summaryrefslogtreecommitdiffstats
path: root/server/providers
Commit message (Collapse)AuthorAgeFilesLines
* Avoid crash when timestamp is NULLRalf Haferkamp2009-09-031-1/+3
| | | | | Check if the timestamp argument of sdap_save_group_recv is NULL before using it.
* Fix initgroups search filter when using rfc2307bisRalf Haferkamp2009-09-031-2/+2
| | | | | sdap_get_initgr_process() was using the wrong sdap_id_map struct when creating the searchfilter for the initgroups() call.
* Fix proxy enumerationSimo Sorce2009-09-031-86/+123
| | | | New tevent library finally outlawed nested loops.
* Honor enumerate option in ldap_idSimo Sorce2009-09-021-6/+9
| | | | | If enumerations are disabled for this domain, then do not start the enumeration task.
* remove the concept of a backend nameSumit Bose2009-09-023-29/+39
| | | | | | | | | | | The data provider backends stored a name value besides the domain name to identify themselves to the data provider. This was the name of the id provider. Currently the backends can have different providers for id, authentication etc. So the name may be missleading. Also when there are more domains with the same id provider the name is not enough to identify the backend but the domain name is. As a consequence the backend name is removed completely and only the domain name is used for identification.
* check if gid attribute is emptySumit Bose2009-08-281-0/+6
|
* send SSSD_REALM and SSSD_KDCIP environment to the clientSumit Bose2009-08-281-2/+31
| | | | | | Currently the kerberos locator plugin needs these two variables to be set to find a KDC which is configured in sssd but not in /etc/krb5.conf.
* fix internal order of ldap user mapping optionsSumit Bose2009-08-281-4/+4
|
* Make enumeration an independent taskSimo Sorce2009-08-275-68/+693
| | | | | | Always immediately return to DP, and update users/groups in the background. Also implements an optimization to retrieve only changed/new users/groups by filtering using the modifyTimestamp after the first query.
* Remove redunant function and always pass attrs.Simo Sorce2009-08-271-8/+12
|
* Always save using member/memberOfSimo Sorce2009-08-271-0/+5
| | | | | First pass to remove the legacy option and make it just a property of the provider
* Initial support for multiple schema typesSimo Sorce2009-08-271-7/+39
|
* Use the correct structure.Simo Sorce2009-08-271-2/+2
|
* Do not fail enumerations if a single store failsSimo Sorce2009-08-241-40/+45
| | | | Try as hard as possible to store as much data as we can.
* some UPN handling fixesSumit Bose2009-08-245-28/+49
| | | | | | - making the realm part upper case is now optional and done in the LDAP backend - using a username@realm UPN is now optional
* store additional LDAP attributesSumit Bose2009-08-211-4/+45
| | | | | If available the original DN and the user principle will be stored in sysdb.
* use stored upn if availableSumit Bose2009-08-211-20/+101
| | | | | | If a user principle name (upn) can be found in sysdb the krb5 backend will use this otherwise is build as username@realm. It is checked that the realm is upper case only.
* enable usage of defaultBindDnSumit Bose2009-08-195-9/+48
|
* Fix reconnection codeSimo Sorce2009-08-175-37/+15
| | | | | | | Remove redundant reconnection code that was interfeering with the sbus reconnection code. Consolidate include files for sbus relates operations. Make pamsrv code similar to nsssrv code.
* Make "files" a reserved word for legacy local domainJakub Hrozek2009-08-131-0/+43
| | | | | | | | This patch introduces provider=files as a valid provider. Upon loading the backend, its properties in confdb are overwritten to those that represent legacy local domain. Also document this in sssd.conf(5) and example config
* Change the why DP clients identifySimo Sorce2009-08-115-177/+271
| | | | Mirrors what we have done with the monitor.
* Change services identification mechanismSimo Sorce2009-08-112-156/+22
| | | | | | | Let services identify themselves voiluntarily as the first operation instead of polling from the monitor. Also consolidate some common functions and make them available as monitor helpers.
* Make child processes exit when parent diesJakub Hrozek2009-08-112-0/+12
| | | | | | | | The child processes call prctl() and when their parent process is killed, they are sent SIGTERM using prctl. This is currently Linux-specific, for non-Linuxes, a similar effect is achieved by catching a set of common termination signals and sending SIGTERM to the process group.
