summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* COLLECTION: Fixing queue collection and unit tests.Dmitri Pal2010-02-014-298/+478
| | | | | | | | | | This patch includes following functionality: 1) Fixed the invalid handling of the pointers in the collection when last element is removed from the collection. 2) Added unit test to verify the fix. 3) Modified the three unit test to be verbose on demand. 4) Switched the main of the unit test to use array of functions rather than big if statement.
* Force offline operation with SIGUSR1Stephen Gallagher2010-02-013-0/+69
| | | | | | If the monitor receives SIGUSR1, it will instruct all providers to enter offline operation. If any individual provider receives SIGUSR1, it alone will enter offline operation.
* Improve logging of pam_sssSumit Bose2010-02-011-9/+46
| | | | | | | | | | To avoid unnecessary messages in the log files of the system we only send log messages for PAM modules type which are explicitly handled by sssd. Furthermore only the authentication modules sends a log message when the operation was successful. All other modules only sends a message if an error occurs. This patch should fix bz556534.
* Avoid 'PAM' at the beginning of define and enum namesSumit Bose2010-02-017-69/+71
|
* Rename PAM_USER_INFO to PAM_SYSTEM_INFOSumit Bose2010-02-014-6/+6
|
* Fix size error on 64-bit systemsStephen Gallagher2010-01-251-1/+1
|
* Handle IPv6 addresses with the async resolverStephen Gallagher2010-01-224-13/+65
|
* Fix release script to use version.m4Stephen Gallagher2010-01-221-1/+1
|
* Pointers to non 32 bit aligned data were being cast to uint32_t *George McCollister2010-01-223-36/+49
| | | | | | | | uint32_t pointers must point to 32 bit aligned data on ARM. Instead of padding the data to force it into alignment I altered the code to memcpy the data to an aligned location. I'd appreciate any and all feedback especially on whether I took the best approach. pam_test_client auth and pam_test_client acct now work on my armeb-xscale-linux-gnueabi target. Signed-off-by: George McCollister <georgem@opteron.novatech-llc.com>
* Fix async resolver integration with teventStephen Gallagher2010-01-221-7/+19
| | | | | | | We weren't properly setting read/write flags on the tevent fd events, so c-ares was unable to perform bidirectional communication for TCP DNS (in situations where the response is too large to send by UDP)
* REFARRAY: New referenced array objectDmitri Pal2010-01-219-2/+802
| | | | | | | | | | | | | | | | | | | This object allows creation the arrays with the reference count. Usefull when there are many instances of some object have to reference dynamically allocated array which is common for all these instances. In case of ELAPI the event object keeps a referecne to the common array of the sinks in the fail over order. We decided that it will be a common object not specific only to ELAPI. All the review concerns related to this object have been addressed in this patch. It also has been moved to the common area.
* INI: Added method to get string list with empty valuesDmitri Pal2010-01-213-54/+117
| | | | | | | | | | | The original implementation was compressing the list, throwing away empty strings. The function that did that was pretty brain damaging. I cleaned it up and adjusted so that it could return list with empty values and without them. The old function was turned into a wrapper and a new high level function was intorduced to provide ability to get both empty and non empty strings.
* Add missing link for KerberosStephen Gallagher2010-01-211-1/+2
|
* Add 'prerelease-rpms' target to MakefileStephen Gallagher2010-01-211-0/+8
| | | | | | | This target is available only if building from a git checkout. It will automatically populate the PRERELEASE_VERSION in version.m4 with the current datestamp and git commit id for creating an RPM.
* Add 'prerelease-srpms' target to MakefileStephen Gallagher2010-01-212-0/+10
| | | | | | | This target is available only if building from a git checkout. It will automatically populate the PRERELEASE_VERSION in version.m4 with the current datestamp and git commit id for creating an SRPM.
* Use version.m4 for setting the SSSD versionStephen Gallagher2010-01-217-14/+23
| | | | | | | | This is the preferred way of setting the version in a file, as autotools will properly monitor this file for changes and rerun autoconf/configure when necessary to update the version. This means that we don't need to manually perform an autoreconf in order to build a new RPM
* Update the url in the spec filesSumit Bose2010-01-202-2/+2
|
* Split off libdhash into a shared libraryStephen Gallagher2010-01-209-15/+94
| | | | | | | | Right now, the pkg-config checks for the system version of libdhash are forcibly disabled, requiring the SSSD to build it from its own tree. In the future, when we split the libraries off from the SSSD, it will be easy to switch this check to the external library.
* License libdhash under the LGPLStephen Gallagher2010-01-203-0/+844
|
* Fix a double free bugSumit Bose2010-01-201-3/+0
|
* Fix timeout memory heirarchyStephen Gallagher2010-01-201-2/+14
| | | | | | | | This fixes two issues: 1) Eliminates a double-free when a timeout occurs (we were freeing the running event context) 2) Ensures that we don't continue to schedule unnecessary timeout checks
* Deleting nonexistent users or groups is not a noopJakub Hrozek2010-01-202-4/+2
| | | | | | The manual pages for userdel and groupdel utilities incorrectly stated that deleting a nonexistent user or group is a noop. We changed that behavior, but forgot to sync the documentation.
