summaryrefslogtreecommitdiffstats
path: root/server/nss/nsssrv.c
Commit message (Collapse)AuthorAgeFilesLines
* Add PAM responderSumit Bose2009-02-241-589/+0
| | | | | | | Also move responders under server/responder with shared code in server/responder/common Signed-off-by: Simo Sorce <ssorce@redhat.com>
* Proper fix for memory handling problem.Simo Sorce2009-02-241-9/+22
| | | | | | | | | | sbus_message_handler is not responsible anymore for sending back data in any case. Transfer this responsibility to the handler function called. This way both synchronous and asynchronous funstions use the interface the same way and can properly free memory referenced by the reply after the send buffer has been filled in and all copies are done in sbus_conn_send_reply()
* Revert "Fixing serious memory allocation bug in sbus_message_handler."Simo Sorce2009-02-241-12/+16
| | | | | | | | | | | | | | | This reverts commit 13421cbe0af4343f9d110600755ffa756690b282. Conflicts: server/infopipe/infopipe.c server/infopipe/infopipe.h While this solution fixed the contingent memory problem it introduced other problems in handling asynchronous replies. Reverting in preparation for a different way to solve it. Conflicts have been taken care of.
* Fixing serious memory allocation bug in sbus_message_handler.Stephen Gallagher2009-02-231-16/+12
| | | | | | | | | | | | dbus_message_append_args() adds a reference to memory that is not copied to the outgoing message until dbus_connection_send() is called. Since we compile our reply messages in functions and then return the reply, we need a mechanism for deleting allocated memory after invoking dbus_connection_send. I have changed the arguments to sbus_msg_handler_fn so that it takes a talloc ctx containing the sbus_message_handler_ctx and a pointer to a reply object. We can now allocate memory as a child of the reply context and free it after calling dbus_connection_send.
* Completely rework the nss interface to be able to use 2Simo Sorce2009-02-201-7/+53
| | | | | | | | | | | | | | | | | | | | | | | | | types of domains: modern and legacy modern uses member/meberof, legacy uses memberUid for group memberships. Rework the proxy backend to use the legacy style as that's the format the data comes in (trying to convert would require too many transformations and increased the number of queries). Add support for fetching groups in nss. Add support for enumerating users and groups (requires to enable enumeration in config) both in nss and in the proxy provider. Remove confdb_get_domain_basedn() and substitute with generic calls in the nss init function. Store a domain structure in the btree not the basedn so that we can add enumeration flags. Also make sure NSS understand how to make multiple calls on enumerations, also make passing the domian parameter always mandatory, passing in domain=* is not valid anymore. This work fixes also a few memory, degfault, and logic bugs found while testing all nss functions (there are still some to fix that are less critical and much harder to find yet).
* Enhancements and bugfixes to util/btreemap.c 1) Remove useless and unused ↵Stephen Gallagher2009-02-161-4/+4
| | | | btreemap_new() 2) Fix potentially serious memory allocation error. btreemap now requires a TALLOC_CTX to be passed in for assignment to the top node of the tree. Previously it was creating a new root TALLOC_CTX 3) Add new function btreemap_get_keys that will return a sorted array (newly allocated using talloc_realloc()) of keys (const void *) 4) Change the btreemap to use (const void *) keys instead of (void *)
* Always pass teh database path explicitly, so that test cases can useSimo Sorce2009-02-131-1/+1
| | | | | throw away databases Check version and init main db if empty
* Refactoring the monitor code and SBUS utility functions.Stephen Gallagher2009-01-271-7/+26
|
* Add checks to make sure we are getting a user from the correct domain.Simo Sorce2009-01-121-1/+12
|
* Add placeholders for new configuration reload methods. The monitor will be ↵Stephen Gallagher2009-01-121-0/+12
| | | | able to call the reloadConfig DBUS method on any or all of its children to force them to reread their configuration from the confdb.
* Regroup database rleated functions under db andSimo Sorce2009-01-121-3/+2
| | | | rename everything with the sysdb suffix.
* Add caching behavior to nsssrv_cmd.c check cache first andSimo Sorce2009-01-111-0/+2
| | | | dispatch to backends only if we have a cache miss.
* Lots of little nasty bugs fixed.Simo Sorce2009-01-091-2/+12
| | | | | | | I was finally able to get a getpwnam() request go through sssd, hit the remote ldap server and get the answer back with 'getent passwd foo' Yupiee!
