summaryrefslogtreecommitdiffstats
path: root/src/db/sysdb_ops.c
Commit message (Collapse)AuthorAgeFilesLines
* SYSDB: Modify ghosts in permissive modeOndrej Kos2013-01-071-1/+33
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1714 The attempt to delete all ghosts for users name and aliases was failing, resulting into failure of whole user-add operation. In permissive mode, the attempts to delete non-existent entries are not interpreted as error.
* SYSDB: Move misplaced assignmentJakub Hrozek2012-12-141-2/+1
|
* SYSDB: Don't operate with aliases same as nameOndrej Kos2012-11-271-0/+6
| | | | | | | fixes https://fedorahosted.org/sssd/ticket/1628 When user's alias is same as it's name, don't use it for searching in sysdb, and for deleting.
* LDAP: Only convert direct parents' ghost attribute to memberJakub Hrozek2012-11-211-8/+37
| | | | | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1612 This patch changes the handling of ghost attributes when saving the actual user entry. Instead of always linking all groups that contained the ghost attribute with the new user entry, the original member attributes are now saved in the group object and the user entry is only linked with its direct parents. As the member attribute is compared against the originalDN of the user, if either the originalDN or the originalMember attributes are missing, the user object is linked with all the groups as a fallback. The original member attributes are only saved if the LDAP schema supports nesting.
* SYSDB: Use the add_string convenience functions for managing ghost user ↵Jakub Hrozek2012-11-211-24/+9
| | | | | | | attribute Using the convenience function instead of low-level ldb calls makes the code more compact and more readable.
* SYSDB: Remove unnecessary domain parameter from several sysdb callsJakub Hrozek2012-09-241-45/+33
| | | | | The domain can be read from the sysdb object. Removing the domain string makes the API more self-contained.
* AUTOFS: Add entry objects below map objectsJakub Hrozek2012-09-241-19/+0
| | | | | | | | https://fedorahosted.org/sssd/ticket/1506 Changes how the new autofs entry objects are handled. Instead of creating the entry on the cn=autofs,cn=custom level, the entry is created below the map it belongs to.
* DB: Cancel transaction in sysdb_store_user if sysdb_add_user failsJakub Hrozek2012-09-201-1/+8
|
* SYSDB: Commit transaction in sysdb_store_userJakub Hrozek2012-09-051-17/+19
|
* Unify usage of sysdb transactions (part 2).Michal Zidek2012-09-041-28/+46
|
* SYSDB: Use ldb_msg_add_string for simple string additionsJakub Hrozek2012-08-061-6/+6
|
* SYSDB: Check the return valueJakub Hrozek2012-08-061-0/+1
|
* Cast uid_t to unsigned long long in DEBUG messagesJakub Hrozek2012-07-101-2/+2
|
* SYSDB: Reduce noise level of debug messages in lookupsStephen Gallagher2012-06-121-6/+8
|
* Ghost members - modifications in sysdbJan Zeleny2012-05-311-75/+153
| | | | | | | | | | | Deleted sysdb_add_fake_user(): This function is no longer used. Modified sysdb_add_user(): When user object is added to sysdb, it is important to iterate over all groups that might have its name or any of its aliases as ghost member and replace this ghost membership by a real one. This will eliminate duplicite memberships.
* SYSDB: Handle user and group renames betterJakub Hrozek2012-05-111-7/+39
| | | | | | | | | | | | Fixes a regression in the local domain tools where sss_groupadd no longer detected a GID duplicate. The check for EEXIST is moved one level up into more high level function. The patch also adds the same rename support for users. I found it odd that we allowed a rename of groups but not users. There is a catch when storing a user -- his cached password would be gone. I think that renaming a user is such a rare operation that it's not severe, plus there is a warning in the logs.
* SYSDB: Add better error logging to sysdb_set_entry_attr()Stephen Gallagher2012-05-101-2/+8
|
* Fix typo in debug messagePavel Březina2012-05-071-1/+1
|
* Delete missing attributes from netgroups to be storedJan Zeleny2012-02-241-0/+14
| | | | https://fedorahosted.org/sssd/ticket/1136
* Don't give memory context in confdb where not neededJan Zeleny2012-02-211-3/+3
|
* AUTOFS: sysdb interfaceJakub Hrozek2012-02-051-6/+32
|
* SYSDB: Remove code duplication between member_add and member_delJakub Hrozek2012-02-051-39/+14
|
* SYSDB: extend sysdb_store_service() to accept additional attributesStephen Gallagher2012-01-311-12/+14
|
* SYSDB: Move add_string and add_ulong to sysdb_private.hStephen Gallagher2012-01-231-4/+4
|
* SYSDB: Make ENOENT log messages less threateningStephen Gallagher2011-11-221-16/+54
| | | | | Previously, they were reported with the prefix "Error:" which caused confusion among end-users while debugging.