* document debug_timestampsJakub Hrozek2010-01-202-0/+22
|
* Add sysdb request to authenticate against a cached passwordSumit Bose2010-01-208-217/+378
| | | | | | | | | The code for authentication against a cached password is moved from the pam responder to a generic sysdb tevent request. The new code can be used by other components of sssd to verify passwords on their own. Tests for the sysdb_cache_password and sysdb_cache_auth request are added and some unneeded or unused code and variables are removed.
* sss_groupshow - a utility to print properties of a local groupJakub Hrozek2010-01-2010-2/+454
| | | | | | | This patch adds a utility called sss_groupshow that allows user to print properties of a group in the local domain. Fixes: #306
* Resetting VERSION to 1.0.99Stephen Gallagher2010-01-141-1/+1
| | | | This shouldn't be set to 1.1.0 until it's ready for release
* Updating version to 1.1Stephen Gallagher2010-01-141-1/+1
|
* Update version to 1.0.2Stephen Gallagher2010-01-141-1/+1
|
* Copy-edit, mainly fixing typos and EnglishDavid O'Brien2010-01-142-71/+68
| | | | | Some reformatting to stay within 79 char line length. Better definition of server vs. machine usage in failover section.
* Make sure callbacks never retry when ares channel is destroyedMartin Nagy2010-01-141-4/+12
| | | | | | When the resolv context destructor is invoked, the callbacks for pending queries could have been called with ARES_EDESTRUCTION and try to re-send the query.
* Don't recursively call ares_process_fd() from fd_event()Martin Nagy2010-01-141-17/+0
| | | | | | | | Since ares_process_fd() might also cause fd_event() to be called again, calling ares_process_fd() is unwise. The bug will cause a crash if c-ares is using tcp connections. Fixes: #384
* Make periodic checks for DNS timeoutsMartin Nagy2010-01-141-1/+82
| | | | | | | | Since we only call c-ares to process input on FD when there is an activity on them, c-ares never gets a chance to react to a timed-out request. This caused SSSD to hang. Fixes: #381
* Explicitly set async DNS timeoutStephen Gallagher2010-01-145-6/+15
| | | | We will allow 5s per DNS server, no retries.
* Fix #382, a segfault bug in the memberof plugin.Simo Sorce2010-01-121-1/+1
|
* Re-create c-ares channels if /etc/resolv.conf is modifiedMartin Nagy2010-01-123-14/+95
| | | | Fixes: #378
* Remove local and kerberos providers from the access_provider listStephen Gallagher2010-01-123-6/+2
| | | | Update tests to reflect these removals.
* Update SV translationPiotr Drąg2010-01-121-3/+2
|
* Releasing version 1.0.1Stephen Gallagher2010-01-111-1/+1
|
* Fix return value when offline and TGT is validSumit Bose2010-01-111-1/+1
| | | | Fixes CVE-2010-0014
* Update SV translationGöran Uddeborg2010-01-051-3/+3
|
* Update translations for masterStephen Gallagher2010-01-0511-413/+402
|
* Don't free timer events within the handler.Simo Sorce2010-01-051-16/+12
| | | | | | | Tevent frees timer handlers once done, so freeing the timer within the event is going to cause double frees. Just attach the timer event to the request it depends on and make sure to steal it on NULL if we are going to free the request from within the handler.
* Return an error for an unknown PAM requestSumit Bose2010-01-054-12/+41
|
* Allow debug_timestamps setting on a per-domain basisStephen Gallagher2009-12-212-0/+3
| | | | | This was missing from the SSSDConfig API, though it was supported by the daemon.
* Release SSSD 1.0Stephen Gallagher2009-12-181-1/+1
|
* Fix broken password changes for local usersStephen Gallagher2009-12-181-1/+6
|
* Do not blindly accept zero-length passwordsStephen Gallagher2009-12-182-8/+17
|
* Fix ldap child memory hierarchy and other issuesSimo Sorce2009-12-188-306/+482
| | | | | | | | | | | | | | | | | The timeout handler was not a child of the request so it could fire even though the request was already freed. The code wouldn't use async writes to the children so it could incur in a short write with no way to detect or recover from it. Also fixed style of some helper functions to pass explicit paramters instead of a general structure. Add common code to do async writes to pipes. Fixed async write issue for the krb5_child as well. Fix also sdap_kinit_done(), a return statement was missing and we were mixing SDAP_AUTH and errno return codes in state->result Remove usless helper function that just replicates talloc_strndup()
* Fix for #344Sumit Bose2009-12-181-13/+11
| | | | | Do not handle a missing ccache file as inactive by default, check if there are still active processes of the user.
* Do not overwrite valid TGTs when offlineSumit Bose2009-12-185-43/+185
|