summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* sysdb: convert sysdb_getpwnamSimo Sorce2010-04-1212-623/+415
|
* sysdb: add automatic transactions where neededSimo Sorce2010-04-121-7/+47
| | | | | | Only functions that do multiple operations need explicit transactions as ldb_add/ldb_modify/ldb_delete already start transactions automatically intenrally.
* sysdb: remove async transactionsSimo Sorce2010-04-122-157/+0
| | | | not used anymore
* Remove remaining use of sysdb_transaction_sendSimo Sorce2010-04-125-723/+205
|
* Use the sysdb synchronous transaction functionsSimo Sorce2010-04-127-424/+104
|
* proxy: complete conversion to synchronous sysdbSimo Sorce2010-04-121-1113/+428
| | | | This makes proxy use only synchronous functions again.
* sysdb: add synchronous transaction functionsSimo Sorce2010-04-122-14/+37
|
* tests: remove use of asynchronus transactionsSimo Sorce2010-04-121-502/+86
| | | | now all calls are synchronous
* sysdb: remove sysdb_check_handleSimo Sorce2010-04-121-90/+0
| | | | not used anymore
* sysdb: convert sysdb_cache_authSimo Sorce2010-04-124-264/+136
|
* sysdb: convert sysdb_search_groupsSimo Sorce2010-04-124-410/+151
|
* sysdb: delete sysdb_delete_groupSimo Sorce2010-04-126-321/+109
|
* sysdb: convert sysdb_delete_userSimo Sorce2010-04-126-356/+115
|
* sysdb: convert sysdb_search_usersSimo Sorce2010-04-123-169/+72
|
* sysdb remove sldb_request_send, not used anymoreSimo Sorce2010-04-121-125/+0
|
* sysdb: convert sysdb_asq_searchSimo Sorce2010-04-124-358/+140
|
* sysdb: convert sysdb_store_customSimo Sorce2010-04-124-258/+93
|
* sysdb: convert sysdb_search_customSimo Sorce2010-04-124-371/+229
|
* sysdb: convert sysdb_cache_passwordSimo Sorce2010-04-126-209/+62
|
* sysdb: convert sysdb_mod/add/remove_group_memberSimo Sorce2010-04-124-628/+117
|
* sysdb: convert sysdb_store/add(_basic)_groupSimo Sorce2010-04-126-850/+294
|
* sysdb: convert sysdb_store/add(_basic)_userSimo Sorce2010-04-126-891/+430
|
* sysdb: convert sysdb_get_new_idSimo Sorce2010-04-122-397/+136
|
* sysdb: convert sysdb_set_entry/user/group_attrSimo Sorce2010-04-127-589/+144
|
* sysdb: convert sysdb_search_group_by_name/gidSimo Sorce2010-04-124-596/+277
|
* sysdb: convert sysdb_search_user_by_name/uidSimo Sorce2010-04-124-616/+219
|
* sysdb: convert sysdb_search_entry and sysdb_delete_recursiveSimo Sorce2010-04-125-456/+121
|
* sysdb: convert sysdb_delete_customSimo Sorce2010-04-123-147/+36
|
* sysdb: use sysdb_delete_entry in recursive deleteSimo Sorce2010-04-121-58/+8
|
* sysdb: convert sysdb_delete_entryStephen Gallagher2010-04-129-430/+101
|
* sysdb: start conversion from async to syncSimo Sorce2010-04-121-0/+4
| | | | allow nesting during transition
* Support docdir and abs_builddirStephen Gallagher2010-04-122-0/+7
| | | | | | | | Old versions of autoconf (before 2.60) did not include support for the docdir and abs_builddir variables. This patch emulates support for them. Fixes https://fedorahosted.org/sssd/ticket/422
* Updating IT translationGuido Grazioli2010-04-081-135/+160
|
* Adding interface documentationDmitri Pal2010-04-086-20/+1728
| | | | Package refarray documentation by default
* SELinux login managementJakub Hrozek2010-04-0813-0/+437
| | | | | | | | | | Adds a new option -Z to sss_useradd and sss_usermod. This option allows user to specify the SELinux login context for the user. On deleting the user with sss_userdel, the login mapping is deleted, so subsequent adding of the same user would result in the default login context unless -Z is specified again. MLS security is not supported as of this patch.
* Move SELinux related functions into its own moduleJakub Hrozek2010-04-084-60/+86
| | | | Fix whitespace errors
* Adding Russion TranslationDmitry Drozdov2010-04-072-0/+861
|
* Protect against check-and-open race conditionsStephen Gallagher2010-04-063-30/+79
| | | | | | | | | | | | | | | | | There is a small window between running lstat() on a filename and opening it where it's possible for the file to have been modified. We were protecting against this by saving the stat data from the original file and verifying that it was the same file (by device and inode) when we opened it again, but this is an imperfect solution, as it is still possible for an attacker to modify the permissions during this window. It is much better to simply open the file and test on the active file descriptor. Resolves https://fedorahosted.org/sssd/ticket/425 incidentally, as without the initial lstat, we are implicitly accepting symlinks and only verifying the target file.
* Make sss_userdel check for logged in usersJakub Hrozek2010-04-063-3/+154
| | | | | | | | | | sss_userdel now warns if the deleted user was logged in at the time of deletion. Also adds a new parameter --kick to userdel that kills all user processes before actually deleting ther user. Fixes: #229
* Add userdel_cmd paramJakub Hrozek2010-04-066-0/+104
| | | | Fixes: #231
* Do not revert options to defaults in SSSDConfig.get_domain()Stephen Gallagher2010-03-311-1/+1
| | | | | | | | | There was a faulty check in get_domain() that led to the *_provider options being re-added, sometimes after options related to them had already been set. If those options had a default value, they would be overwritten by the default. Fixes: https://fedorahosted.org/sssd/ticket/441
* Add regression test for https://fedorahosted.org/sssd/ticket/441Stephen Gallagher2010-03-312-0/+6
|
* Fix typo in ldap_id_use_start_tls option descriptionStephen Gallagher2010-03-311-1/+1
|
* Allow arbitrary-length PAM messagesStephen Gallagher2010-03-257-43/+55
| | | | | | | | | The PAM standard allows for messages of any length to be returned to the client. We were discarding all messages of length greater than 255. This patch dynamically allocates the message buffers so we can pass the complete message. This resolves https://fedorahosted.org/sssd/ticket/432
* Fix path_utils_ut segfaultStephen Gallagher2010-03-251-2/+3
| | | | | | | | | In the case where the allocated buffer is not large enough to hold the resulting absolute path, we were writing out a null terminator outside of the buffer, instead of at its beginning. Also fixes potential issue where split_path would not initialize the count to zero if it returned a failure.
* Add a test for domain_to_basedn()Sumit Bose2010-03-251-0/+47
|
* Fix LDAP search paths for IPA HBACSumit Bose2010-03-256-43/+84
| | | | | | - use domain_to_basedn() to construct LDAP search paths for IPA HBAC - move domain_to_basedn() to a separate file to simplify the build of a test
* Add krb5_kpasswd to IPA providerEugene Indenbom2010-03-252-2/+3
| | | | The krb5 options were out of sync, causing a runtime abort.
* Regression test against RHBZ #576856Jakub Hrozek2010-03-253-5/+7
|
* Allow running with read only rootJakub Hrozek2010-03-253-1/+7
| | | | | | | Packages /etc/rwtab.d/sssd file that allows SSSD to run on a read-only root filesystem. Fixes: #428