summaryrefslogtreecommitdiffstats
path: root/server
Commit message (Collapse)AuthorAgeFilesLines
...
* Exit if the sssd is launched as a user other than rootStephen Gallagher2009-09-111-0/+9
|
* Print error message when connection to the config db failsStephen Gallagher2009-09-111-0/+2
|
* use fork+exec for kerberos helperSumit Bose2009-09-115-195/+477
|
* add change password target to krb5 backendSumit Bose2009-09-116-209/+464
|
* Update documentation and examplesSimo Sorce2009-09-113-18/+31
| | | | | | | Remove the "legacy" option from examples and man pages. Legacy is is finally R.I.P Add docs for ldapSchema in sssd-ldap man page.
* Complete the removal of "legacy" option.Simo Sorce2009-09-1110-76/+243
| | | | | | | | | The code was still dependent on it for the ldap driver. Changed the driver code to depend on the schema type. Fix defaults for user and groups trees. ATM if you use the rfc2307bis schema you have to put users and groups in 2 separate trees (what people does by default anyway. If this limitation will turn to be too hard, we will change this later.
* Fix getgrnam and getgrgid callsSimo Sorce2009-09-111-7/+9
| | | | | The patch that added check_cache() broke them, no results returned for any group with actual members ...
* Add strtoint32 and strtouint32 testsStephen Gallagher2009-09-112-0/+465
|
* Add 'make tests' targetStephen Gallagher2009-09-111-0/+2
|
* Fix ldap enumeration async taskSimo Sorce2009-09-111-12/+16
| | | | | | | | | The request was being freed, instead of marking it done and let the callback free it when done. This was causing us to access freed memory, when trying to set the next run. Let the callback add new runs and free the request instead as normally we would do with any other tevent_req async call. Courtesy of valgrind again.
* Fix memory mishandling.Simo Sorce2009-09-111-10/+7
| | | | | | | | By attaching the reply to a subreq, we ended up freeing the operations list element before we used it to skip to the next one. Do not steal the context and let the unlocking code free the old reply, when it moves onto processing the next one. Got this one with valgrind.
* Fix first-time confdb generationStephen Gallagher2009-09-111-1/+1
| | | | We were talloc_free()-ing the cdb_file string too early.
* Add copyright noticesJakub Hrozek2009-09-1114-0/+288
| | | | Fixes: #138
* Small changes to the example config and manpageJakub Hrozek2009-09-112-18/+29
| | | | | | | | | Remove magicPrivateGroups since it's set automatically, use bool values for enumerate. Also add a notice about krb5 auth-module with a link to specialized manpage to sssd.conf(5) similar to what we have for ldap auth-module. Move both outside proxy domain description.
* Read the configuration parsing before daemonizationStephen Gallagher2009-09-102-83/+106
| | | | | | | We will now parse the config file and validate the confdb contents before processing the rest of the monitor startup. This will allow us to return an appropriate error code to the shell if the configuration is invalid.
* Remove unused event context argument from confdb_initStephen Gallagher2009-09-106-7/+5
| | | | | | Because the confdb always operates synchronously, it maintains its own private event context internally. The event context argument passed to it is never used, so we'll remove it to avoid confusion.
* Properly detect negative/invalid values for the minId and maxIdStephen Gallagher2009-09-101-6/+53
|
* Add strtoint32 and strtouint32 convenience functionsStephen Gallagher2009-09-105-0/+144
|
* Fix Ldap id backend offline codeSimo Sorce2009-09-102-14/+83
| | | | | | | After the recent changes we lost the capability to actually go offline. Put back code that would mark the backend as offline when timeouts happen. Make sure the enumeration code also obbeys the offline timeout, and contributes in determining if we are offline or not.
* Update manpage to reflect new syntax for enumerateStephen Gallagher2009-09-101-12/+6
|
* Check for valid min and max IDs in confdb_get_domainsStephen Gallagher2009-09-101-1/+7
|
* Add support for the EntryCacheNoWaitRefreshTimeoutStephen Gallagher2009-09-095-2/+75
| | | | | | | | This timeout specifies the lifetime of a cache entry before it is updated out-of-band. When this timeout is hit, the request will still complete from cache, but the SSSD will also go and update the cached entry in the background to extend the life of the cache entry and reduce the wait time of a future request.
* Consolidate cache lookups in the NSSStephen Gallagher2009-09-091-177/+93
| | | | | | getpwnam, getpwuid, getgrnam and getgrgid will now use a common function, check_cache, for determining whether to return a cached value or to go to the provider.
