summaryrefslogtreecommitdiffstats
path: root/server/providers
Commit message (Collapse)AuthorAgeFilesLines
* added kerberos backend with tevent_req event handlingSumit Bose2009-07-025-0/+845
|
* Remove redundant libPath option from proxy providerStephen Gallagher2009-06-301-3/+7
| | | | | The libPath should be constructed from the libName. There is no benefit to specifying it separately.
* Control sssd_be exported functionsStephen Gallagher2009-06-161-0/+4
|
* Remove extra implementation of password_destructorStephen Gallagher2009-06-111-11/+0
|
* Turn sssd_mem_takeover into sssd_mem_attachSimo Sorce2009-06-101-11/+0
| | | | | | | The old function was not used anywhere, and this function uses better semantics, including not using void ** which gives strict aliasing problems. Also add a generic password destroy function
* added tls_reqcert option for native LDAP backendSumit Bose2009-06-021-0/+32
| | | | | | | In order to allow to access LDAP servers which do not provide SSL/TLS encryption the option tls_reqcert is added to the native LDAP backend. It accepts the same arguments as the corresponding OpenLDAP option documented in ldap.conf(5) and should preform accordingly.
* Silence warningsSimo Sorce2009-05-263-10/+12
|
* call tevent_add_fd only onceSumit Bose2009-05-191-27/+11
|
* Implement approximate offline detection in proxySimo Sorce2009-05-181-5/+98
| | | | | This will blackout any request to the backend for 15 seconds, then will allow again to retry.
* Move actual password caching into sysdbSimo Sorce2009-05-182-17/+230
| | | | Convert auth modules to do the caching themselves
* Split ldap backend into auth and identity filesSimo Sorce2009-05-182-19/+798
|
* Move ldap_be.c into ldap/ldap_auth.cSimo Sorce2009-05-181-0/+0
|
* added check for NULL valuesSumit Bose2009-05-141-0/+7
| | | | | - allow unspecified value in struct pam_data to be NULL - check if domain structure is initialized in pam_reply
* Fixes for porting SSSD to Debian-based platformsStephen Gallagher2009-05-041-0/+1
|
* enable offline handling for native LDAP backendSumit Bose2009-04-281-4/+48
|
* handle pam acct_mgmt, setcred and open/close_session before user bind in ↵Sumit Bose2009-04-271-0/+17
| | | | ldap backend
* fix for pam proxy chauthtokSumit Bose2009-04-273-9/+21
| | | | | | | | | | When a user from a domain served by the proxy backend changes his password with passwd the passwd command asks for the old password, but it is not validated by the pam_chauthtok call in the proxy backend, because it is running as root. If the request is coming the unpriviledged socket we now call pam_authenticate explicitly before pam_chauthtok.
* Make reconnection to the Data Provider a global settingStephen Gallagher2009-04-141-2/+2
| | | | | | | Previously, every DP client was allowed to set its own "retries" option. This option was ambiguous, and useless. All DP clients will now use a global option set in the services config called "reconnection_retries"
* Fix a couple of segfaults and timeout checksSimo Sorce2009-04-131-18/+17
|
* Implement credentials caching in pam responder.Simo Sorce2009-04-134-2/+255
| | | | | | | Implement credentials caching in pam responder. Currently works only for the proxy backend. Also cleanup pam responder code and mode common code in data provider. (the data provider should never include responder private headers)
* Always pass full domain infoSimo Sorce2009-04-133-14/+23
| | | | | Change sysdb to always passwd sss_domain_info, not just the domain name. This way domain specific options can always be honored at the db level.
* Split modules types in Identity and AuthenticatorSimo Sorce2009-04-074-60/+222
| | | | | | | | | | | | | | The same module may implement both types, but initializatrion will be nonetheless performed separately, once for the identity module and once for the authenticator module. Also change the proxy module to retireve the pam target name from the domain configuration so that it is possibile to create per-domain pam stacks. With this modification it is actually possibile to use normal nss and pam modules to perform a successful authentication (tested only with sudo so far) Update exmples.
* Remove useless fileSimo Sorce2009-04-031-35/+0
| | | | This became obsolete when we moved all functions to sysdb.
* Do not use the ldap libraries ldap_ prefixSimo Sorce2009-04-021-76/+76
| | | | | | | The ldap_ prefix should be considered reserved namespace for ldap librraies Renaming all ldap_* internal stuff to sdap_, in some cases also move from ldap_be_ to sdap_ as the reason for _be_ was just clearly a name space conflict (ldap_be_init, etc..)
* Add way to use files as a proxy backend fro LOCALSimo Sorce2009-04-012-19/+65
| | | | | | | | | | | | Makes LOCAL a normal backend removing some special handling. Fix/Add id range filtering and name filtering Filters uid=0 and gid=0 in the proxy backend as 0 is invalid within sysdb and was causing getxxent calls to fail completely. Fix nss_ncache_check_xxx calls to avoid dirtying the 'ret' variable and causing some unwanted failures. Change sysdb to always return the uid number when searching member entries so that id range filtering can be perfomed also in group searhes (does not work with legacy backends)
* Do not file a sure segfault.Simo Sorce2009-04-011-0/+2
|
* Enhance server_setupSimo Sorce2009-03-202-3/+11
| | | | | | | Now it can load from scratch default configuration that is valid for all daemons. First thing, make it possible for each daemon/provider to set its own debug level in its configuration entry.