* The code now successfully sends a getpwnam request to a remote LDAP server,Simo Sorce2009-01-081-2/+9
| | | | | | and caches the result in LDAP. Still chasing a bug that does not let NSS known that the BE was successful. This makes NSS timeout the client and not return any results yet.
* Check size of incoming packets.Simo Sorce2009-01-071-1/+2
| | | | This should fix a buffer overflow waiting to be exploited :/
* Add initial support to connect nss to the data provider as a frontendSimo Sorce2009-01-061-0/+7
|
* Change cli_ctx to include nss_ctx, not just select members of it.Simo Sorce2009-01-061-1/+1
|
* Adding a parameter to the sbus_service_sbus_init function to allow passing ↵Stephen Gallagher2008-12-151-1/+1
| | | | in an sbus_conn_destructor_fn to the sbus_new_connection() function. Fixing minor warning about the usage of talloc_reference.
* Change data provider into a hub, where backends (ldap, nis, ipa providers)Simo Sorce2008-12-081-8/+7
| | | | and frontends (pam, nss, ... modules) can connect to.
* Make a binary out of each major sssd component instead ofSimo Sorce2008-11-251-0/+43
| | | | using the same binary to fork off all services.
* Remove the service stuff that we stopped using when we moved toSimo Sorce2008-11-251-1/+0
| | | | the forl/exec model
* point PIPE_PATH at /var/lib/sss/pipes, not just the private path so that theSimo Sorce2008-11-241-1/+11
| | | | same config option can be used for the nss service
* Fix indentationSimo Sorce2008-11-241-9/+9
|
* Created a helper function sssd_service_sbus_init() to simplify creating the ↵Stephen Gallagher2008-11-201-44/+13
| | | | initial connection to the monitor service within the child services. It will create the D-BUS connection to the monitor and configure the service to handle the mandatory getIdentity and ping methods.
* Remove unused code and fix message handlers in dpSimo Sorce2008-11-201-25/+10
|
* Start conversion from a fork() and live to a fork()/exec() model.Simo Sorce2008-11-201-23/+19
| | | | | To start the dameon now you need to pass the option -s monitor Still have some problems communicating with children.
* Move definition into the header fileSimo Sorce2008-11-191-0/+1
|
* The default message handler will now pass both the method_ctx and theStephen Gallagher2008-11-171-0/+1
| | | | | | | sbus_conn_ctx to all message handling functions. This will allow connection-specific data to be passed in by taking advantage of the sbus_conn_set_private_data() function on the sbus_conn_ctx struct. Presently this private data is global to all methods of the connection context.
* Store all domains served by the SSSD to a binary-tree map for fast NSS lookup.Stephen Gallagher2008-11-071-2/+56
| | | | | | Changed the "section" feature of confdb.c to use '/' as a delimiter instead of '.', because this conflicted with the ability to use dots in domain names.
* Add the ping funtion to the nss service Make the monitor task ping ↵Simo Sorce2008-11-041-0/+17
| | | | connecting services Make it possible to configure timeouts and service ping times.
* Add support for dbus comunication in the nss serviceSimo Sorce2008-11-031-31/+130
| | | | | Add utility function in confdb Make all component fetch the dbus socket from the confdb
* Make return the pid when new process are started.Simo Sorce2008-10-211-6/+32
| | | | | | | | Monitor each service and restart it conditionally if it fails. These monitoring is extremely simple at this moment and just uses waitpid() to check if the client is alive, there is no active probing, that will require dbus. Make nsssrv.c read the sss pipe config option for the config db.
* Add configuration database functions.Simo Sorce2008-10-201-2/+10
| | | | Convert nss responder to use the confdb
* Use classic errno instead of inventing our own, it's broad enough fro atm.Simo Sorce2008-10-091-7/+7
|
* First retrieval of a user (getpwnam only) from an actual ldb fileSimo Sorce2008-10-081-3/+12
|
* Add primitive debugging capabilities.Simo Sorce2008-10-071-2/+5
| | | | | So far debug goes to stderr so sssd need to be run int interactive mode (-i option)
* First working daemon that responds only to a getpwnam() request with fake dataSimo Sorce2008-10-061-56/+47
|
* Add initial nss responder skeletonSimo Sorce2008-10-041-0/+252