summaryrefslogtreecommitdiffstats
path: root/server/db
Commit message (Collapse)AuthorAgeFilesLines
* Fix upgrade bug #323Simo Sorce2009-12-151-180/+186
| | | | | | | | | Move the upgrade function first and check explicitly for the old ldb name. Perform upgrades up to v02 first if necessary. Then proceed as normal letting the normal init functions perform further upgrades if necessary. This now works also if there is no "local" provider in the current configuration.
* Fix DEBUG message for sysdb_initSumit Bose2009-12-101-2/+2
|
* Fix for #322, update from old database versions.Simo Sorce2009-12-101-1/+14
|
* Fix for #316Simo Sorce2009-12-101-3/+3
| | | | | We were never filling the group attrs because of an inverse return check. Plus fix a crash bug for using a pointer that is not a memory context.
* Handle the special 02 upgrade case for 04->05Simo Sorce2009-12-101-0/+7
|
* Add rebuild task to memberof pluginSimo Sorce2009-12-102-3/+129
| | | | | | | | | | | This task allows us to rebuild memberuid and memberof attributes throughout the database. This way we can upgrade from version 0.4 databases that didn't generate and store memberuid. The task can be invoked by adding a speaicl named entry to the ldb file. The entry dn to use is: @MEMBEROF-REBUILD, the entry has no attributes and any attribute is ignored at present. The entry will not be stored in the database but will just trigger the task to execute a rebuild of the memberof and memberuid attributes
* Always update sysdb to the latest versionSumit Bose2009-12-101-3/+11
|
* Fix nested group membershipsSimo Sorce2009-12-073-66/+109
| | | | | | | | | Search the local db to find the local DN using the original DN as search key. This way we do not have to rely on weak and faulty heuristicts based on DN names. Add a few helper functions in the process and change the way we pass members to sysdb_store_group_send(), instead of passing users and groups list, just add member DNs to the other sysdb attrs.
* Make strdn build functions more availableSimo Sorce2009-12-073-42/+58
|
* Add sysdb_search_custom requestSumit Bose2009-12-072-12/+96
|
* Use memberuid and not member in group enumerationsSimo Sorce2009-12-031-1/+1
| | | | | | This allows for correctly reporting nested group members, while at the same time not paying a too high price for caluclating nested groups at runtime e very time a search is made.
* Use ldb modules from build root for testsSumit Bose2009-11-251-0/+4
|
* Optimize sysdb_enumgrentSimo Sorce2009-11-202-332/+25
| | | | | This brings down the time needed to enumerate my group database from 2.4 seconds to 0.15 seconds.
* Improve handling of ccache filesSumit Bose2009-11-201-0/+1
| | | | | | | - save current ccache file to sysdb - use the saved ccache file if the user has running processes - create an empty ccache if offline - return enviroment variables if offline
* Correctly escape DN value.Simo Sorce2009-11-201-6/+42
| | | | | In building the DN string we weren't correctly escaping the value of the RDN component. This patches fixes that.
* Fix sysdb upgrade bugStephen Gallagher2009-11-191-1/+1
| | | | | | After completing an upgrade successfully, we were still falling into the "version not found" case. We should be exiting the function after performing the upgrade.
* Change initgroups code to use and check the cacheSimo Sorce2009-11-181-22/+11
| | | | | | | We were previously always ending up contacting the backend because we had no way to know if an initgroups call for the same user had ever been called. Add attribute to hold this information and rely on backends to update it. If they don't we fallback to the previous behvior of asking the backend.
* Fix crash due to uninitialized timeout variableSimo Sorce2009-11-181-0/+1
| | | | | This slipped through in previous patches. Fixes #283
* Upgrade cache and local databases to case-sensitive namesStephen Gallagher2009-11-182-2/+96
|
* Make the sysdb user and group names case-sensitiveStephen Gallagher2009-11-181-1/+0
|
* Refactor delete functions and add a fewSimo Sorce2009-11-102-195/+609
| | | | | | Refactor user/group delete functions so that they can be used without a transaction (they autostart an operation). Add user and group search function where a subfilter can be specified.
* Fix tevent_req error checking.Simo Sorce2009-11-092-76/+22
| | | | When possible using a macro that correctly deals with tstate
* added access module of IPA providerSumit Bose2009-11-072-0/+12
|
* Always set last update and expire timeSimo Sorce2009-11-062-110/+106
| | | | | modifications to existing users/groups were setting metadata, but creation was not. Fixes #259
* Make available method to quickly retrive stringSimo Sorce2009-11-062-3/+35
| | | | | sysdb_attrs has a lot of methods to add them but very little to get information out. Start adding a way to retrieve a single valued attribute as a string.
