summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Raise the debug level of two very noisy statementsStephen Gallagher2012-01-172-4/+6
|
* NSS: Improve DEBUG messages for netgroup cacheStephen Gallagher2012-01-171-2/+2
|
* Support multiple search bases in HBACJan Zeleny2012-01-145-39/+176
|
* Add info about ipa_host_search_base to man pageJan Zeleny2012-01-141-0/+29
| | | | | Also add comment that setting ipa_hbac_support_srchost to False disables search filters given in ipa_host_search_base
* NSS: Validate input string lengthsStephen Gallagher2012-01-144-9/+32
| | | | | | | Also fixes a return value bug where we were returning errno error codes instead of nss_status codes. Fixes https://fedorahosted.org/sssd/ticket/1135
* LDAP: Copy URI instead of pointing at failover service recordStephen Gallagher2012-01-141-2/+8
| | | | | | | | In a heavy load environment, sometimes the failover service record would be updated and free the URI value. We need to guarantee that this URI string remains valid throughout the entire request. https://fedorahosted.org/sssd/ticket/1139
* Log fixes for sdap_call_conn_cbStephen Gallagher2012-01-142-2/+4
|
* util: Fix murmurhash3 on machines with old glibcSimo Sorce2012-01-091-0/+10
|
* Add a random + identity test for murmurhash3Simo Sorce2012-01-091-0/+29
| | | | | | | | This test always generate a random string so each time the test is run we will test the hash function with a new value. It also hashes the same string twice and compares the result so that we have a chance of catching if uninitialized variables are getting mixed into the value calculation and end up generating different results for the same input.
* util: add murmurhash3 hash functionSimo Sorce2012-01-094-1/+147
|
* nsssrv: use sized_string in fill_grentSimo Sorce2012-01-091-35/+48
|
* nsssrv: use sized_string in fill_pwentSimo Sorce2012-01-091-41/+56
|
* nsssrv: add string manipulation helperSimo Sorce2012-01-092-0/+19
| | | | | the sized_string structure makes it easier to keep track of string lengths and makes passing around data more compat and readable.
* IPA netgroups: Do not reuse loop iterator variableJakub Hrozek2012-01-061-3/+3
|
* Do not call krb5_child when changing passwords and provider went offlineJakub Hrozek2012-01-061-1/+11
| | | | https://fedorahosted.org/sssd/ticket/1131
* HBAC: create empty groups with one NULL elementJakub Hrozek2012-01-061-16/+15
| | | | https://fedorahosted.org/sssd/ticket/1130
* nsssrv: remove unused macroSimo Sorce2012-01-041-2/+0
|
* tests: fix test group of utf8 testsSimo Sorce2012-01-041-5/+5
|
* make dist fixesSimo Sorce2012-01-041-1/+1
| | | | | Use pax format for tar as it is the only one that will succeed (albeit spitting warnings) to create a tar file if user UID values are above ~2M
* Importing new translations for 1.7.0 releaseStephen Gallagher2011-12-2273-4219/+2919
|
* Add compatibility layer for Heimdal Kerberos implementationStephen Gallagher2011-12-226-21/+99
|
* Honor case sensitive flag when creating the ccname templateJakub Hrozek2011-12-214-12/+56
|
* Return user and group names lowercased in case insensitive domainsJakub Hrozek2011-12-211-12/+32
|
* sss_get_cased_name utility functionJakub Hrozek2011-12-215-11/+24
|
* Bump version to 1.8.0Stephen Gallagher2011-12-201-1/+1
|
* Save original memberof, not memberofJakub Hrozek2011-12-201-4/+16
|
* Failover: Introduce a per-service timeoutJakub Hrozek2011-12-204-5/+67
| | | | https://fedorahosted.org/sssd/ticket/976
* Do not touch resolve_service_state in fo_resolve_service_doneJakub Hrozek2011-12-201-14/+11
|
* Resolver: Introduce a per-request timeoutJakub Hrozek2011-12-201-30/+199
|
* PAM: make initgroups timeout work across multiple clientsStephen Gallagher2011-12-207-6/+243
| | | | | | | | | | | Instead of timing out the initgroups lookup on a per-cctx basis, we will maintain a hash table of recently-seen users and use this instead. This will allow SSSD to handle user's logging into multiple services simultaneously more graciously, as well as playing nicer with SSH (which makes calls to PAM both before and after a fork). https://fedorahosted.org/sssd/ticket/1063
* Error out if local domain is case insensitiveJakub Hrozek2011-12-201-0/+7
| | | | https://fedorahosted.org/sssd/ticket/1104
* SUDO Integration - fixed memory leak in sdap_sudo_handler()Pavel Březina2011-12-201-0/+1
|
* SUDO Integration - be_sudo_req removed from sudo_ctxPavel Březina2011-12-202-2/+0
|
* MONITOR: use sigchld handler for monitoring SSSD servicesStephen Gallagher2011-12-201-177/+159
|
* Update translations for string freezeStephen Gallagher2011-12-1973-14615/+23041
|
* Pass sdap_id_ctx to online check from IPA providerJakub Hrozek2011-12-195-18/+56
|
* Securely set umask when using mkstempStephen Gallagher2011-12-194-0/+18
| | | | Coverity 12394, 12395, 12396, 12397 and 12398
* Reorder pidfile() function to guarantee NULL-terminationStephen Gallagher2011-12-191-3/+3
| | | | Coverity 12400
* Deleted declaration of nss_get_dom()Jan Zeleny2011-12-191-4/+0
| | | | | This function has been renamed to responder_get_domain() but this declaration hasn't been deleted.
* Move child_common routines to utilStephen Gallagher2011-12-1915-20/+20
|
* Add common SIGCHLD handling for providers.Pavel Zuna2011-12-195-8/+269
|
* Pass client context to sss_dp_get_account_sendJakub Hrozek2011-12-191-1/+1
|
* Use of uninitialized value in sss_ldap_dn_in_search_basesPavel Březina2011-12-161-3/+3
| | | | https://fedorahosted.org/sssd/ticket/1112
* DP: Remove processed callbacksJakub Hrozek2011-12-161-3/+5
|
* Logically dead code in sdap_nested_group_lookup_groupPavel Březina2011-12-161-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1113
* SUDO Integration - pseudo client for testingPavel Březina2011-12-162-0/+182
|
* SUDO Integration - API for sudoPavel Březina2011-12-164-0/+553
|
* SUDO Integration - responder - get sudo rules logicJakub Hrozek2011-12-161-2/+444
|
* SUDO Integration - responderPavel Březina2011-12-1610-1/+1065
|
* SUDO integration - LDAP providerPavel Březina2011-12-165-1/+660
|