* Cleanups for library linkingsbose2009-09-091-2/+1
| | | | | - remove unused PAM_LIBS from LDAP and Kerberos provider - add OPENLDAP_LIBS to LDAP provider
* more fixes for older libpcre versionssbose2009-09-092-3/+10
| | | | | - older version of libpcre only support the Python syntax (?P<name>) for named subpatterns
* Remove shadow-utils support from toolsJakub Hrozek2009-09-088-763/+73
| | | | | Removes the ability to proxy to shadow-utils. Also remove all the supporting functions for getting domain type, domain by id etc.
* Tools are allowed to touch only the 'local' domainSimo Sorce2009-09-088-76/+35
|
* Split database in multiple filesSimo Sorce2009-09-0826-335/+1184
| | | | | The special persistent local database retains the original name. All other backends now have their own cache-NAME.ldb file.
* Fix two possible uninitialized valuesSimo Sorce2009-09-082-4/+5
| | | | Make counter for used messages explicit.
* initialize sockaddr_in structureSumit Bose2009-09-081-0/+10
|
* fix libdbus configure checkSumit Bose2009-09-082-1/+2
| | | | | - remove unneeded CFLAGS component - do not leak LDFLAGS used by configure check to final Makefile
* configure cleanupsSumit Bose2009-09-034-4/+6
| | | | | - replaced mailing list address - let sssd base components read version from VERSION
* Avoid crash when timestamp is NULLRalf Haferkamp2009-09-031-1/+3
| | | | | Check if the timestamp argument of sdap_save_group_recv is NULL before using it.
* Fix initgroups search filter when using rfc2307bisRalf Haferkamp2009-09-031-2/+2
| | | | | sdap_get_initgr_process() was using the wrong sdap_id_map struct when creating the searchfilter for the initgroups() call.
* Fix proxy enumerationSimo Sorce2009-09-031-86/+123
| | | | New tevent library finally outlawed nested loops.
* Honor enumerate option in ldap_idSimo Sorce2009-09-021-6/+9
| | | | | If enumerations are disabled for this domain, then do not start the enumeration task.
* remove the concept of a backend nameSumit Bose2009-09-024-31/+41
| | | | | | | | | | | The data provider backends stored a name value besides the domain name to identify themselves to the data provider. This was the name of the id provider. Currently the backends can have different providers for id, authentication etc. So the name may be missleading. Also when there are more domains with the same id provider the name is not enough to identify the backend but the domain name is. As a consequence the backend name is removed completely and only the domain name is used for identification.
* check if libpcre version is above or below 7Sumit Bose2009-09-013-2/+27
| | | | | PCRE_DUPNAMES is a new feature of libpcre 7. It is used in sssd to make the splitting of fully qualified user names more flexible.
* stop processing a domain if no provider is givenSumit Bose2009-09-011-0/+1
|
* Turn enumeration into a boolean valueSimo Sorce2009-08-314-13/+22
|
* Correctly handle DbusWatch behavior.Simo Sorce2009-08-312-37/+124
| | | | | | | It seems like DBUS always adds 2 watches for the same fd. One is for reading and the other is for writing. DBUS then keeps disabling one and enabling the other, depending on whether it is interested in reading or writing from/to the file descriptor.
* check if gid attribute is emptySumit Bose2009-08-281-0/+6
|
* send SSSD_REALM and SSSD_KDCIP environment to the clientSumit Bose2009-08-281-2/+31
| | | | | | Currently the kerberos locator plugin needs these two variables to be set to find a KDC which is configured in sssd but not in /etc/krb5.conf.
* add configure check for errno_tSumit Bose2009-08-282-0/+7
|
* fix internal order of ldap user mapping optionsSumit Bose2009-08-281-4/+4
|
* Speed-up enumerations.Simo Sorce2009-08-282-2/+167
| | | | | | | This patch reduces the time needed to enumerate groups of a midsized domain from 12 seconds to 4.4 Optimizes enumerations by doing only 2 ldb searches and some ordering instead of a number of searches proportional to the number of groups
* Make enumeration an independent taskSimo Sorce2009-08-275-68/+693
| | | | | | Always immediately return to DP, and update users/groups in the background. Also implements an optimization to retrieve only changed/new users/groups by filtering using the modifyTimestamp after the first query.
* Remove redunant function and always pass attrs.Simo Sorce2009-08-274-54/+30
|
* Upgrade database to 0.2Simo Sorce2009-08-272-5/+172
| | | | Provides also an upgrade function.
* Fix group replies when using member/memberofSimo Sorce2009-08-273-197/+180
| | | | Also remove legacy memberuid support
generated by cgit (git 2.34.1) at 2024-05-02 09:42:11 +0000