summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add be_req_create() helperSimo Sorce2013-01-213-40/+38
|
* Introduce be_req_terminate() helperSimo Sorce2013-01-2119-130/+84
| | | | | Call it everywhere instead of directly dereferencing be_req->fn This is in preparation of making be_req opaque.
* Remove domain from be_req structureSimo Sorce2013-01-217-64/+46
|
* Pass domain not be_req to access check functionsSimo Sorce2013-01-215-22/+33
|
* Split simple_access_check function outSimo Sorce2013-01-214-207/+227
| | | | | Need to split out the function or new additions to the handler funtion will not allow simple access tests to compile anymore.
* Do not pass NULL to ipa_subdomain_retrieve()Simo Sorce2013-01-211-18/+20
|
* Move hbac_ctx_is_offline()Simo Sorce2013-01-212-7/+6
|
* Remove hbac_ctx_sdap_id_[ctx|op]()Simo Sorce2013-01-212-18/+6
|
* Remove hbac_ctx_ev()Simo Sorce2013-01-212-10/+3
|
* Remove hbac_ctx_be()Simo Sorce2013-01-213-12/+4
|
* Remove hbac_ctx_sysdb()Simo Sorce2013-01-212-12/+4
|
* Remove sysdb argument from hbac_get_cached_rules()Simo Sorce2013-01-213-9/+6
|
* Remove sysdb arg from [ipa_]hbac_sysdb_save()Simo Sorce2013-01-213-36/+25
| | | | Also make ipa_hbac_save_list() static
* Remove sysdb arg from ipa_hbac_service_info_send()Simo Sorce2013-01-213-5/+0
|
* Remove sysdb arg from hbac_*host_attrs_to_rule()Simo Sorce2013-01-213-11/+4
|
* Remove sysdb arg from hbac_service_attrs_to_rule()Simo Sorce2013-01-213-5/+2
|
* Remove sysdb argument from hbac_user_attrs_to_rule()Simo Sorce2013-01-213-6/+4
|
* Remove unused structureSimo Sorce2013-01-211-6/+0
|
* Remove sysdb argument from ipa_host_info_send()Simo Sorce2013-01-215-9/+3
|
* Remove sysdb as a be request structure memberSimo Sorce2013-01-217-12/+9
| | | | The sysdb context is already available through the 'domain' context.
* Remove sysdb as a be context structure memberSimo Sorce2013-01-2127-56/+52
| | | | The sysdb context is already available through the 'domain' structure.
* Move ldap provider access functionsSimo Sorce2013-01-213-59/+87
| | | | | | It was confusing to see the ldap provider own handler mixed with the generic ldap access code used also by the ipa and ad providers. So move the ldap provider handler code in its own file.
* TOOLS: invalidate parent groups in memory cache, tooJakub Hrozek2013-01-214-8/+71
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1775 In addition to invalidating the group being added to when adding a member group/user, we also need to invalidate all its parent groups, otherwise this getgrnam("parent") wouldn't report the members newly added to its child groups.
* LDAP: Compare lists of DNs when saving autofs entriesJakub Hrozek2013-01-213-143/+178
| | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1758 The autofs entries do not have the key as an unique identifier, but rather the full (key, value) tuple as some keys have a special meaning, such as the direct mount key (/-) and may be present in a single map multiple times. Comparing the full DN that contains both the key and the value will allow for working updates if either key or value changes.
* set struct bet_info->bet_typePavel Březina2013-01-191-0/+1
|
* Invalidate user entry even if there are no groupsJakub Hrozek2013-01-162-11/+8
| | | | | | | | | Related to https://fedorahosted.org/sssd/ticket/1757 Previously we would optimize the mc invalidate code for cases where the user was a member of some groups. But if the user was removed from the server while being in memory cache, we would only invalidate the mc record if he was a member of at least one supplementary group.
