summaryrefslogtreecommitdiffstats
path: root/server
Commit message (Collapse)AuthorAgeFilesLines
* configure cleanupsSumit Bose2009-09-034-4/+6
| | | | | - replaced mailing list address - let sssd base components read version from VERSION
* Avoid crash when timestamp is NULLRalf Haferkamp2009-09-031-1/+3
| | | | | Check if the timestamp argument of sdap_save_group_recv is NULL before using it.
* Fix initgroups search filter when using rfc2307bisRalf Haferkamp2009-09-031-2/+2
| | | | | sdap_get_initgr_process() was using the wrong sdap_id_map struct when creating the searchfilter for the initgroups() call.
* Fix proxy enumerationSimo Sorce2009-09-031-86/+123
| | | | New tevent library finally outlawed nested loops.
* Honor enumerate option in ldap_idSimo Sorce2009-09-021-6/+9
| | | | | If enumerations are disabled for this domain, then do not start the enumeration task.
* remove the concept of a backend nameSumit Bose2009-09-024-31/+41
| | | | | | | | | | | The data provider backends stored a name value besides the domain name to identify themselves to the data provider. This was the name of the id provider. Currently the backends can have different providers for id, authentication etc. So the name may be missleading. Also when there are more domains with the same id provider the name is not enough to identify the backend but the domain name is. As a consequence the backend name is removed completely and only the domain name is used for identification.
* check if libpcre version is above or below 7Sumit Bose2009-09-013-2/+27
| | | | | PCRE_DUPNAMES is a new feature of libpcre 7. It is used in sssd to make the splitting of fully qualified user names more flexible.
* stop processing a domain if no provider is givenSumit Bose2009-09-011-0/+1
|
* Turn enumeration into a boolean valueSimo Sorce2009-08-314-13/+22
|
* Correctly handle DbusWatch behavior.Simo Sorce2009-08-312-37/+124
| | | | | | | It seems like DBUS always adds 2 watches for the same fd. One is for reading and the other is for writing. DBUS then keeps disabling one and enabling the other, depending on whether it is interested in reading or writing from/to the file descriptor.
* check if gid attribute is emptySumit Bose2009-08-281-0/+6
|
* send SSSD_REALM and SSSD_KDCIP environment to the clientSumit Bose2009-08-281-2/+31
| | | | | | Currently the kerberos locator plugin needs these two variables to be set to find a KDC which is configured in sssd but not in /etc/krb5.conf.
* add configure check for errno_tSumit Bose2009-08-282-0/+7
|
* fix internal order of ldap user mapping optionsSumit Bose2009-08-281-4/+4
|
* Speed-up enumerations.Simo Sorce2009-08-282-2/+167
| | | | | | | This patch reduces the time needed to enumerate groups of a midsized domain from 12 seconds to 4.4 Optimizes enumerations by doing only 2 ldb searches and some ordering instead of a number of searches proportional to the number of groups
* Make enumeration an independent taskSimo Sorce2009-08-275-68/+693
| | | | | | Always immediately return to DP, and update users/groups in the background. Also implements an optimization to retrieve only changed/new users/groups by filtering using the modifyTimestamp after the first query.
* Remove redunant function and always pass attrs.Simo Sorce2009-08-274-54/+30
|
* Upgrade database to 0.2Simo Sorce2009-08-272-5/+172
| | | | Provides also an upgrade function.
* Fix group replies when using member/memberofSimo Sorce2009-08-273-197/+180
| | | | Also remove legacy memberuid support
* Always save using member/memberOfSimo Sorce2009-08-275-216/+151
| | | | | First pass to remove the legacy option and make it just a property of the provider
* Initial support for multiple schema typesSimo Sorce2009-08-271-7/+39
|
* Use the correct structure.Simo Sorce2009-08-271-2/+2
|
* Update version to 0.5.0sssd-0_5_0Stephen Gallagher2009-08-242-7/+477
| | | | Update gettext strings
* Do not fail enumerations if a single store failsSimo Sorce2009-08-241-40/+45
| | | | Try as hard as possible to store as much data as we can.
* Relax memberof constraints a bitSimo Sorce2009-08-241-85/+226
| | | | | | Allow to try to set members that do not actually exist. In that case simply remove them when we find out they are not real entries.
* Add debug statements to sysdb_opsSimo Sorce2009-08-241-10/+111
|
* some UPN handling fixesSumit Bose2009-08-247-28/+79
| | | | | | - making the realm part upper case is now optional and done in the LDAP backend - using a username@realm UPN is now optional
* Fix accidentally forcing MPGs on for all domainsStephen Gallagher2009-08-211-1/+1
|
* extended the documentation of LDAP backendSumit Bose2009-08-212-4/+211
| | | | | Added man pages sections about user and group attribute mapping. Added an example configuration to access an AD server.
