summaryrefslogtreecommitdiffstats
path: root/src/db/sysdb.h
Commit message (Collapse)AuthorAgeFilesLines
* LDAP: Only convert direct parents' ghost attribute to memberJakub Hrozek2012-11-211-0/+3
| | | | | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1612 This patch changes the handling of ghost attributes when saving the actual user entry. Instead of always linking all groups that contained the ghost attribute with the new user entry, the original member attributes are now saved in the group object and the user entry is only linked with its direct parents. As the member attribute is compared against the originalDN of the user, if either the originalDN or the originalMember attributes are missing, the user object is linked with all the groups as a fallback. The original member attributes are only saved if the LDAP schema supports nesting.
* Refactor the way subdomain accounts are savedSimo Sorce2012-11-191-0/+9
| | | | | | | | | | | | | | | | | The original sysdb code had a strong assumption that only users from one domain are saved in the databse, with the subdomain feature, we have changed reality, but have not adjusted all the code arund the sysdb calls to not rely on the original assumption. One of the side effects of this incongrunece is that currently group memberships do not return fully qualified names for subdomain users as they should. In oreder to fix this and other potential issues surrounding the violation of the original assumption, we need to fully qualify subdomain user names. By savin them fully qualified we do not risk aliasing local users and have group memberhips or other name based matching code mistake a domain user with subdomain usr or vice versa.
* Display more information on DB version crashOndrej Kos2012-11-191-0/+30
| | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1589 Added check for determining, whether database version is higher or lower than expected. To distinguish it from other errors it uses following retun values (further used for appropriate error message): EMEDIUMTYPE for lower version than expected EUCLEAN for higher version than expected When SSSD or one of it's tools fails on DB version mismatch, new error message is showed suggesting how to proceed.
* Add pac_user_get_grp_info() to read current group membershipsSumit Bose2012-11-121-0/+1
| | | | | | | | | | | | To be able to efficiently store group memberships we need to know the current memberships of a user. sysdb_initgroups() is used to read the user entry together with all groups the user is a member of. Some of the group attributes are kept to avoid additional lookups and speed up further processing. Currently sysdb_initgroups() does not return the original DN of the group. Since it is needed to remove memberships later on it is added to the list of requested attributes
* sysdb: add sysdb_base_dn()Sumit Bose2012-11-051-0/+1
| | | | | Add a help function which returns the ldb_dn object for the base dn of the cache.
* DB: Use TALLOC_CTX for talloc contextJakub Hrozek2012-09-241-10/+10
| | | | A couple of sysdb functions used "void *" in place of a TALLOC_CTX.
* SYSDB: Remove unnecessary domain parameter from several sysdb callsJakub Hrozek2012-09-241-10/+7
| | | | | The domain can be read from the sysdb object. Removing the domain string makes the API more self-contained.
* AUTOFS: Add entry objects below map objectsJakub Hrozek2012-09-241-1/+0
| | | | | | | | https://fedorahosted.org/sssd/ticket/1506 Changes how the new autofs entry objects are handled. Instead of creating the entry on the cn=autofs,cn=custom level, the entry is created below the map it belongs to.
* SYSDB: Make sysdb_attrs_get_el_int() publicStephen Gallagher2012-08-211-0/+2
| | | | Also rename it to sysdb_attrs_get_el_ext()
* Remove redefinition of some SYSDB_* macrosPavel Březina2012-08-071-10/+0
|
* Change refreshing of subdomainsSimo Sorce2012-08-011-1/+2
| | | | | | | | | This patch keeps a local copy of the subdomains in the ipa subdomains plugin context. This has 2 advantages: 1. allows to check if anything changed w/o always hitting the sysdb. 2. later will allows us to dump this information w/o having to retrieve it again. The timestamp also allows to avoid refreshing too often.
* Add realm paramter to subdomain listSimo Sorce2012-08-011-3/+5
| | | | This will be used later for setting domain_realm mappings in krb5.conf
* Change subdomain_infoSimo Sorce2012-08-011-5/+5
| | | | | Rename the structure to use a standard name prefix so it is properly name-spaced, in preparation for changing the structure itself.
