summaryrefslogtreecommitdiffstats
path: root/server
Commit message (Collapse)AuthorAgeFilesLines
...
* Adding Japanese translationnoriko2009-11-182-0/+615
|
* Update translatable stringsStephen Gallagher2009-11-183-21/+51
|
* Failover fixes and additionsSimo Sorce2009-11-183-7/+25
|
* Store initgr expire time on initgr callSimo Sorce2009-11-181-6/+17
|
* Change the pam code to perform an initgroups callSimo Sorce2009-11-181-1/+1
| | | | | | An initgroups call refreshes both the user and the user's groups, this is ideal for pam so that we don't need addiotnal initgroups calls (initgroups calls are cached too now) during the login process.
* Change initgroups code to use and check the cacheSimo Sorce2009-11-182-218/+109
| | | | | | | We were previously always ending up contacting the backend because we had no way to know if an initgroups call for the same user had ever been called. Add attribute to hold this information and rely on backends to update it. If they don't we fallback to the previous behvior of asking the backend.
* Fix crash due to uninitialized timeout variableSimo Sorce2009-11-181-0/+1
| | | | | This slipped through in previous patches. Fixes #283
* Upgrade cache and local databases to case-sensitive namesStephen Gallagher2009-11-182-2/+96
|
* Make the sysdb user and group names case-sensitiveStephen Gallagher2009-11-182-1/+39
|
* Fix option name krb5_changepw_principalSumit Bose2009-11-135-7/+7
|
* Change var name to make its use more clear.Simo Sorce2009-11-122-7/+7
| | | | | Change memctx to make clear it should be used only when a callback is being used.
* Make 'permit' the default for the access targetSumit Bose2009-11-122-16/+5
|
* Fix check_cache bug in dealing with the callbackSimo Sorce2009-11-121-97/+104
| | | | | | | | Also rework check_cache so that the operations it makes are more explicit. Also add comments about why we are doing something. Should make the code easier to understand in future (took quite some time and discussion on IRC to understand exactly how this function was behaving and to find the callback passing bug).
* Fix double free case.Simo Sorce2009-11-121-1/+3
|
* Fixes for proxy providerSumit Bose2009-11-122-7/+26
| | | | | - use the correct private data for each PAM task - make proxy_pam_target a mandatory option for auth, chpass and access
* Fix inconsistent use of krb5_ccname_templateSumit Bose2009-11-122-2/+2
|
* Try to fix offline loginsSimo Sorce2009-11-121-12/+6
|
* Add support for host, source host and user categorySumit Bose2009-11-121-8/+54
| | | | | | | This patch add support for the host, source host and user category 'all'. All other category values are ignored so far. With the patch the interpretation of an empty memberUser and empty sourceHost and externalHost is changed to 'not applicable'.
* Add cleanup taskSimo Sorce2009-11-109-156/+915
|
* Refactor delete functions and add a fewSimo Sorce2009-11-104-234/+648
| | | | | | Refactor user/group delete functions so that they can be used without a transaction (they autostart an operation). Add user and group search function where a subfilter can be specified.
* Add check for access-time rules to ipa_access.Sumit Bose2009-11-104-0/+74
|
* Simplify krb5 child handlerSumit Bose2009-11-101-17/+18
| | | | | | | | Currently the Kerberos child handler evaluates the siginfo_t structure to wait for a specific child. This scheme is prone to error, especially when there are more than one child process active, and can produce missleading debug message. This patch simplifies the scheme as it waits for any child.
* Fix segfault on unknown user/domainStephen Gallagher2009-11-091-2/+2
|
* Fix tevent_req error checking.Simo Sorce2009-11-0916-284/+111
| | | | When possible using a macro that correctly deals with tstate
* Assorted manpage fixesJakub Hrozek2009-11-091-27/+14
| | | | | | * do not mention the sbus_timeout parameter at all * document the config_file_version parameter * different wording for negative cache
* Fix regression in error message when deleting groupsJakub Hrozek2009-11-091-6/+4
|
* Fix enumerationsSimo Sorce2009-11-091-2/+6
| | | | | The counter was not set so we were storing only the first user for each anumeration.
* IPA time rules parsing routinesJakub Hrozek2009-11-094-0/+1841
|
* Add missing includeJakub Hrozek2009-11-091-0/+1
|
* Check return, zero free hostent, adhere to styleSimo Sorce2009-11-094-20/+28
|
* Fix ldap driverSimo Sorce2009-11-071-0/+3
|
* Fix buildSimo Sorce2009-11-071-4/+8
|
* added access module of IPA providerSumit Bose2009-11-076-4/+1697
|
* Add fail over utility functionsMartin Nagy2009-11-064-1/+971
| | | | | | | | These functions should be used by providers to centrally manage lists of servers. Servers are grouped into services and each service has it's own list of servers. If, however, you will try to add a same server into two different services, they will share a common structure. This means that a host will only be resolved once.
* Add simple reference counting wrappers for tallocMartin Nagy2009-11-064-1/+373
|
* Add DLIST_FOR_EACH() macroMartin Nagy2009-11-061-0/+3
|
* Check is ccache structure is initialized before calling krb5_cc_destroySumit Bose2009-11-061-8/+16
|
* Clean up unused dependenciesStephen Gallagher2009-11-062-7/+38
|
* Fix a bad free in async_resolv.cMartin Nagy2009-11-061-6/+0
| | | | | Also remove redundant talloc_free()'s. They are not needed since their parent should be freed right after calling the _recv() function.
* Add missing include file to files-tests.cMartin Nagy2009-11-061-0/+1
|
* Always set last update and expire timeSimo Sorce2009-11-064-114/+110
| | | | | modifications to existing users/groups were setting metadata, but creation was not. Fixes #259
* Split async helpers in multiple filesSimo Sorce2009-11-066-3285/+3386
| | | | | | The size of sdap_async.c was unmanageable. This patch splits it into a generic file with common infrastructure calls, a file that handles connection calls and a file for id related calls.
* Reorganize ldap id provider filesSimo Sorce2009-11-065-547/+584
| | | | Split enum task in a separate file.
* Unify code to use the generic search interfaceSimo Sorce2009-11-061-593/+473
| | | | | | | This code removes redundancies in the code. both users and groups enumeration code use the same search generic search function now. Also the code to save users and groups have been unified across all callers.
* Fix and enhance initgroups callSimo Sorce2009-11-061-170/+637
| | | | | | | | This call was failing and was defective because it didn't properly handle the various different schemas we support. Now the function does 2 things: - Updates the user entry to make sure it is still valid - Retrieves every group the user is member of
* Unify parse routines, use maps in generic searchesSimo Sorce2009-11-064-130/+77
| | | | | This remove redundant code and also allows the generic search to be used to use maps to convert attributes.
* Store the original memberof attributes if anySimo Sorce2009-11-061-7/+30
| | | | | Also change the interface of sdap_save_user_send() so that it can be more easily reused like it was done for sdap_save_group_send().
* Make useful function more broadly available.Simo Sorce2009-11-063-30/+30
|
* Make available method to quickly retrive stringSimo Sorce2009-11-062-3/+35
| | | | | sysdb_attrs has a lot of methods to add them but very little to get information out. Start adding a way to retrieve a single valued attribute as a string.
* Build files.c only for toolsStephen Gallagher2009-11-054-13/+14
| | | | Move files.c into tools directory