Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | SUBDOMAINS: Reuse cached results if DP is offline | Jakub Hrozek | 2013-12-09 | 2 | -2/+13 |
| | | | | | | | | | | If Data Provider was unable to refresh the subdomain list, the sss_domain_info->subdomains list was NULL. Which meant that no DP request matched any known domain and hence offline authentication was not working correctly. Resolves: https://fedorahosted.org/sssd/ticket/2168 | ||||
* | LDAP: Fix a debug message | Jakub Hrozek | 2013-12-09 | 1 | -2/+1 |
| | |||||
* | Fix a trivial typo | Jakub Hrozek | 2013-12-09 | 1 | -1/+1 |
| | |||||
* | added null checks to authtok module | Pallavi Jha | 2013-12-09 | 1 | -1/+19 |
| | |||||
* | NSS: Compare bool with false, not 0 | Jakub Hrozek | 2013-12-09 | 1 | -2/+2 |
| | |||||
* | failover: check dns_domain if primary servers lookup failed | Pavel Březina | 2013-12-09 | 1 | -3/+7 |
| | | | | | | | If primary servers lookup failed, dns_domain is not set. Resolves: https://fedorahosted.org/sssd/ticket/2173 | ||||
* | rfc2307bis_nested_groups_send: reuse search base | Sumit Bose | 2013-12-09 | 1 | -2/+7 |
| | | | | | If there are multiple members in the sdom list, always the search base of the first entry were used. | ||||
* | monitor: syslog when process killed by monitor | Pavel Reichl | 2013-12-09 | 1 | -0/+6 |
| | | | | https://fedorahosted.org/sssd/ticket/2162 | ||||
* | monitor: memory-leak bug | Pavel Reichl | 2013-12-09 | 1 | -2/+4 |
| | | | | In case *mt_svc_restart* event can't be created free *svc* directly. | ||||
* | monitor: monitor_kill_service - refactor | Pavel Reichl | 2013-12-09 | 1 | -8/+20 |
| | | | | | | After freeing *svc* return immediately instead of creating event operating on *svc* (use-after-free). Also check tevent_add_timer failure and remove unused sigkill_ev variable. | ||||
* | monitor: use-after-free bugfix | Pavel Reichl | 2013-12-09 | 1 | -4/+6 |
| | | | | | | *monitor_kill_service* may create timed event which operates on *svc* and therefore *svc* should not be freed right after call of *monitor_kill_sercice*. *svc* is supposed to be freed by *mt_svc_restart*. | ||||
* | sysv/gentoo: Send debug output to a file instead of stderr | Markos Chandras | 2013-12-04 | 1 | -1/+1 |
| | | | | | | | Output from init scripts should go to a file (ideally in /var/log directory) instead of stderr. Signed-off-by: Markos Chandras <hwoarang@gentoo.org> | ||||
* | sysv/gentoo: Use xdm if possible | Markos Chandras | 2013-12-04 | 1 | -1/+1 |
| | | | | | | | Allow sssd to use the xdm wrapper so login managers can use sssd to authenticate users. Signed-off-by: Markos Chandras <hwoarang@gentoo.org> | ||||
* | MAN: Remove unused experimental file | Jakub Hrozek | 2013-12-04 | 2 | -36/+0 |
| | |||||
* | MAN: Add a link explaining different LDAP scopes | Jakub Hrozek | 2013-12-04 | 1 | -2/+6 |
| | |||||
* | responder: Use SAFEALIGN macro when checking pam data validity. | Michal Zidek | 2013-12-03 | 1 | -11/+23 |
| | | | | | resolves: https://fedorahosted.org/sssd/ticket/1359 | ||||
* | sss_client: Use SAFEALIGN_COPY_<type> macros where appropriate. | Michal Zidek | 2013-12-03 | 8 | -27/+80 |
| | | | | | resolves: https://fedorahosted.org/sssd/ticket/1359 | ||||
* | SSSD: Unit test - sss_ldap_dn_in_search_bases | Pavel Reichl | 2013-11-29 | 2 | -1/+217 |
| | | | | | | | Unit test testing detection of the right domain when processing group with members from several domains Resolves: https://fedorahosted.org/sssd/ticket/2132 | ||||
* | SSSD: Improved domain detection | Pavel Reichl | 2013-11-29 | 3 | -16/+57 |
| | | | | | | | A bit more elegant way of detection of what domain the group member belongs to Resolves: https://fedorahosted.org/sssd/ticket/2132 | ||||
* | KRB5: Go offline in case of clock skew | Jakub Hrozek | 2013-11-29 | 1 | -0/+1 |
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1096 In case the KDC has skewed time, we can retry with the next one and eventually go offline if no KDC has time in sync with the client. Previously, authentication with wrong time resulted in System Error. | ||||
