summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Updating translations for SSSD 1.8.0 releasesssd-1_8_0Stephen Gallagher2012-02-2856-2745/+63872
|
* Update version to 1.8.0Stephen Gallagher2012-02-281-1/+1
|
* PAM: Don't send PAM_SYSTEM_INFO message if module unsetStephen Gallagher2012-02-271-7/+3
| | | | | | | | We now have a session module that is only available for the IPA provider. We should not be logging noisily that other providers do not have the session provider configured. https://fedorahosted.org/sssd/ticket/1211
* SSH: Update sss_ssh_knownhostsproxy manual pageJan Cholasta2012-02-271-15/+4
|
* SSH: Remove unused --file option of sss_ssh_knownhostsproxyJan Cholasta2012-02-271-5/+0
|
* SSH: Replace blocking getaddrinfo call in the responder with asynchronous ↵Jan Cholasta2012-02-274-27/+59
| | | | resolver code
* SSH: Use fchmod instead of chmod on known_hosts fileJan Cholasta2012-02-271-8/+4
|
* SSH: Add missing break statements to sss_ssh_format_pubkeyJan Cholasta2012-02-271-0/+2
|
* SSH: Add more debugging messagesJan Cholasta2012-02-275-8/+38
|
* SSH: Don't abort known_hosts update when host search failsJan Cholasta2012-02-271-1/+1
|
* SSH: Manage global known_hosts file in the responderJan Cholasta2012-02-273-78/+136
| | | | https://fedorahosted.org/sssd/ticket/1193
* SSH: Continue connecting to SSH server even when SSSD is not running in ↵Jan Cholasta2012-02-271-112/+85
| | | | | | | | | | sss_ssh_knownhostsproxy Additionally, don't drop the connection when the sss_ssh_knownhostsproxy process receives a signal. https://fedorahosted.org/sssd/ticket/1179 https://fedorahosted.org/sssd/ticket/1184
* UTIL: Add function for atomic I/OJan Cholasta2012-02-272-0/+44
|
* SSH: Refactor responder and client common codeJan Cholasta2012-02-277-170/+301
|
* SSH: Save SSH host name aliasesJan Cholasta2012-02-276-40/+119
|
* AUTOFS: speed up the client by requesting multiple entries at onceJakub Hrozek2012-02-273-78/+239
| | | | https://fedorahosted.org/sssd/ticket/1166
* Eliminate build-time requirement for nscdStephen Gallagher2012-02-273-12/+12
| | | | | | We will now use the autodetected location if available, or else fall back to a value provided by --with-nscd in configure and finally resort to a hard-coded default of /usr/sbin/nscd.
* LDAP: Remove unnecessary filter sanitizeStephen Gallagher2012-02-261-11/+5
| | | | | | The orig_dn here isn't being passed to a filter and therefore must not be santized, as the sanitization process would break DNs that contain (among other things) parentheses.
* Modifications to simplify list_missing_attrsJan Zeleny2012-02-248-44/+21
|
* Delete missing attributes from netgroups to be storedJan Zeleny2012-02-246-4/+45
| | | | https://fedorahosted.org/sssd/ticket/1136
* LDAP: Only use paging control on requests for multiple entriesStephen Gallagher2012-02-2416-40/+100
| | | | | | | | | | The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
* AUTOFS: Search all search bases for automounter map entriesJakub Hrozek2012-02-231-18/+86
| | | | https://fedorahosted.org/sssd/ticket/1168
* AUTOFS: Invoke implicit setautomntent if neededJakub Hrozek2012-02-232-45/+156
| | | | https://fedorahosted.org/sssd/ticket/1167
* libnl: fix the path to phy80211 subdirectoryJakub Hrozek2012-02-231-4/+20
|
* Move sudo_dom_ctx.user to local variablePavel Březina2012-02-232-8/+8
|
* Honor case_sensitive option in sudo responderPavel Březina2012-02-234-21/+100
| | | | https://fedorahosted.org/sssd/ticket/1205
* LDAP: Properly assign orig_dnStephen Gallagher2012-02-231-0/+1
| | | | This was only used for properly identifying debug messages.
