6/+5
|
* Remove unused memory context from function unpack_authtokLukas Slebodnik2013-07-221-3/+3
|
* Fix the default FQDN formatJakub Hrozek2013-07-192-3/+3
| | | | | | Commit 52ae806bd17c3c00d70bd1aed437f10f5ae51a1c changed the default FQDN format by accident to the one we only ever user internally. This commit fixes the mistake.
* TOOLS: Update all services with sss_debuglevelOndrej Kos2013-07-191-2/+7
| | | | | | | https://fedorahosted.org/sssd/ticket/2007 PAC, SSH, SUDO and AUTOFS services' debug levels weren't modified when sss_debuglevel tool was used.
* AD: Set the bool value same as default value in optsJakub Hrozek2013-07-193-4/+74
| | | | | | | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/2023 When the option values are copied using dp_opt_copy_map, the .val member is used if it's not NULL. At the same time, the bool options are never NULL, unlike integers or strings that can have special NULL-like values such as NULL_STRING. This effectively means that when copying a bool option, the .val member is always used. But in the AD maps, some .val fields were set differently from the .def_val fields. The effect was that when the AD subdomain provider was initialized from IPA subdomain provider using only the defaults, some options (notably referral chasing) were set to a value that didn't make sense for the AD provider. This patch makes sure that for all boolean option, the .val is always the same as .def_val.
* IPA: warn if full_name_format is customized in server modeJakub Hrozek2013-07-193-1/+20
| | | | | | | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/2009 If the IPA server mode is on and the SSSD is running on the IPA server, then the server's extdom plugin calls getpwnam_r to read info about trusted users from the AD server and return them to the clients that called the extended operation. The SSSD returns the subdomain users fully-qualified, ie "user@domain" by default. The format of the fully qualified name is configurable. However, the extdom plugin returns the user name without the domain component. With this patch, when ipa_server_mode is on, warn if the full_name_format is set to a non-default value. That would prompt the admin to change the format if he changed it to something exotic.
* Add mising argument required by format stringLukas Slebodnik2013-07-192-3/+4
|
* Use functionm ldb_dn_get_linearized to format struct ldb_dnLukas Slebodnik2013-07-191-3/+6
|
* Fix clang format string warning.Lukas Slebodnik2013-07-192-2/+2
| | | | | warning: format string is not a string literal (potentially insecure) [-Wformat-security]
* Remove unused be_ctx->sigchld_ctxJakub Hrozek2013-07-182-9/+0
|
* KRB: Replace multiple calls with variableOndrej Kos2013-07-181-6/+9
| | | | | Instead of multiple calls of sss_authtok_get_type, perform the call just once and store into variable.
* KRB: Handle empty password gracefullyOndrej Kos2013-07-181-0/+11
| | | | | | https://fedorahosted.org/sssd/ticket/1814 Return authentication error when empty password is passed.
* Do not try to set password when authtok_length is zeroOndrej Kos2013-07-181-2/+6
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1814 When the authtok_length is zero, it shouldn't call sss_authtok_set_password, because it tries to determine lenght of passed string by itself and would read parts of DBus message behind boundaries of authtok.
* MAN: Clarify the min_id/max_id limits furtherJakub Hrozek2013-07-171-0/+4
| | | | | | | | | https://fedorahosted.org/sssd/ticket/2005 Some users were confused by our description of min_id/max_id and thought the limits only applied to returning entries from the NSS responder. However, the limits are actually enforced on the back end side, so the entries are not even saved to cache.
* MAN: IP addresss does not work when used for ad_serverJakub Hrozek2013-07-171-1/+1
| | | | | | | https://fedorahosted.org/sssd/ticket/1998 Currently using IP address as value of ad_server is not supported, so the man pages should not mention that as an option.
* MAN: clarify the default access provider for ADJakub Hrozek2013-07-171-0/+5
| | | | | | | | https://fedorahosted.org/sssd/ticket/1965 After we added a section that clarified what access_provider=ad did, some users were confused and thought that "ad" was also the default access provider if "id_provider=ad" was specified.
