summaryrefslogtreecommitdiffstats
path: root/server/db
Commit message (Collapse)AuthorAgeFilesLines
* Add debug statements to sysdb_opsSimo Sorce2009-08-241-10/+111
|
* store additional LDAP attributesSumit Bose2009-08-212-1/+35
| | | | | If available the original DN and the user principle will be stored in sysdb.
* Ensure nextID doesn't reuse an existing local UID or GIDStephen Gallagher2009-08-201-9/+21
| | | | | | | | | If there was no maxID set for a domain, the search filter to check whether the UID was available would always return empty (because no UIDs can be <= 0) This patch changes the search filter if the maxID is unset so that it has no upper limit
* Do not fail enumerations because of range checksSimo Sorce2009-08-101-3/+3
|
* Consolidate tevent helpersJakub Hrozek2009-08-051-26/+0
|
* Add ignore_not_found parameter to sysdb delete functionsJakub Hrozek2009-07-312-11/+21
| | | | Also add tests
* Fix saving new nextIDJakub Hrozek2009-07-201-1/+1
|
* fixed typos and a potential memory leakSumit Bose2009-07-091-2/+3
|
* Implement the ldap identity module.Simo Sorce2009-07-082-78/+235
| | | | This uses and exapands the async helpers.
* Unify password caching ops in sysdbSimo Sorce2009-07-083-31/+129
|
* Add async helper functionsSimo Sorce2009-07-082-24/+20
| | | | | | These functions use the tevent_req async model, where a pair of _send/_recv functions pilot requests, with additional helpers like _done functions, and where needed multiple stage helpers.
* Expose sysdb function to parse sysdb_attrsSimo Sorce2009-07-082-2/+4
|
* Rework transaction code to use tevent_reqSimo Sorce2009-07-036-1630/+3137
| | | | | | This is part of a set of patches to rewrite sysdb to a hopefully better API, that will also let use use tevent_req async style calls to manipulate our cache.
* Rename sysdb_req to sysdb_handle.Simo Sorce2009-07-035-208/+208
| | | | | | | | | This sysdb_req has always really been a transaction handle and not a request. This is part of a set of patches to rewrite transaction support in sysdb to a hopefully better API, that will also let use use tevent_req async style to manipulate our cache.
* Suppress "rootdse" error messages.Stephen Gallagher2009-05-281-0/+6
| | | | | | | We will trap all LDB debug messages and pipe them into our internal DEBUG() function. LDB FATAL messages will still be printed by default, WARNING and TRACE functions will be at debug level 3 and 9, respectively.
* Silence warningsSimo Sorce2009-05-261-3/+2
|
* Fix manual UID assignment in sysdbJakub Hrozek2009-05-261-11/+15
| | | | | If it's an MPG domain, set them equal. If it's a non-MPG domain, get the next available GID and use that.
* added prototype for sysdb_set_cached_passwordSumit Bose2009-05-191-0/+6
|
* Move actual password caching into sysdbSimo Sorce2009-05-182-2/+49
| | | | Convert auth modules to do the caching themselves
* Fixes for porting SSSD to Debian-based platformsStephen Gallagher2009-05-041-1/+0
|
* Use different attribute for cached passwordsSimo Sorce2009-04-271-0/+2
| | | | | | | This fixes a bug with legacy backends where the cached password would be cleared on a user update. Using a different attribute we make sure a userPassword coming from the remote backend does not interfere with a cachedPassword (and vice versa).
* enable uid/gid generation againSumit Bose2009-04-271-3/+6
|
* fixes for user and group creation in LOCAL domainSumit Bose2009-04-231-0/+19
| | | | | - added range check for supplied UIDs and GIDs - initialize pc_gid to 0 to trigger gid generation
* Always pass full domain infoSimo Sorce2009-04-132-25/+32
| | | | | Change sysdb to always passwd sss_domain_info, not just the domain name. This way domain specific options can always be honored at the db level.
* Clean up warnings in SSSDStephen Gallagher2009-04-071-1/+0
|
* Add way to use files as a proxy backend fro LOCALSimo Sorce2009-04-012-3/+4
| | | | | | | | | | | | Makes LOCAL a normal backend removing some special handling. Fix/Add id range filtering and name filtering Filters uid=0 and gid=0 in the proxy backend as 0 is invalid within sysdb and was causing getxxent calls to fail completely. Fix nss_ncache_check_xxx calls to avoid dirtying the 'ret' variable and causing some unwanted failures. Change sysdb to always return the uid number when searching member entries so that id range filtering can be perfomed also in group searhes (does not work with legacy backends)
* Fix segfault error caused by a double freeSimo Sorce2009-03-181-178/+118
| | | | | | | | In delete_callback we were freeing rep after having called return_done() This caused a double free becuse rep is already freed as child of the request when return_done calles the callback. To avoid future errors like this convert return_error and return_done into functions and make them always be the last call of the function and call them as part of the function return.