* Save errno value before calling DEBUGJakub Hrozek2012-02-231-2/+4
|
* pam_sss: keep selinux optionalSimo Sorce2012-02-233-4/+7
| | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
* nss_group: Cache the result from sssd when the glibc provided buffer is too ↵Simo Sorce2012-02-231-8/+145
| | | | small.
* IPA: Add ipa_parse_search_base()Stephen Gallagher2012-02-233-19/+72
| | | | | | | | | | Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151
* Add tool to convert debug levelsStephen Gallagher2012-02-221-0/+100
| | | | | | | | | | | | | Older versions of SSSD (1.5 and earlier) would take a debug_level value set in the [sssd] section as authoritative for all other sections where not explicitly overridden. We changed this so that all sections need to set it if they want debug logs set. This script can be run to make the new version continue to produce the same logs as the old versions did, by explicitly adding debug_level to all domains and services that did not have it set already. Bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=753763
* remove unused functionJakub Hrozek2012-02-211-20/+0
|
* End request if ldap_parse_result failsJakub Hrozek2012-02-211-0/+3
|
* RESPONDERS: Allow increasing the file-descriptor limitStephen Gallagher2012-02-174-0/+48
| | | | | | | This patch will increase the file descriptor limit to 8k or the limits.conf maximum, whichever is lesser. https://fedorahosted.org/sssd/ticket/1197
* Fix case insensitive service lookupsJakub Hrozek2012-02-171-6/+6
|
* LDAP: Ignore group member users that do not have name attributesStephen Gallagher2012-02-171-2/+2
| | | | | | | | Instead of failing the group lookup, just skip them. This was impacting some users of ActiveDirectory where not all users had the appropriate attributes. https://fedorahosted.org/sssd/ticket/1169
* NSS: Always return the same protocol that was requestedStephen Gallagher2012-02-172-9/+26
| | | | https://fedorahosted.org/sssd/ticket/1160
* Redesign purging of the sudo cachePavel Březina2012-02-173-94/+370
| | | | https://fedorahosted.org/sssd/ticket/1173
* Fix missing %endif in sssd.spec.insssd-1_8_0_beta3sssd-1_7_93Stephen Gallagher2012-02-151-0/+1
|
* Bumping version to 1.7.93 for beta 3Stephen Gallagher2012-02-151-1/+1
|
* Always include all manpage XML files in the distribution tarballStephen Gallagher2012-02-151-2/+3
|
* Move sss_ssh_* binaries to the main 'sssd' packageStephen Gallagher2012-02-151-6/+7
| | | | | The sssd-client subpackage is multilib, so it cannot contain conflicting /usr/bin executables.
* Refactor sss_result into sss_sudo_resultPavel Březina2012-02-145-36/+38
| | | | https://fedorahosted.org/sssd/ticket/1159
* SSH: Build man pages conditionallyJan Cholasta2012-02-142-4/+6
| | | | https://fedorahosted.org/sssd/ticket/1175
* Fix memory hierarchy when processing nested group membershipsJakub Hrozek2012-02-144-11/+14
| | | | https://fedorahosted.org/sssd/ticket/1186
* Ensure NULL-termination in get_uid_from_pid()Stephen Gallagher2012-02-141-0/+3
| | | | Coverity #12399
* Fix uninitialized value error in proxy providerStephen Gallagher2012-02-131-1/+1
| | | | Coverity #12467
* Check for failure in sss_packet_grow()Stephen Gallagher2012-02-131-5/+5
| | | | Coverity #12489
* Fix bad failure handling in be_sudo_handler()Stephen Gallagher2012-02-131-13/+13
| | | | | | | If the dbus_message_get_args() failed, we would have been dereferencing a NULL be_req. Coverity #12490