summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* gitignore additionsJakub Hrozek2010-02-121-0/+3
|
* Make change password errors more transparentSumit Bose2010-02-129-24/+228
|
* Don't pass a variable as format to talloc_asprintf()Martin Nagy2010-02-122-2/+2
| | | | This practice is not recommended and can also be dangerous.
* sss_groupshow improvementsJakub Hrozek2010-02-102-104/+698
| | | | | | | | | This patch fixes the following issues: * man page issues (#395) * show info on MPGs (#396) * recursively print indirect members (#397) * the list of groupnames is comma separated (#398) * output inconsistencies (#399)
* Make collection_queue.h and collection_stack.h into public headersStephen Gallagher2010-02-102-3/+5
|
* Fix other memory alignment issuesJakub Hrozek2010-02-104-42/+55
| | | | | | | Similar to George McCollister's patch to the pam code, this patch fixes other places in the code where we forced data into 32-bit alignment. Fixes: #390
* Few misc minor man page bugsJakub Hrozek2010-02-103-26/+23
| | | | | | | | | | | | | | | * sssd.conf * sbus_timeout was used in an example but explained nowhere * enum_cache_timeout unit was not defined * same for entry_cache_timeout * store_legacy_passwords option does not exist anymore * better example than domain/LOCAL - domain/LDAP which uses krb5/ldap * sssd.conf(5) listed sssd.conf(5) in SEE ALSO section * sssd-krb5, sssd-ldap * these include each other in SEE ALSO section Fixes: #393
* Make return values more specific during password changeSumit Bose2010-02-105-38/+84
| | | | | | | - return PAM_AUTHTOK_ERR instead of PAM_SYSTEM_ERR if the password change operation fails - send a message to the user if the system is offline and the password cannot be changed
* Updating PL translationPiotr Drąg2010-02-102-8/+10
|
* Fix handling of the global context in the leak detectorSumit Bose2010-02-102-1/+3
|
* Send a message to the user if the login is delayedSumit Bose2010-02-107-36/+152
|
* Update translatable stringsStephen Gallagher2010-02-0519-609/+815
|
* Add a few additional extensions to .gitignoreStephen Gallagher2010-02-051-0/+3
|
* Document when LDAP referral chasing is availableSumit Bose2010-02-052-0/+17
|
* Reactivate old fd handling conditionallySumit Bose2010-02-055-1/+82
| | | | | | | Older versions of openLDAP do not provide a connection callback. This patch adds a configure check to see if the callback is available and activates the old way of handling the file description of the LDAP connection. This also means that it is not possible to follow referrals.
* Add mandatory flag to SSSD config schemaStephen Gallagher2010-02-058-207/+455
| | | | | | | | | Also add list_mandatory_options() to both SSSDService and SSSDDomain objects. There is a new list_options_with_mandatory() function that will return a longer tuple than list_options(), including the mandatory flag directly.
* Remove unnecessary explicit defaults from SSSDConfig APIStephen Gallagher2010-02-052-10/+10
|
* Add missing includeJakub Hrozek2010-02-051-0/+1
|
* Added option to use libcrypto instead of NSS.George McCollister2010-02-057-11/+416
| | | | | | | | | | | | crypto_sha512crypt.c is a clone of nss_sha512crypt.c with the exception that all usage of NSS and related libraries has been switched to libcrypto. I renamed nss_sha512crypt.h to sha512crypt.h since it is common to both crypto_sha512crypt.c and nss_sha512crypt.c. Note that the random number generator is not seeded manually and thus relies on seeding done automatically by libcrypto. On some systems without /dev/urandom seeding may not be performed. See http://www.openssl.org/docs/crypto/RAND_add.html. Signed-off-by: George McCollister <georgem@novatech-llc.com>
* Internationalize the command-line help messageStephen Gallagher2010-02-055-15/+15
|
* Enable debug_timestamps by defaultStephen Gallagher2010-02-057-11/+11
| | | | | It can be overridden in the sssd.conf or on the commandline with --debug-timestamps=0
* Make krb5 and open checks work if forking is disabledSumit Bose2010-02-032-1/+6
| | | | | | | | | | | | | | | | When CK_FORK is set to 'no' the fixtures are executed for every new test inside of the same process. Global variables must be set to the expected values by the fixtures. check_and_open-tests.c: the filename template for mkstemp() was a globally defined character string. After the first call to mkstemp() the trailing XXXXXX are substituted by random values, a second call to mkstemp() with this character string fails. This patch initialize the filename template before mkstemp() is called with the help of strdup() and the memory is freed in the teardown fixture. krb5_utils-tests.c: this patch sets the just freed global talloc context to NULL to make a consistency check in the setup fixture pass.
