summaryrefslogtreecommitdiffstats
path: root/server
Commit message (Collapse)AuthorAgeFilesLines
* Update version to 0.5.0sssd-0_5_0Stephen Gallagher2009-08-242-7/+477
| | | | Update gettext strings
* Do not fail enumerations if a single store failsSimo Sorce2009-08-241-40/+45
| | | | Try as hard as possible to store as much data as we can.
* Relax memberof constraints a bitSimo Sorce2009-08-241-85/+226
| | | | | | Allow to try to set members that do not actually exist. In that case simply remove them when we find out they are not real entries.
* Add debug statements to sysdb_opsSimo Sorce2009-08-241-10/+111
|
* some UPN handling fixesSumit Bose2009-08-247-28/+79
| | | | | | - making the realm part upper case is now optional and done in the LDAP backend - using a username@realm UPN is now optional
* Fix accidentally forcing MPGs on for all domainsStephen Gallagher2009-08-211-1/+1
|
* extended the documentation of LDAP backendSumit Bose2009-08-212-4/+211
| | | | | Added man pages sections about user and group attribute mapping. Added an example configuration to access an AD server.
* store additional LDAP attributesSumit Bose2009-08-213-5/+80
| | | | | If available the original DN and the user principle will be stored in sysdb.
* fix handling of filtersUsers in groupsSumit Bose2009-08-214-31/+56
| | | | | | | | - with the boolean option filterUsersInGroups it can be controlled wether filtered users appear in groups or not. - fixed an error which prevented the display of groups with filtered members - removed some tab indents
* Fix sysdb testsJakub Hrozek2009-08-211-17/+62
|
* Disallow all operations outside domains, fix deleting cache for filesJakub Hrozek2009-08-214-11/+41
| | | | | | | | | | One of the previous patches disallowed adding users and groups outside known domains but it was missing disallowing modifying, deleting, etc. Also don't error if there's no sysdb cache to delete after deleting legacy user/domain. Fixes: tickets #113,#114
* use stored upn if availableSumit Bose2009-08-211-20/+101
| | | | | | If a user principle name (upn) can be found in sysdb the krb5 backend will use this otherwise is build as username@realm. It is checked that the realm is upper case only.
* Ensure nextID doesn't reuse an existing local UID or GIDStephen Gallagher2009-08-201-9/+21
| | | | | | | | | If there was no maxID set for a domain, the search filter to check whether the UID was available would always return empty (because no UIDs can be <= 0) This patch changes the search filter if the maxID is unset so that it has no upper limit
* Support Docbook 4.4Stephen Gallagher2009-08-2010-20/+20
| | | | | RHEL5 did not support Docbook 4.5, and we are not using any 4.5 features.
* Support gettext >= 0.14 instead of 0.17Stephen Gallagher2009-08-202-2/+3
| | | | | | This is needed for support of RHEL5 Adding the assignment of $(localedir) was necessary, as gettext 0.14 does not include automatically assign it.
* Remove 'color-tests' from AM_INIT_AUTOMAKEStephen Gallagher2009-08-201-1/+1
| | | | This was breaking the build on RHEL5
* Fix usage of $(builddir) in SSSDStephen Gallagher2009-08-201-0/+4
| | | | | | There are some old versions of automake that do not define $(builddir) correctly. Since $(builddir) is "Rigorously equal to ‘.’', we'll set it at the top of the Makefile.am files.
* Make the LOCAL provider always use MagicPrivateGroupsStephen Gallagher2009-08-202-2/+9
| | | | Also updates the manpage for sssd.conf to denote this
* enable usage of defaultBindDnSumit Bose2009-08-196-9/+69
|
* Eliminate the --with-tests configure flagStephen Gallagher2009-08-193-32/+22
| | | | | | | | | | | --with-tests was confusing. Since we now build our tests only with 'make check', it doesn't make sense for this to be a configure- time option. We will detect during configure whether the 'check' package is available and we will use them if so. Otherwise, we will only build and execute any test suites that do not rely on the 'check' framework. We will print warning during 'configure' if CHECK is not installed
* added missing hash_create which was remove by a previous patchSumit Bose2009-08-181-5/+14
|
* fix return value of confdb_get_domainsSumit Bose2009-08-181-0/+1
| | | | | | If the last configured domain is broken confdb_get_domains returns the return value of confdb_get_domain even if there are valid domains available.
* Ensure that only one local domain is configuredStephen Gallagher2009-08-181-1/+32
|
* Fix broken buildStephen Gallagher2009-08-171-1/+0
| | | | Build broken in c0f3393d4ab923e2eedab0fad88a864e2aae9fc9
* Fix reconnection codeSimo Sorce2009-08-1717-282/+141
| | | | | | | Remove redundant reconnection code that was interfeering with the sbus reconnection code. Consolidate include files for sbus relates operations. Make pamsrv code similar to nsssrv code.
* Refactor responder_dp.cStephen Gallagher2009-08-144-117/+117
| | | | | | Many of the functions in responder_dp.c were originally NSS- specific and were moved there from the NSS responder code. Since they are now generic to any responder, rename them to sss_dp_*
* Don't go to the backend for identical cache entry requestsStephen Gallagher2009-08-143-55/+303
| | | | | | | | | Currently, if an additional request comes in for a cache entry while that same entry is already in the process of being refreshed, we start a duplicate cache update request. This patch adds allows the cache to maintain a hash table of all in-progress requests and queue up multiple callbacks for updates in progress. Once the data is returned, all of these callbacks will fire.