* NSS: invalidate memcache user entry on initgr, tooJakub Hrozek2013-01-161-0/+11
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1757 When the user entry was missing completely after initgroups, we would never invalidate the user entry from cache. This led to dangling cache entried in memory cache if the user was removed from the server while still being in memory cache.
* Remove outdated code.Simo Sorce2013-01-161-10/+0
| | | | | This code should not be necessary anymore since June 2010 with commit: 90acbcf20b5f896ca8f631923afe946c90d90de7
* Tidy up BASE dn macrosSimo Sorce2013-01-161-4/+4
|
* tools: Respect use_fully_qualified_namesMichal Zidek2013-01-161-0/+9
| | | | | | | Tools for LOCAL domain should require FQDN if option 'use_fuly_quallified_names = TRUE' was configured. https://fedorahosted.org/sssd/ticket/1746
* sss_cache: Call DEBUG_INIT soonerMichal Zidek2013-01-161-2/+3
| | | | | | | | If bad parameteres were passed to sss_cache, the init function returned without calling DEBUG_INIT macro and unnecessary level 1 debug message was printed. https://fedorahosted.org/sssd/ticket/1745
* autofs: Use SAFEALIGN_SET_UINT32 instead of SAFEALIGN_COPY_UINT32Jakub Hrozek2013-01-161-10/+5
|
* Correct format security for talloc_named of auth tokensStephen Gallagher2013-01-161-1/+1
|
* LDAP: avoid complex realloc logic in save_rfc2307bis_group_membershipsJakub Hrozek2013-01-151-12/+4
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1761 The function tried to be smart and realloc only when needed, but that only lead to hard-to find bugs where the logic would not allocate the proper space. Remove the reallocation and prefer readability over speed in this case.
* TOOLS: Refresh memcache after changes to local users and groupsJakub Hrozek2013-01-153-2/+50
|
* TOOLS: Provide a convenience function to refresh a list of groupsJakub Hrozek2013-01-152-0/+22
|
* TOOLS: Split querying nss responder into a separate functionJakub Hrozek2013-01-155-38/+79
| | | | | | The tools query the responder in order to sync the memcache after performing changes to the local database. The functions will be reused by other tools so I split them into a separate functions.
* TOOLS: move memcache related functions to tools_mc_utils.cJakub Hrozek2013-01-154-161/+189
| | | | | | | The upcoming patches will link only users of this file with client libs, so it's better to have it separate. There is no functional change in this patch
* TOOLS: set domain in check_group_namesJakub Hrozek2013-01-151-0/+1
|
* tests: unit test for sysdb_remove_attrsJakub Hrozek2013-01-151-0/+45
|
* tests: add unit test for sysdb_get_new_idJakub Hrozek2013-01-151-1/+20
|
* tests: test sysdb_initgroupsJakub Hrozek2013-01-151-0/+48
|
* tests: adda a unit test for test_sysdb_search_groupsJakub Hrozek2013-01-151-0/+29
|
* tests: unit test for test_sysdb_search_usersJakub Hrozek2013-01-151-0/+31
|
* tests: add a unit test for sysdb_netgroup_base_dnJakub Hrozek2013-01-151-0/+23
|
* Stop creating fake sysdb contextsSimo Sorce2013-01-153-32/+2
| | | | | | Now that the sysdb context does not contain anymore domain related data we can simply stop creating faxe sysdb context and just reference the parent context.
* Kill sysdb->domainSimo Sorce2013-01-153-5/+0
| | | | Finally remove this upside-down dependency.
* Move mpg flag to the domain where it belongsSimo Sorce2013-01-158-16/+13
| | | | | A sysdb contains now multiple domains, but the mpg property is a property of a specific domain not of the underlying database.
* Pass the domain to upgrade functionsSimo Sorce2013-01-153-13/+17
|
* Add domain to some subdomain functionsSimo Sorce2013-01-154-8/+17
|
generated by cgit (git 2.34.1) at 2024-07-04 12:19:46 +0000