summaryrefslogtreecommitdiffstats
path: root/server/responder/pam/pam_LOCAL_domain.c
Commit message (Collapse)AuthorAgeFilesLines
* Address CVE-2009-2410Stephen Gallagher2009-07-291-1/+1
| | | | Fix incorrect error code return in local_handler_callback
* Rework transaction code to use tevent_reqSimo Sorce2009-07-031-31/+84
| | | | | | This is part of a set of patches to rewrite sysdb to a hopefully better API, that will also let use use tevent_req async style calls to manipulate our cache.
* Rename sysdb_req to sysdb_handle.Simo Sorce2009-07-031-6/+6
| | | | | | | | | This sysdb_req has always really been a transaction handle and not a request. This is part of a set of patches to rewrite transaction support in sysdb to a hopefully better API, that will also let use use tevent_req async style to manipulate our cache.
* Move actual password caching into sysdbSimo Sorce2009-05-181-1/+1
| | | | Convert auth modules to do the caching themselves
* Prevent accepting blank passwordsSimo Sorce2009-05-181-0/+7
|
* Fix crypt functions to not use static buffers.Simo Sorce2009-05-181-9/+9
| | | | Also fix style, clarify, and simplify some logic.
* Fix a couple of segfaults and timeout checksSimo Sorce2009-04-131-1/+1
|
* Implement credentials caching in pam responder.Simo Sorce2009-04-131-67/+86
| | | | | | | Implement credentials caching in pam responder. Currently works only for the proxy backend. Also cleanup pam responder code and mode common code in data provider. (the data provider should never include responder private headers)
* Always pass full domain infoSimo Sorce2009-04-131-1/+1
| | | | | Change sysdb to always passwd sss_domain_info, not just the domain name. This way domain specific options can always be honored at the db level.
* Change the way we retrieve domainsSimo Sorce2009-04-081-3/+2
| | | | | | | | | | | | | To be able to correctly filter out duplicate names when multiple non-fully qualified domains are in use we need to be able to specify the domains order. This is now accomplished by the configuration paramets 'domains' in the config/domains entry. 'domains' is a comma separated list of domain names. This paramter allows also to have disbaled domains in the configuration without requiring to completely delete them. The domains list is now kept in a linked list of sss_domain_info objects. The first domain is also the "default" domain.
* Refactor nss_ctx to resp_ctx in respondersStephen Gallagher2009-03-261-2/+2
|
* added generic PAM return messages and a false login delaySumit Bose2009-03-101-45/+11
|
* Always pass sss_domain_info to sysdb functions.Simo Sorce2009-03-091-3/+3
|
* Do not duplicate attribute names macros.Simo Sorce2009-03-091-2/+2
| | | | Also shorten names oh other user attributes.
* Remove _PW_ and _GR_ from SYSDB_ definesSimo Sorce2009-03-051-7/+7
| | | | Also unify SYSDB_PW_NAME and SYSDB_GR_NAME in SYSDB_NAME and make it "name"
* added password reset by rootSumit Bose2009-03-051-0/+5
|
* Simplify some aspects of pam_LOCAL_domainSimo Sorce2009-03-041-136/+82
| | | | | | | | | | Use only one context (the local request) for all functions. Use new helper function in sysdb to set numbers as sysdb_attrs values. Do not use pam_status to report internal errors, use an error variable and check it only when we finally reply. Use sysdb_error_to_errno() to convert and ldb error to errno. Do not free every single buffer allocated, they are all appended to the local request and will be automatically freed once the request is finished.
* replaced pure ldb calls with sysdb callsSumit Bose2009-03-031-117/+306
|
* first version of LOCAL pam backendSumit Bose2009-03-021-0/+295