* store additional LDAP attributesSumit Bose2009-08-213-5/+80
| | | | | If available the original DN and the user principle will be stored in sysdb.
* fix handling of filtersUsers in groupsSumit Bose2009-08-214-31/+56
| | | | | | | | - with the boolean option filterUsersInGroups it can be controlled wether filtered users appear in groups or not. - fixed an error which prevented the display of groups with filtered members - removed some tab indents
* Fix sysdb testsJakub Hrozek2009-08-211-17/+62
|
* Disallow all operations outside domains, fix deleting cache for filesJakub Hrozek2009-08-214-11/+41
| | | | | | | | | | One of the previous patches disallowed adding users and groups outside known domains but it was missing disallowing modifying, deleting, etc. Also don't error if there's no sysdb cache to delete after deleting legacy user/domain. Fixes: tickets #113,#114
* use stored upn if availableSumit Bose2009-08-211-20/+101
| | | | | | If a user principle name (upn) can be found in sysdb the krb5 backend will use this otherwise is build as username@realm. It is checked that the realm is upper case only.
* Ensure nextID doesn't reuse an existing local UID or GIDStephen Gallagher2009-08-201-9/+21
| | | | | | | | | If there was no maxID set for a domain, the search filter to check whether the UID was available would always return empty (because no UIDs can be <= 0) This patch changes the search filter if the maxID is unset so that it has no upper limit
* Support Docbook 4.4Stephen Gallagher2009-08-2010-20/+20
| | | | | RHEL5 did not support Docbook 4.5, and we are not using any 4.5 features.
* Support gettext >= 0.14 instead of 0.17Stephen Gallagher2009-08-202-2/+3
| | | | | | This is needed for support of RHEL5 Adding the assignment of $(localedir) was necessary, as gettext 0.14 does not include automatically assign it.
* Remove 'color-tests' from AM_INIT_AUTOMAKEStephen Gallagher2009-08-201-1/+1
| | | | This was breaking the build on RHEL5
* Fix usage of $(builddir) in SSSDStephen Gallagher2009-08-201-0/+4
| | | | | | There are some old versions of automake that do not define $(builddir) correctly. Since $(builddir) is "Rigorously equal to ‘.’', we'll set it at the top of the Makefile.am files.
* Make the LOCAL provider always use MagicPrivateGroupsStephen Gallagher2009-08-202-2/+9
| | | | Also updates the manpage for sssd.conf to denote this
* enable usage of defaultBindDnSumit Bose2009-08-196-9/+69
|
* Eliminate the --with-tests configure flagStephen Gallagher2009-08-193-32/+22
| | | | | | | | | | | --with-tests was confusing. Since we now build our tests only with 'make check', it doesn't make sense for this to be a configure- time option. We will detect during configure whether the 'check' package is available and we will use them if so. Otherwise, we will only build and execute any test suites that do not rely on the 'check' framework. We will print warning during 'configure' if CHECK is not installed
* added missing hash_create which was remove by a previous patchSumit Bose2009-08-181-5/+14
|
* fix return value of confdb_get_domainsSumit Bose2009-08-181-0/+1
| | | | | | If the last configured domain is broken confdb_get_domains returns the return value of confdb_get_domain even if there are valid domains available.
* Ensure that only one local domain is configuredStephen Gallagher2009-08-181-1/+32
|
* Fix broken buildStephen Gallagher2009-08-171-1/+0
| | | | Build broken in c0f3393d4ab923e2eedab0fad88a864e2aae9fc9
* Fix reconnection codeSimo Sorce2009-08-1717-282/+141
| | | | | | | Remove redundant reconnection code that was interfeering with the sbus reconnection code. Consolidate include files for sbus relates operations. Make pamsrv code similar to nsssrv code.
* Refactor responder_dp.cStephen Gallagher2009-08-144-117/+117
| | | | | | Many of the functions in responder_dp.c were originally NSS- specific and were moved there from the NSS responder code. Since they are now generic to any responder, rename them to sss_dp_*
* Don't go to the backend for identical cache entry requestsStephen Gallagher2009-08-143-55/+303
| | | | | | | | | Currently, if an additional request comes in for a cache entry while that same entry is already in the process of being refreshed, we start a duplicate cache update request. This patch adds allows the cache to maintain a hash table of all in-progress requests and queue up multiple callbacks for updates in progress. Once the data is returned, all of these callbacks will fire.
* Make "files" a reserved word for legacy local domainJakub Hrozek2009-08-134-4/+57
| | | | | | | | This patch introduces provider=files as a valid provider. Upon loading the backend, its properties in confdb are overwritten to those that represent legacy local domain. Also document this in sssd.conf(5) and example config
generated by cgit (git 2.34.1) at 2024-04-30 16:59:03 +0000