summaryrefslogtreecommitdiffstats
path: root/server/responder/pam/pam_LOCAL_domain.c
Commit message (Collapse)AuthorAgeFilesLines
* Added option to use libcrypto instead of NSS.George McCollister2010-02-051-1/+1
| | | | | | | | | | | | crypto_sha512crypt.c is a clone of nss_sha512crypt.c with the exception that all usage of NSS and related libraries has been switched to libcrypto. I renamed nss_sha512crypt.h to sha512crypt.h since it is common to both crypto_sha512crypt.c and nss_sha512crypt.c. Note that the random number generator is not seeded manually and thus relies on seeding done automatically by libcrypto. On some systems without /dev/urandom seeding may not be performed. See http://www.openssl.org/docs/crypto/RAND_add.html. Signed-off-by: George McCollister <georgem@novatech-llc.com>
* Add offline failed login counterSumit Bose2010-02-021-6/+7
|
* Add sysdb request to authenticate against a cached passwordSumit Bose2010-01-201-23/+8
| | | | | | | | | The code for authentication against a cached password is moved from the pam responder to a generic sysdb tevent request. The new code can be used by other components of sssd to verify passwords on their own. Tests for the sysdb_cache_password and sysdb_cache_auth request are added and some unneeded or unused code and variables are removed.
* Fix broken password changes for local usersStephen Gallagher2009-12-181-1/+6
|
* Revert "Use syslog for logging error conditions in SSSD"Stephen Gallagher2009-09-231-1/+1
| | | | | | | | This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
* Use syslog for logging error conditions in SSSDJakub Hrozek2009-09-211-1/+1
| | | | | This is just a band-aid until ELAPI is fully functional and ready to use.
* Split database in multiple filesSimo Sorce2009-09-081-1/+7
| | | | | The special persistent local database retains the original name. All other backends now have their own cache-NAME.ldb file.
* Address CVE-2009-2410Stephen Gallagher2009-07-291-1/+1
| | | | Fix incorrect error code return in local_handler_callback
* Rework transaction code to use tevent_reqSimo Sorce2009-07-031-31/+84
| | | | | | This is part of a set of patches to rewrite sysdb to a hopefully better API, that will also let use use tevent_req async style calls to manipulate our cache.
* Rename sysdb_req to sysdb_handle.Simo Sorce2009-07-031-6/+6
| | | | | | | | | This sysdb_req has always really been a transaction handle and not a request. This is part of a set of patches to rewrite transaction support in sysdb to a hopefully better API, that will also let use use tevent_req async style to manipulate our cache.
* Move actual password caching into sysdbSimo Sorce2009-05-181-1/+1
| | | | Convert auth modules to do the caching themselves
* Prevent accepting blank passwordsSimo Sorce2009-05-181-0/+7
|
* Fix crypt functions to not use static buffers.Simo Sorce2009-05-181-9/+9
| | | | Also fix style, clarify, and simplify some logic.
* Fix a couple of segfaults and timeout checksSimo Sorce2009-04-131-1/+1
|
* Implement credentials caching in pam responder.Simo Sorce2009-04-131-67/+86
| | | | | | | Implement credentials caching in pam responder. Currently works only for the proxy backend. Also cleanup pam responder code and mode common code in data provider. (the data provider should never include responder private headers)
* Always pass full domain infoSimo Sorce2009-04-131-1/+1
| | | | | Change sysdb to always passwd sss_domain_info, not just the domain name. This way domain specific options can always be honored at the db level.
* Change the way we retrieve domainsSimo Sorce2009-04-081-3/+2
| | | | | | | | | | | | | To be able to correctly filter out duplicate names when multiple non-fully qualified domains are in use we need to be able to specify the domains order. This is now accomplished by the configuration paramets 'domains' in the config/domains entry. 'domains' is a comma separated list of domain names. This paramter allows also to have disbaled domains in the configuration without requiring to completely delete them. The domains list is now kept in a linked list of sss_domain_info objects. The first domain is also the "default" domain.
* Refactor nss_ctx to resp_ctx in respondersStephen Gallagher2009-03-261-2/+2
|
* added generic PAM return messages and a false login delaySumit Bose2009-03-101-45/+11
|
* Always pass sss_domain_info to sysdb functions.Simo Sorce2009-03-091-3/+3
|
* Do not duplicate attribute names macros.Simo Sorce2009-03-091-2/+2
| | | | Also shorten names oh other user attributes.
* Remove _PW_ and _GR_ from SYSDB_ definesSimo Sorce2009-03-051-7/+7
| | | | Also unify SYSDB_PW_NAME and SYSDB_GR_NAME in SYSDB_NAME and make it "name"
* added password reset by rootSumit Bose2009-03-051-0/+5
|
* Simplify some aspects of pam_LOCAL_domainSimo Sorce2009-03-041-136/+82
| | | | | | | | | | Use only one context (the local request) for all functions. Use new helper function in sysdb to set numbers as sysdb_attrs values. Do not use pam_status to report internal errors, use an error variable and check it only when we finally reply. Use sysdb_error_to_errno() to convert and ldb error to errno. Do not free every single buffer allocated, they are all appended to the local request and will be automatically freed once the request is finished.
* replaced pure ldb calls with sysdb callsSumit Bose2009-03-031-117/+306
|
* first version of LOCAL pam backendSumit Bose2009-03-021-0/+295
generated by cgit (git 2.34.1) at 2024-05-25 11:33:34 +0000