* SIGCHLD handler: do not call callback when pvt data where freedPavel Březina2013-07-175-5/+37
| | | | https://fedorahosted.org/sssd/ticket/1992
* dyndns timeout test: catch SIGCHLD handler eventsPavel Březina2013-07-171-0/+12
| | | | | | https://fedorahosted.org/sssd/ticket/1992 dyndns test will crash with this patch
* RPM: Require libsss_idmap from sssd-commonJakub Hrozek2013-07-171-3/+1
| | | | | The NSS responder recently started using libsss_idmap in the getbysid functions. The bug itself was spotted by one of our automated QA tools.
* Every time use permissive control in function memberof_mod.Lukas Slebodnik2013-07-171-0/+7
| | | | | | | | | | | Storing cyclic groups into sysdb can cause adding ghost members, which has already been stored. Function ldb_modify will fail with error [Attribute or value exists]. With permisive control, duplicated attributes will be skipped as if it was never added. https://fedorahosted.org/sssd/ticket/1846
* print hint about password complexity when new password is rejectedPavel Březina2013-07-172-1/+15
| | | | https://fedorahosted.org/sssd/ticket/1827
* LDAP: When resolving a SID, search for groups first, then usersJakub Hrozek2013-07-171-19/+18
| | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1997 Most of the time, the SIDs are resolved as a call coming from the PAC responder during initgroups. In that case at least, it makes sense to search for group matching that SID first, then users. We may consider making this behaviour configurable ie for the server mode where typically the users should be queried first.
* remove unused variablePavel Březina2013-07-161-4/+0
|
* Remove unused function parameterLukas Slebodnik2013-07-161-3/+1
|
* Use conditional build for retrieving ccache.Lukas Slebodnik2013-07-154-88/+78
| | | | | | | | Some krb5 functions needn't be available for retrieving ccache with principal. Therefore ifdef is used to solve this situation with older version of libkrb5. There were two functions with similar functionality in krb5_child and krb5_utils. They were merged to one universal function, which was moved to file src/util/sss_krb5.c
* Missing space in debug messageMichal Zidek2013-07-151-2/+2
|
* Return right directory name for dircacheLukas Slebodnik2013-07-111-6/+10
| | | | | | | Dircache can be either file or directory. Wrong value was used when dircache was itself directory. https://fedorahosted.org/sssd/ticket/2002
* Always set port status to neutral when resetting service.Michal Zidek2013-07-111-1/+2
| | | | | | | | We did not set port status for metaservers (srv servers) in fo_reset_services(). Fixes: https://fedorahosted.org/sssd/ticket/1933
* KRB5_CHILD: Fix handling of get_password return codeOndrej Kos2013-07-101-4/+10
| | | | The switch statement was dead code due to missing case/default.
* sss_cache: Add option to invalidate all entriesMichal Zidek2013-07-102-0/+24
| | | | | | Option -E/--everething was added to invalide all types of entries. https://fedorahosted.org/sssd/ticket/1988
* Do not copy special files when creating homedirOndrej Kos2013-07-093-73/+10
| | | | | | https://fedorahosted.org/sssd/ticket/1778 When trying to copy special file, only message is logged now.
* DB: sysdb_search_user_by_name: search by both name and aliasJakub Hrozek2013-07-092-6/+36
|
* Move sssd_pac binary to the IPA and AD providersStephen Gallagher2013-07-021-5/+8
| | | | | This will ensure that we aren't pulling in extra samba4 dependencies for the Kerberos provider.
* BUILD: Use pkg-config to detect cmockaLukas Slebodnik2013-07-022-20/+19
|
* RPM: Move sssd_pac to the krb5-common subpackageJakub Hrozek2013-07-021-4/+4
| | | | The PAC responder is now used by both IPA and AD providers.
* Remove sysv->systemd upgrade routinesStephen Gallagher2013-07-021-12/+0
| | | | | There are no longer any Fedora platforms running SSSD with SYSV init scripts. We don't need the upgrade logic any more.
* Move pre and post scripts to sssd-commonStephen Gallagher2013-07-021-5/+5
|
generated by cgit (git 2.34.1) at 2024-04-25 11:15:43 +0000