* | SYSDB: Sanitize filter before removing ghost attrs | Lukas Slebodnik | 2013-11-28 | 2 | -1/+25 |
| | | | | | | | | | | | sysdb_add_user fails with EIO if enumeration is disabled and user contains backslashes. We try to remove ghost attributes from groups with disabled enumeration, but unsanitized filter is used to find ghost attributes "(|(ghost=usr\\\\002)" and ldb cannot parse this filter. Resolves: https://fedorahosted.org/sssd/ticket/2163 | ||||
* | SYSDB: Sanitize filter before sysdb_search_groups | Lukas Slebodnik | 2013-11-28 | 2 | -1/+12 |
| | | | | | | | | | | sysdb_delete_user fails with EIO if user does not exist and contains backslashes. ldb could not parse filter (&(objectclass=group)(ghost=usr\\\\001)), because ghost value was not sanitized Resolves: https://fedorahosted.org/sssd/ticket/2163 | ||||
* | AUTOMAKE: Don't build libsss_test_common every time | Lukas Slebodnik | 2013-11-28 | 1 | -2/+2 |
| | | | | | | | | Although static library libsss_test_common was used only in tests, it was also built with command "make all" Resolves: https://fedorahosted.org/sssd/ticket/2097 | ||||
* | Remove unused parameter from group_show_trim_memberof | Lukas Slebodnik | 2013-11-27 | 1 | -3/+1 |
| | |||||
* | Remove unused parameter from group_show_mpg | Lukas Slebodnik | 2013-11-27 | 1 | -3/+1 |
| | |||||
* | Remove unused parameter from ipa_save_netgroup | Lukas Slebodnik | 2013-11-27 | 1 | -2/+1 |
| | |||||
* | Remove unused memory context in proxy | Lukas Slebodnik | 2013-11-27 | 1 | -9/+6 |
| | |||||
* | Remove unused parameter from save_netgroup | Lukas Slebodnik | 2013-11-27 | 3 | -6/+3 |
| | |||||
* | Remove unused parameter from save_user | Lukas Slebodnik | 2013-11-27 | 1 | -10/+8 |
| | |||||
* | Remove unused parameter from delete_user | Lukas Slebodnik | 2013-11-27 | 1 | -9/+7 |
| | |||||
* | Remove unused parameter from sudosrv_get_sudorules_query_cache | Lukas Slebodnik | 2013-11-27 | 1 | -4/+2 |
| | |||||
* | Remove unused parameter from seed_domain_user_info | Lukas Slebodnik | 2013-11-27 | 1 | -2/+1 |
| | |||||
* | Remove unused parameter from search_autofsmaps | Lukas Slebodnik | 2013-11-27 | 1 | -11/+8 |
| | |||||
* | Remove unused parameter from invalidate_entry | Lukas Slebodnik | 2013-11-27 | 1 | -3/+3 |
| | |||||
* | Remove unused parameter from groupadd | Lukas Slebodnik | 2013-11-27 | 4 | -6/+4 |
| | |||||
* | Remove unused parameter from useradd | Lukas Slebodnik | 2013-11-27 | 4 | -4/+2 |
| | |||||
* | Remove unused parameter from groupmod | Lukas Slebodnik | 2013-11-27 | 4 | -4/+2 |
| | |||||
* | Remove unused parameter from usermod | Lukas Slebodnik | 2013-11-27 | 5 | -5/+3 |
| | |||||
* | Remove unused parameter from mod_groups_member | Lukas Slebodnik | 2013-11-27 | 1 | -11/+10 |
| | |||||
* | Remove unused parameter from krb5_auth_store_creds | Lukas Slebodnik | 2013-11-27 | 1 | -3/+2 |
| | |||||
* | Remove unused parameter from krb5_auth_cache_creds | Lukas Slebodnik | 2013-11-27 | 1 | -3/+0 |
| | |||||
* | Remove unused parameter from sdap_save_netgroup | Lukas Slebodnik | 2013-11-27 | 1 | -4/+1 |
| | |||||
* | Remove unused parameter from sdap_process_missing_member_2307 | Lukas Slebodnik | 2013-11-27 | 1 | -4/+2 |
| | |||||
* | Remove unused parameter from sdap_add_group_member_2307 | Lukas Slebodnik | 2013-11-27 | 1 | -4/+3 |
| | |||||
* | Remove unused parameter from sdap_store_group_with_gid | Lukas Slebodnik | 2013-11-27 | 1 | -7/+3 |
| | |||||
* | Remove unused parameter from sdap_get_members_with_primary_gid | Lukas Slebodnik | 2013-11-27 | 1 | -4/+4 |
| | |||||
* | Remove unused parameter from sdap_save_user | Lukas Slebodnik | 2013-11-27 | 4 | -9/+3 |
| | |||||
* | Remove unused parameter from get_user_dn | Lukas Slebodnik | 2013-11-27 | 1 | -2/+1 |
| | |||||
* | Remove unused parameter from sss_selinux_extract_user | Lukas Slebodnik | 2013-11-27 | 3 | -3/+1 |
| | |||||
* | Fix parameter name. | Michal Zidek | 2013-11-27 | 2 | -9/+9 |
| | | | | | | | We use '_' as prefix for output parameters. In function sysdb_get_rdn we wrongly used this prefix for input parameter, which caused some confusion when reading the code. |