* Fix for a seg fault during recursive deleteSumit Bose2009-11-041-1/+7
|
* Add sysdb_attrs_replace_name to sysdb API.Sumit Bose2009-11-042-0/+35
|
* Rename sdap_id_map to sdap_attr_mapSimo Sorce2009-11-031-0/+3
| | | | | | Also start adding some infrastructure to use the USN counter when available. In particular add a place to add generic attrs mapping, ie attributes that are neither user nor group specific.
* add sysdb_delete_recursive request to sysdb APISumit Bose2009-11-023-0/+175
|
* Allow sysdb_search_entry request to return more than one resultSumit Bose2009-10-292-27/+66
|
* added a ASQ search API for sysdbSumit Bose2009-10-292-0/+230
|
* Move responsibility for entry expiration timeoutSimo Sorce2009-10-272-13/+43
| | | | | The providers are now responsible for determining how long a cached entry is considered valid. The default is the same as before (600s)
* Zero pointers on freeSimo Sorce2009-10-261-4/+4
| | | | | If the pointer stays around, zero it when it is freed, so we do not risk access to released memory in case of bugs.
* Read the right buffer, avoids potential segfaultsSimo Sorce2009-10-261-5/+5
| | | | Also fix some debug message levels
* Add support for offline auth cache timeoutStephen Gallagher2009-10-221-0/+1
| | | | | | | | | This adds a new option (offline_credentials_expiration) to the [PAM] section of the sssd.conf If the user does not perform an online authentication within the timeout (in days), they will be denied auth once the timeout passes.
* add store/search/delete interface for custom sysdb objectsSumit Bose2009-10-223-0/+566
|
* Remove magicPrivateGroups optionSimo Sorce2009-10-094-10/+17
| | | | | | | | | In sssd only local is a native mpg domain, and it is forced. All other providers will have to unroll mpg users into a user/group pair of entries in the db. This allows the provider to automatically establish if the remote server provides mpg users w/o possibily conflicting manual configurations on the client trying to force an mpg behavior where none is provided.
* Revert "Use syslog for logging error conditions in SSSD"Stephen Gallagher2009-09-232-38/+38
| | | | | | | | This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
* Use syslog for logging error conditions in SSSDJakub Hrozek2009-09-212-38/+38
| | | | | This is just a band-aid until ELAPI is fully functional and ready to use.
* Complete the removal of "legacy" option.Simo Sorce2009-09-113-39/+44
| | | | | | | | | The code was still dependent on it for the ldap driver. Changed the driver code to depend on the schema type. Fix defaults for user and groups trees. ATM if you use the rfc2307bis schema you have to put users and groups in 2 separate trees (what people does by default anyway. If this limitation will turn to be too hard, we will change this later.
* Split database in multiple filesSimo Sorce2009-09-083-176/+663
| | | | | The special persistent local database retains the original name. All other backends now have their own cache-NAME.ldb file.
* Speed-up enumerations.Simo Sorce2009-08-282-2/+167
| | | | | | | This patch reduces the time needed to enumerate groups of a midsized domain from 12 seconds to 4.4 Optimizes enumerations by doing only 2 ldb searches and some ordering instead of a number of searches proportional to the number of groups
* Remove redunant function and always pass attrs.Simo Sorce2009-08-272-44/+15
|
* Upgrade database to 0.2Simo Sorce2009-08-272-5/+172
| | | | Provides also an upgrade function.
* Always save using member/memberOfSimo Sorce2009-08-274-216/+146
| | | | | First pass to remove the legacy option and make it just a property of the provider
* Add debug statements to sysdb_opsSimo Sorce2009-08-241-10/+111
|
* store additional LDAP attributesSumit Bose2009-08-212-1/+35
| | | | | If available the original DN and the user principle will be stored in sysdb.
* Ensure nextID doesn't reuse an existing local UID or GIDStephen Gallagher2009-08-201-9/+21
| | | | | | | | | If there was no maxID set for a domain, the search filter to check whether the UID was available would always return empty (because no UIDs can be <= 0) This patch changes the search filter if the maxID is unset so that it has no upper limit
* Do not fail enumerations because of range checksSimo Sorce2009-08-101-3/+3
|
* Consolidate tevent helpersJakub Hrozek2009-08-051-26/+0
|