* Fix returning user with missing optional attributes.Simo Sorce2009-03-102-9/+15
| | | | | | | | | Gecos, homedir and shell are optional, fix the responder not to refuse to return the user completely if they are missing, replace an empty homedir with "/". Also fix fullname vs gecos, and always return gecos for NSS data. On user creation set gecos to the same value as the user Full Name, to help populate the gecos field with data that makes sense.
* If a domain is MPG enabled return users a groupsSimo Sorce2009-03-102-15/+73
| | | | Turn user entries to Magic Private Groups when groups are quesried.
* Fix bugs in functions dealing with groupsSimo Sorce2009-03-101-0/+6
| | | | | | Fix infinite loop within initgr functions. Fix min length check copy&paste error, was filtering valid groups if the name was short enough and the group had no members.
* Always pass sss_domain_info to sysdb functions.Simo Sorce2009-03-092-57/+35
|
* Move MPG checks within sysdb.Simo Sorce2009-03-092-22/+199
| | | | | This allows to perform checks and modifications in one transaction. Uses configuration stored in confdb to determins if a domain uses MPGs.
* Do not duplicate attribute names macros.Simo Sorce2009-03-091-21/+18
| | | | Also shorten names oh other user attributes.
* Implement SetGroupGID in the InfoPipeStephen Gallagher2009-03-092-0/+72
|
* Implement CreateUser in InfoPipeStephen Gallagher2009-03-062-2/+2
| | | | | | | | | | | Changed the order of the arguments to CreateUser in the Introspection XML to match the other functions (domain belongs second on the list) A few other minor fixes as well: Fixed a typo in SYSDB_GETCACHED_FILTER and sysdb_transaction_end(). Added missing error handling in infp_do_user_set_uid().
* Remove obsolete commentSimo Sorce2009-03-061-3/+0
|
* Add userspace tools to manipulate accounts.Simo Sorce2009-03-061-0/+2
| | | | | The first functional command is sss_useradd (Name is temporary, while looking for a better one)
* Fix reporting non-default users.Simo Sorce2009-03-061-0/+4
| | | | | We need to add the domain when users are not part of the default domain, otherwise name conflicts may happen.
* Remove _PW_ and _GR_ from SYSDB_ definesSimo Sorce2009-03-054-56/+52
| | | | Also unify SYSDB_PW_NAME and SYSDB_GR_NAME in SYSDB_NAME and make it "name"
* Implement GetCachedUsers in the InfoPipeStephen Gallagher2009-03-052-1/+9
| | | | | | | | | | | | | This function allows a caller to retrieve a list of users who have logged in on the system, specifying an optional minimum last login time to trim the list. I modified sysdb_enumpwent to accept an optional search argument. GetCachedUsers takes advantage of this argument to limit the search by the last login time. I also found and fixed a few additional low-memory conditions around D-BUS message replies.
* Add functions to add regular users and groupsSimo Sorce2009-03-052-15/+299
| | | | | | Calulates next id automatically if uid/gid are not specified. Fixes to sysdb_get_next_available_id. Add tests to create users and groups through the new functions.
* Add internal min/max/next id management fucntionsSimo Sorce2009-03-043-14/+290
| | | | | | | | Retrieve minID and maxID from domain configuration so that lower and upper bounds can be set per domain. Add function that keeps track of the next available id, increments and returns it on requests, avoiding collisions with existing ids.
* Improve sysdbSimo Sorce2009-03-044-33/+87
| | | | | | Add comments in header files to better explain interfaces and intended usage. Expose function to convert from ldb errors to errnos. Add sysdb_attrs helper to add a long integer as a value.
* Provide sysdb_set_user_attr() functions.Simo Sorce2009-03-034-3/+155
| | | | | | Provide also helper functions to build struct sysdb_attrs. Also fix sysdb_get_user_attr() to have a consistent interface as all other functions.
* Unify pwd_search and user_searchSimo Sorce2009-03-021-35/+11
|
* Implement GetUserAttributes in the InfoPipeStephen Gallagher2009-03-022-0/+92
| | | | | | | | | | | | | | | | | | This patch adds support for requesting user data in the sysdb via the InfoPipe. It currently has support for reading defined entries of integral, floating-point or string types. Tasks remaining: 1) Implement call to the provider when cache is out of date 2) Support byte arrays for userpic and similar I modified sysdb_search_ctx in sysdb_search.c to accept an array of attributes to pass into the LDB search. I also made one additional related fix: the btreemap now sorts in the correct order. Previously I had accidentally transposed the two values for sorting, so the map would always have been in exact reverse order.
* first version of LOCAL pam backendSumit Bose2009-03-021-0/+1
|
* Expose some more functions needed by the testsSimo Sorce2009-02-283-1/+114
|
* Convert sync calls in sysdb to async, transaction dependent, calls.Simo Sorce2009-02-287-962/+1041
|
* Serialize access to sysdb and also exposes ldb transactions.Simo Sorce2009-02-266-750/+1008
| | | | | | This is necessary because in ldb only 1 transaction per context is possible and all operations (or new transactions) are nested within it. Will revisit this later when ldb will addresses the problem.