* Modify priority evaluation in SELinux user mapsJan Zeleny2012-07-181-0/+1
| | | | | | | | | | | | | | | | | | | The functionality now is following: When rule is being matched, its priority is determined as a combination of user and host specificity (host taking preference). After the rule is matched in provider, only its host priority is stored in sysdb for later usage. When rules are matched in the responder, their user priority is determined. After that their host priority is retrieved directly from sysdb and sum of both priorities is user to determine whether to use that rule or not. If more rules have the same priority, the order given in IPA config is used. https://fedorahosted.org/sssd/ticket/1360 https://fedorahosted.org/sssd/ticket/1395
* Add function sysdb_attrs_copy_values()Jan Zeleny2012-07-181-0/+3
| | | | | This function copies all values from one sysdb_attrs structure to another
* Add support for ID rangesSumit Bose2012-06-211-0/+39
|
* IPA subdomains - ask for information about master domainJan Zeleny2012-06-101-0/+7
| | | | | | | The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain.
* Ghost members - modifications in sysdbJan Zeleny2012-05-311-5/+0
| | | | | | | | | | | Deleted sysdb_add_fake_user(): This function is no longer used. Modified sysdb_add_user(): When user object is added to sysdb, it is important to iterate over all groups that might have its name or any of its aliases as ghost member and replace this ghost membership by a real one. This will eliminate duplicite memberships.
* Ghost members - add the ghost attribute to sysdbJan Zeleny2012-05-311-0/+2
|
* LDAP: Map the user's primaryGroupIDStephen Gallagher2012-05-031-0/+1
|
* LDAP: Enable looking up ID-mapped users by nameStephen Gallagher2012-05-031-0/+1
|
* SYSDB: Add sysdb routines for ID-mappingStephen Gallagher2012-05-031-0/+31
|
* LDAP: Add objectSID config optionStephen Gallagher2012-05-031-0/+1
|
* Sysdb routines for subdomainsJan Zeleny2012-04-241-0/+72
|
* Removed unused function sysdb_attrs_users_from_ldb_vals()Jan Zeleny2012-04-181-5/+0
|
* Search netgroups by alias, tooJakub Hrozek2012-03-061-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1228
* Remove sysdb_get_ctx_from_list()Sumit Bose2012-02-291-4/+0
|
* Keep sysdb context in domain info structSumit Bose2012-02-291-0/+9
|
* Delete missing attributes from netgroups to be storedJan Zeleny2012-02-241-0/+2
| | | | https://fedorahosted.org/sssd/ticket/1136
* IPA hosts refactoringJan Zeleny2012-02-241-0/+4
|
* LDAP: Add support for SSH user public keysJan Cholasta2012-02-071-0/+2
|
* Added some SELinux-related sysdb routinesJan Zeleny2012-02-061-1/+8
|
* Renamed some sysdb constants for their wider usageJan Zeleny2012-02-061-5/+3
|
* AUTOFS: sysdb interfaceJakub Hrozek2012-02-051-1/+2
|
* SYSDB: Add sysdb_attrs_get_uint16_tStephen Gallagher2012-01-311-0/+2
|
* SYSDB: extend sysdb_store_service() to accept additional attributesStephen Gallagher2012-01-311-1/+2
|
* sysdb_get_bool() and sysdb_get_bool() functionsPavel Březina2012-01-171-0/+11
|
* Export the function to convert ldb_result to sysdb_attrsJakub Hrozek2011-12-161-0/+4
| | | | It will be reused later in the sudo responder
* Use the case sensitivity flag in the LDAP providerJakub Hrozek2011-12-161-0/+1
|
* sysdb_get_real_name helper functionJakub Hrozek2011-12-161-0/+4
|
* Added and modified options for IPA netgroupsJan Zeleny2011-11-231-0/+8
|
* SysDB commands that save lastUpdate allows this value to be passed inPavel Březina2011-10-131-7/+14
| | | | https://fedorahosted.org/sssd/ticket/836
* Return users and groups based on aliasJakub Hrozek2011-09-281-3/+3
| | | | https://fedorahosted.org/sssd/ticket/926
* Add a sysdb_get_direct_parents functionJakub Hrozek2011-09-281-0/+7
|
* Add sysdb interface to get name aliasesJakub Hrozek2011-09-281-0/+5
|
* Remaining memory context variables renamedJan Zeleny2011-08-151-13/+13
| | | | | memctx to mem_ctx tmpctx to tmp_ctx
* sysdb refactoring: memory context deletedJan Zeleny2011-08-151-38/+19
| | | | | | This patch deletes memory context parameter in those places in sysdb where it is not necessary. The code using modified functions has been updated. Tests updated as well.
* sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny2011-08-151-54/+0
| | | | | The patch also updates code using modified functions. Tests have also been adjusted.
* Added sysdb_ctx_get_domain functionJan Zeleny2011-08-151-0/+2
|
* sysdb refactoring: renamed ctx variable to sysdbJan Zeleny2011-08-151-54/+54
|
generated by cgit (git 2.34.1) at 2024-05-09 04:27:56 +0000