* Make socket paths a compile-time optionStephen Gallagher2009-08-113-3/+0
| | | | | | Previously, we had hardcoded the paths for the NSS, PAM and private PAM sockets to /var/lib/sss/pipes. With this patch, we will specify the sockets with --with-pipe-path.
* Do not fail enumerations because of range checksSimo Sorce2009-08-101-3/+15
|
* Simplify interfaces initializationSimo Sorce2009-08-105-130/+51
| | | | | | | Make as much as possible static, and remove use of talloc_reference and allocation/deallocation of memory when not necessary. Fix also responder use of rctx->conn, was mistakenly used for both monitor and dp connections.
* merge server and connection structuresSimo Sorce2009-08-102-25/+9
| | | | | | This reduce code duplication as it allows to use one set of watch and timeout functions, and at the same time also allow not to use a secondary structure just to unify these functions.
* Cosmetic changesSimo Sorce2009-08-103-105/+105
| | | | | Rationalize and rename connection names in preparatoin for merging of server and connection structures.
* Remove redundant memory contextsSimo Sorce2009-08-103-34/+45
| | | | Simplify code by removing stuff that is never used or redundant.
* Consolidate tevent helpersJakub Hrozek2009-08-052-33/+0
|
* Fix race condition in sdap codeSimo Sorce2009-08-042-83/+172
| | | | | | | Retrieving ldap results and storing users could sometimes results in race conditions where the final ldap result was retrieved before the store operations where finished resulting in the operations to be aborted before termination. Implement a serialization mechanism per operation.
* Fix search replies getting ignoredSimo Sorce2009-08-031-14/+12
|
* Add ignore_not_found parameter to sysdb delete functionsJakub Hrozek2009-07-311-6/+9
| | | | Also add tests
* Fix race condition that was causing segfaultsSimo Sorce2009-07-241-80/+136
| | | | | | | | The sdap_handle might be freed when processing a message. Rearrange data flow so that the sdap_handle is never used after a message is processed but a new event (dependent on the handle) is instead scheduled. If the sdap_handle is freed, the scheduled event is also removed and not fired
* added LDAP change password backend targetSumit Bose2009-07-214-4/+307
|
* add handling of the new backend targets to proxy backendSumit Bose2009-07-211-0/+30
|
* Rework the engine that deals with openldap librariesSimo Sorce2009-07-203-497/+403
| | | | | | | The way openldap libraries work, require to have a single engine per connection as all replies are read at the same time. So we need to always read anything that comes in from the wire and then loop to dispatch results to the requests that are waiting.
* Implement resInit for monitor, NSS, PAM, DP and the backendsStephen Gallagher2009-07-202-0/+38
|
* add infrastructure to handle new backend targetsSumit Bose2009-07-206-150/+228
|
* let krb5 backend safe valid credentials for offline authenticationSumit Bose2009-07-101-0/+43
|
* fixed the default value for tls_reqcertSumit Bose2009-07-101-1/+1
|
* Implement the ldap identity module.Simo Sorce2009-07-085-709/+1173
| | | | This uses and exapands the async helpers.
* Unify password caching ops in sysdbSimo Sorce2009-07-084-260/+49
|
* Use async helpers for ldap auth moduleSimo Sorce2009-07-081-722/+314
| | | | | | This changes the style quite a lot, but the tevent_req style is much more clear and much less error-prone than the giant loop we had previously.
* Add async helper functionsSimo Sorce2009-07-084-0/+2035
| | | | | | These functions use the tevent_req async model, where a pair of _send/_recv functions pilot requests, with additional helpers like _done functions, and where needed multiple stage helpers.
* fix return code of krb5 child to indicate that the kdc is unavailableSumit Bose2009-07-081-1/+5
|
* fixed some typos which prevented password cachingSumit Bose2009-07-081-3/+5
|
* Cleanup warnings in client and server codeSimo Sorce2009-07-031-3/+0
|
* Convert proxy internals to tevent_req styleSimo Sorce2009-07-031-865/+1438
|
* Rework transaction code to use tevent_reqSimo Sorce2009-07-032-247/+556
| | | | | | This is part of a set of patches to rewrite sysdb to a hopefully better API, that will also let use use tevent_req async style calls to manipulate our cache.
generated by cgit (git 2.34.1) at 2024-06-20 22:46:04 +0000