* Enable autoreconnection of Data Provider Backends to the Data ProviderStephen Gallagher2009-03-204-7/+124
|
* Remove references to FreeIPA from D-BUS interfacesStephen Gallagher2009-03-192-4/+4
| | | | | | Per discussion with the desktop team, using the org.freedesktop interface name will simplify adoption, as potential users won't feel like they're pulling in a FreeIPA dependency.
* use pam_data as main data structure for dbus communicationSumit Bose2009-03-195-108/+31
|
* minor fixes for the build processSumit Bose2009-03-061-0/+7
| | | | enable --without-tests
* Convert sync calls in sysdb to async, transaction dependent, calls.Simo Sorce2009-02-281-350/+610
|
* Rebase the code to use talloc, tdb, tevent, ldb as externalSimo Sorce2009-02-267-20/+24
| | | | | | dependencies based on the latest samba code. Convert all references to the old events library to use the renamed tevent library.
* added more ldap backend options and an example configurationSumit Bose2009-02-251-68/+92
| | | | Signed-off-by: Simo Sorce <ssorce@redhat.com>
* Add PAM responderSumit Bose2009-02-246-2/+1232
| | | | | | | Also move responders under server/responder with shared code in server/responder/common Signed-off-by: Simo Sorce <ssorce@redhat.com>
* Proper fix for memory handling problem.Simo Sorce2009-02-242-57/+79
| | | | | | | | | | sbus_message_handler is not responsible anymore for sending back data in any case. Transfer this responsibility to the handler function called. This way both synchronous and asynchronous funstions use the interface the same way and can properly free memory referenced by the reply after the send buffer has been filled in and all copies are done in sbus_conn_send_reply()
* Revert "Fixing serious memory allocation bug in sbus_message_handler."Simo Sorce2009-02-242-51/+66
| | | | | | | | | | | | | | | This reverts commit 13421cbe0af4343f9d110600755ffa756690b282. Conflicts: server/infopipe/infopipe.c server/infopipe/infopipe.h While this solution fixed the contingent memory problem it introduced other problems in handling asynchronous replies. Reverting in preparation for a different way to solve it. Conflicts have been taken care of.
* Fixing serious memory allocation bug in sbus_message_handler.Stephen Gallagher2009-02-232-66/+51
| | | | | | | | | | | | dbus_message_append_args() adds a reference to memory that is not copied to the outgoing message until dbus_connection_send() is called. Since we compile our reply messages in functions and then return the reply, we need a mechanism for deleting allocated memory after invoking dbus_connection_send. I have changed the arguments to sbus_msg_handler_fn so that it takes a talloc ctx containing the sbus_message_handler_ctx and a pointer to a reply object. We can now allocate memory as a child of the reply context and free it after calling dbus_connection_send.
* Completely rework the nss interface to be able to use 2Simo Sorce2009-02-202-31/+190
| | | | | | | | | | | | | | | | | | | | | | | | | types of domains: modern and legacy modern uses member/meberof, legacy uses memberUid for group memberships. Rework the proxy backend to use the legacy style as that's the format the data comes in (trying to convert would require too many transformations and increased the number of queries). Add support for fetching groups in nss. Add support for enumerating users and groups (requires to enable enumeration in config) both in nss and in the proxy provider. Remove confdb_get_domain_basedn() and substitute with generic calls in the nss init function. Store a domain structure in the btree not the basedn so that we can add enumeration flags. Also make sure NSS understand how to make multiple calls on enumerations, also make passing the domian parameter always mandatory, passing in domain=* is not valid anymore. This work fixes also a few memory, degfault, and logic bugs found while testing all nss functions (there are still some to fix that are less critical and much harder to find yet).
* Make backend requests asyncSimo Sorce2009-02-134-72/+599
|
* Always pass teh database path explicitly, so that test cases can useSimo Sorce2009-02-131-1/+1
| | | | | throw away databases Check version and init main db if empty
* Remove dp_cli_sbus_initSimo Sorce2009-02-123-128/+5
|
* - make all functions supposed to get input in posix formatSimo Sorce2009-02-121-12/+12
| | | | | | | | use the same namespace (sysdb_posix_) - no need to explicitly start a transaction if only one operation is performed using a synchronous interface - split _add_remove_ functions into separate functions, don't let ldap madness creep into out interfaces
* Refactoring the monitor code and SBUS utility functions.Stephen Gallagher2009-01-276-20/+247
|
* Add code to make it easier to reconnect in case the serverSimo Sorce2009-01-143-15/+15
| | | | | is not available immediately or drops the dbus connection. First step is the nss connection to the data provider.
* Fix return, dbus would abort because we were passing values andSimo Sorce2009-01-131-3/+3
| | | | | not pointers to values. Check domain is never null (or dbus will abort).
* Add placeholders for new configuration reload methods. The monitor will be ↵Stephen Gallagher2009-01-121-0/+12
| | | | able to call the reloadConfig DBUS method on any or all of its children to force them to reread their configuration from the confdb.
* Regroup database rleated functions under db andSimo Sorce2009-01-125-475/+11
| | | | rename everything with the sysdb suffix.
* Use a unified base (temp. dc=sssd), for all domain including LOCAL.Simo Sorce2009-01-111-27/+28
| | | | | | | It makes no sense to have internal attribute names user configurable, remove that option and use macros internally. Also now always pass the domain name to all nss_ldb_* calls.
* Add support for getpwuid in proxy backendSimo Sorce2009-01-113-25/+160
|
generated by cgit (git 2.34.1) at 2024-05-22 00:24:36 +0000