* Handle group renaming correctlyJan Zeleny2011-11-021-2/+7
| | | | https://fedorahosted.org/sssd/ticket/1040
* Plug memory leaks in sysdb_opsJakub Hrozek2011-10-311-20/+54
| | | | https://fedorahosted.org/sssd/ticket/1051
* SysDB commands that save lastUpdate allows this value to be passed inPavel Březina2011-10-131-25/+41
| | | | https://fedorahosted.org/sssd/ticket/836
* Use explicit base 10 for converting strings to integersJakub Hrozek2011-10-031-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1013
* Multiline macro cleanupJakub Hrozek2011-09-281-1/+1
| | | | | | | | | | This is mostly a cosmetic patch. The purpose of wrapping a multi-line macro in a do { } while(0) is to make the macro usable as a regular statement, not a compound statement. When the while(0) is terminated with a semicolon, the do { } while(0); block becomes a compound statement again.
* sysdb refactoring: memory context deletedJan Zeleny2011-08-151-247/+254
| | | | | | This patch deletes memory context parameter in those places in sysdb where it is not necessary. The code using modified functions has been updated. Tests updated as well.
* sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny2011-08-151-142/+75
| | | | | The patch also updates code using modified functions. Tests have also been adjusted.
* sysdb refactoring: renamed ctx variable to sysdbJan Zeleny2011-08-151-131/+131
|
* Non-posix group processing - sysdb changesJan Zeleny2011-06-021-17/+23
|
* Change sysdb_add_fake_user to add OriginalDNJakub Hrozek2011-05-201-1/+8
| | | | | RFC2307bis code relies heavily on originalDN, so the fake users need to have an option to store it, too.
* Some minor fixes and changes in sysdb_opsJan Zeleny2011-05-041-17/+40
|
* Add a function for searching netgroups with custom filterJan Zeleny2011-05-041-0/+57
|
* Add originalDN to fake groupsJakub Hrozek2011-03-231-1/+7
|
* Do not try to delete sysbd memberOf attributeSumit Bose2011-02-281-0/+4
|
* Delete attributes that are removed from LDAPStephen Gallagher2011-01-211-0/+118
| | | | | | | | Sometimes, a value in LDAP will cease to exist (the classic example being shadowExpire). We need to make sure we purge that value from SSSD's sysdb as well. https://fedorahosted.org/sssd/ticket/750
* Do not throw a DP error when a netgroup is not foundStephen Gallagher2011-01-141-1/+4
| | | | https://fedorahosted.org/sssd/ticket/775
* Work around libldb bugStephen Gallagher2011-01-141-2/+10
| | | | | Libldb performs non-indexed searches for ONELEVEL requests. We'll use SUBTREE instead to reduce the performance hit substantially
* Fix const cast warning for sysdb_update_membersStephen Gallagher2010-11-151-2/+2
|
* Modify sysdb_[add|remove]_group_member to accept users and groupsStephen Gallagher2010-10-181-32/+77
| | | | | | | | Previously, it assumed that all members were users. This changes the interface so that either a user or a group can be specified. Also, it eliminates the need for a memory context to be passed, since the internal memory should be self-contained.
* sysdb interface for adding fake usersJakub Hrozek2010-10-151-0/+61
|
* sysdb interface for adding incomplete groupsJakub Hrozek2010-10-151-0/+44
| | | | Useful for optimizing the initgroups operation.
* Do not fail if netgroup exists just update the attributesSumit Bose2010-10-131-1/+1
|
* Netgroups sysdb APIStephen Gallagher2010-10-131-1/+352
|
* Fix missing variable substitution in DEBUG messageStephen Gallagher2010-09-221-2/+2
|
* Define objectclass with a constantJakub Hrozek2010-09-151-2/+2
| | | | Use a #define instead of hardcoded string