* Make "files" a reserved word for legacy local domainJakub Hrozek2009-08-134-4/+57
| | | | | | | | This patch introduces provider=files as a valid provider. Upon loading the backend, its properties in confdb are overwritten to those that represent legacy local domain. Also document this in sssd.conf(5) and example config
* Tools ID range fixesJakub Hrozek2009-08-133-4/+16
| | | | | | | | | The tools did not take the special case where id_max = 0 (no limit) into account. Also disallow adding users when ID is specified outside any domain. Resolves trac tickets #86 and #89
* Eliminate unnecessary explicit timeout for DP account requestsStephen Gallagher2009-08-121-33/+19
| | | | | | | D-BUS handles timeouts itself and reports DBUS_ERROR_NO_REPLY if a timeout fires, so we can rely on this instead of having an explicit timeout ourselves. Furthermore, the two timeouts present a potential race condition.
* Fix reversal of parent and member in groupmodSimo Sorce2009-08-121-8/+8
| | | | ticket #101
* Change the why DP clients identifySimo Sorce2009-08-1115-321/+340
| | | | Mirrors what we have done with the monitor.
* Prevent races between dp startup and othersSimo Sorce2009-08-111-16/+26
| | | | Simply delay anything other service by 1 second only at startup.
* Change services identification mechanismSimo Sorce2009-08-1111-507/+421
| | | | | | | Let services identify themselves voiluntarily as the first operation instead of polling from the monitor. Also consolidate some common functions and make them available as monitor helpers.
* Minor fixesSimo Sorce2009-08-112-7/+13
|
* Fix monitor ping timeoutStephen Gallagher2009-08-111-1/+4
| | | | | | | | | | | | Our configuration specifies the monitor config timeout as seconds, but we were passing it directly to dbus commands that require milliseconds. Fixing this in get_monitor_config(). Also, the default value of -1 for the timeout resulted in a timeout much too short to be useful, so I'm making it 10s instead. This fix solves the problem where a busy backend (for example, one that is enumerating a large number of LDAP entries) would fail to respond to the ping in time.
* Make child processes exit when parent diesJakub Hrozek2009-08-117-1/+70
| | | | | | | | The child processes call prctl() and when their parent process is killed, they are sent SIGTERM using prctl. This is currently Linux-specific, for non-Linuxes, a similar effect is achieved by catching a set of common termination signals and sending SIGTERM to the process group.
* Make socket paths a compile-time optionStephen Gallagher2009-08-116-5/+3
| | | | | | Previously, we had hardcoded the paths for the NSS, PAM and private PAM sockets to /var/lib/sss/pipes. With this patch, we will specify the sockets with --with-pipe-path.
* Do not fail enumerations because of range checksSimo Sorce2009-08-102-6/+18
|
* Revert build-breaking libsss_util_la change.Stephen Gallagher2009-08-101-9/+20
| | | | | | Moving the common utility sources into a libtool convenience library caused problems with symbols when loading the plugin libraries.
* Add configure checks for docbook XSL templates and XML toolsJakub Hrozek2009-08-102-3/+40
| | | | | | Changes the configure process so that configure errors out if lacks the tools necessary to build manual pages (like xsltproc). Also adds a check for required URI of the docbook XSL templates using the xmlcatalog tool.
* Build and run tests with 'make check'Stephen Gallagher2009-08-102-27/+11
| | | | | | | | | | | When --enable-tests is set by configure, the sysdb, stress and resolver tests will be built by 'make check', which will also then run the sysdb and resolver tests automatically. This patch also updates the server Makefile to create a libtool convenience library of the common source files to spare them being built separately for every library/executable that has different CFLAGS.
* Simplify interfaces initializationSimo Sorce2009-08-1024-417/+267
| | | | | | | Make as much as possible static, and remove use of talloc_reference and allocation/deallocation of memory when not necessary. Fix also responder use of rctx->conn, was mistakenly used for both monitor and dp connections.
* merge server and connection structuresSimo Sorce2009-08-1012-286/+228
| | | | | | This reduce code duplication as it allows to use one set of watch and timeout functions, and at the same time also allow not to use a secondary structure just to unify these functions.
* Cosmetic changesSimo Sorce2009-08-1016-375/+375
| | | | | Rationalize and rename connection names in preparatoin for merging of server and connection structures.
* Remove redundant memory contextsSimo Sorce2009-08-1014-134/+114
| | | | Simplify code by removing stuff that is never used or redundant.
* Refactor some code around watches and timeoutsSimo Sorce2009-08-104-355/+324
| | | | | | | | | | Watches and Timeouts are now unified under one implementation that covers both dbus server and connections. In watches do not keep removing and adding file events simply toggle the appropriate flags. Also streamline some memory management within both timeout and watch related functions, checking allocations and freeing the whole context not just the events.
* CleanupsSimo Sorce2009-08-102-189/+199
| | | | | Minor style cleanups, and some name consistency cleanups that make some names a bit more meaningful and/or shorter.
* Fix broken ifndefsSimo Sorce2009-08-051-9/+0
| | | | | | | | ifndef doesn't work for those functions that aren't already macro definitions in tevent.h like tevent_req_data. However if tevent_req_data is defined in tevent.h, all other functions are available as well. So just check for tevent_req_data and define all of them if it is not available. This should fix compiling on distros with the latsest tevent.
* Parse fully qualified names in toolsJakub Hrozek2009-08-058-88/+289
| | | | | | Allow adding users into different domains not only by specifying ID directly but also by specifying fully qualified name. Exit when both specifications are used in conflict.
generated by cgit (git 2.34.1) at 2024-04-26 13:07:11 +0000