* Make resolve and failover test work with CK_FORK=noSumit Bose2010-02-034-6/+11
| | | | | | | | | | | | | | | The leak checking code which is used by the resolve and failover tests frees talloc's autofree context which is not recommended. As a consequence the initialization of tevent failed when it was called by the second test and CF_FORK=no, because it holds some data in the autofree context. This patch introduces a global talloc context which should be uses by the test as the root of their memory hierarchy instead of NULL. This global context is used in the leak checking routines. Not all types of memory leaks can be detected by the new version , it is recommended to use valgrind or similar tools additionally.
* Package libref_array and libref_array-develStephen Gallagher2010-02-031-0/+39
|
* Split refarray off into a shared libraryStephen Gallagher2010-02-034-10/+13
|
* Add license files for refarrayStephen Gallagher2010-02-032-0/+839
|
* Package libini_config and libini_config-develStephen Gallagher2010-02-031-0/+42
|
* Split off libini_config into a shared libraryStephen Gallagher2010-02-037-12/+42
|
* Fix array index errorStephen Gallagher2010-02-031-1/+1
| | | | | | The null-terminator would have been written one byte past the end of the array (and there may have been an extra garbage character in the index before it)
* Add license files for ini_configStephen Gallagher2010-02-032-0/+839
|
* Package libcollection and libcollection-develStephen Gallagher2010-02-031-0/+42
|
* Split off libcollection into a shared libraryStephen Gallagher2010-02-036-13/+37
|
* Remove private header requirements from collection_tools.hStephen Gallagher2010-02-031-1/+0
|
* Add license files for collectionStephen Gallagher2010-02-032-0/+839
|
* Package libpath_utils and libpath_utils-develStephen Gallagher2010-02-031-0/+37
|
* Split off libpath_utils into a shared libraryStephen Gallagher2010-02-033-8/+11
|
* License libpath_utils under LGPLStephen Gallagher2010-02-033-0/+846
|
* Warn the user if authentication happens offlineSumit Bose2010-02-026-13/+219
|
* Add offline failed login counterSumit Bose2010-02-029-17/+631
|
* Update suse sssd.specSergey V. Kovylov2010-02-021-3/+65
|
* Add new option ldap_referralsSumit Bose2010-02-027-1/+30
|
* Use ldap connection callbacks to get file descriptorsSumit Bose2010-02-024-43/+121
|
* Check cache_credentials in sysdb_cache_auth_send()Sumit Bose2010-02-022-0/+14
|
* COLLECTION: Fixing queue collection and unit tests.Dmitri Pal2010-02-014-298/+478
| | | | | | | | | | This patch includes following functionality: 1) Fixed the invalid handling of the pointers in the collection when last element is removed from the collection. 2) Added unit test to verify the fix. 3) Modified the three unit test to be verbose on demand. 4) Switched the main of the unit test to use array of functions rather than big if statement.
* Force offline operation with SIGUSR1Stephen Gallagher2010-02-013-0/+69
| | | | | | If the monitor receives SIGUSR1, it will instruct all providers to enter offline operation. If any individual provider receives SIGUSR1, it alone will enter offline operation.
* Improve logging of pam_sssSumit Bose2010-02-011-9/+46
| | | | | | | | | | To avoid unnecessary messages in the log files of the system we only send log messages for PAM modules type which are explicitly handled by sssd. Furthermore only the authentication modules sends a log message when the operation was successful. All other modules only sends a message if an error occurs. This patch should fix bz556534.
* Avoid 'PAM' at the beginning of define and enum namesSumit Bose2010-02-017-69/+71
|
* Rename PAM_USER_INFO to PAM_SYSTEM_INFOSumit Bose2010-02-014-6/+6
|
* Fix size error on 64-bit systemsStephen Gallagher2010-01-251-1/+1
|
* Handle IPv6 addresses with the async resolverStephen Gallagher2010-01-224-13/+65
|
generated by cgit (git 2.34.1) at 2024-06-10 19:34:00 +0000