summaryrefslogtreecommitdiffstats
path: root/src/providers/data_provider.h
Commit message (Collapse)AuthorAgeFilesLines
* Hook for mmap cache update on initgroup callsSimo Sorce2012-12-061-0/+1
| | | | | This set of functions enumerate the user's groups and invalidate them all if the list does not matches what we get from the caller.
* Hook to perform a mmap cache update from sssd_nssSimo Sorce2012-12-061-0/+6
| | | | | This set of functions enumerate each user/group from all domains and invalidate any mmap cache record that matches.
* krb5_child: send back the client principalSumit Bose2012-11-051-0/+1
| | | | | | | | | | | | | In general Kerberos is case sensitive but the KDC of Active Directory typically handles request case in-sensitive. In the case where we guess a user principal by combining the user name and the realm and are not sure about the cases of the letters used in the user name we might get a valid ticket from the AD KDC but are not able to access it with the Kerberos client library because we assume a wrong case. The client principal in the returned credentials will always have the right cases. To be able to update the cache user principal name the krb5_child will return the principal for further processing.
* sudo: clean upPavel Březina2012-06-291-5/+2
|
* sudo ldap provider: add support for on demand refresh of specific rulesPavel Březina2012-06-291-0/+1
|
* sudo ldap provider: add support for on demand full refreshPavel Březina2012-06-291-0/+1
|
* data provider: added subdomainsSumit Bose2012-04-241-2/+0
|
* Responder part of the subdomain retrieval workJan Zeleny2012-04-241-0/+1
|
* Add terminator for dp_optionStephen Gallagher2012-03-281-0/+2
|
* DP: Add host info handlerJan Cholasta2012-02-071-1/+3
|
* AUTOFS: responderJakub Hrozek2012-02-051-0/+1
|
* AUTOFS: Data Provider requestJakub Hrozek2012-02-051-0/+1
|
* SUDO Integration - prepare data provider for new responder commandsPavel Březina2012-01-271-7/+9
| | | | https://fedorahosted.org/sssd/ticket/1143
* SUDO: Provide a sudo DP request based on the internal_reqJakub Hrozek2012-01-271-0/+1
|
* DP: Add support for services in dp requestsStephen Gallagher2012-01-271-0/+1
|
* SUDO integration - data provider backend handlerPavel Březina2011-12-161-0/+1
|
* Multiline macro cleanupJakub Hrozek2011-09-281-1/+1
| | | | | | | | | | This is mostly a cosmetic patch. The purpose of wrapping a multi-line macro in a do { } while(0) is to make the macro usable as a regular statement, not a compound statement. When the while(0) is terminated with a semicolon, the do { } while(0); block becomes a compound statement again.
* New DEBUG facility - conversionPavel Březina2011-08-251-1/+1
| | | | | | | | | | https://fedorahosted.org/sssd/ticket/925 Conversion of the old debug_level format to the new one. (only where it was necessary) Removed: SSS_DEFAULT_DEBUG_LEVEL (completely replaced with SSSDBG_DEFAULT)
* Remove unused constants from data_provider.hJakub Hrozek2011-05-061-11/+0
|
* Remove unused be_check_online() SBUS callJan Zeleny2011-03-081-1/+0
|
* Add support for server-side pam response messagesSumit Bose2010-12-031-0/+8
|
* Add a special filter type to handle enumerationsSumit Bose2010-12-021-0/+1
|
* Introduce pam_verbosity config optionSumit Bose2010-11-151-0/+1
| | | | | | | | | | | Currently we display all PAM messages generated by sssd to the user. But only some of them are important and others are just some useful information. This patch introduces a new option to the PAM responder which controls what kind of messages are displayed. As an example the 'Authenticated with cached credentials' message is used. This message is only displayed if pam_verbosity=1 or if there is an expire date.
* Add netgroup support to the NSS responderStephen Gallagher2010-10-131-0/+1
|
* Copy pam data from DBus messageSumit Bose2010-05-271-2/+2
| | | | | | | | Instead of just using references to the pam data inside of the DBus message the data is copied. New the DBus message can be freed at any time and the pam data is part of the memory hierarchy. Additionally it is possible to overwrite the authentication tokens in the DBus message, because it is not used elsewhere.
* Make data provider id_callback publicStephen Gallagher2010-05-271-0/+1
|
* Add support for delayed kinit if offlineSumit Bose2010-05-261-0/+11
| | | | | | | If the configuration option krb5_store_password_if_offline is set to true and the backend is offline the plain text user password is stored and used to request a TGT if the backend becomes online. If available the Linux kernel key retention service is used.
* Revert "Copy pam data from DBus message"Stephen Gallagher2010-05-201-2/+2
| | | | This reverts commit 2faf73eef14d66aeb345ffa38d0f53670fa8a9a1.
* Copy pam data from DBus messageSumit Bose2010-05-201-2/+2
| | | | | | | | Instead of just using references to the pam data inside of the DBus message the data is copied. New the DBus message can be freed at any time and the pam data is part of the memory hierarchy. Additionally it is possible to overwrite the authentication tokens in the DBus message, because it is not used elsewhere.
* Remove unnecessary domain parameter from PAM requestsStephen Gallagher2010-02-221-7/+4
| | | | | | If we're sending a message to the backend, we already know which domain the request is targeting. Carrying this information is not useful and confuses the interface.
* Remove unnecessary "domain" parameter from DP registrationStephen Gallagher2010-02-221-1/+1
| | | | | | This was a holdover from when the DP and the providers were unique processes. The NSS and PAM registrations do not need to send the domain, as it is not ambiguous which one they are talking to.
* Add documentation for PAM response messagesSumit Bose2010-02-191-0/+69
|
* Remove unneeded items from struct pam_dataSumit Bose2010-02-191-4/+0
|
* Rename server/ directory to src/Stephen Gallagher2010-02-181-0/+219
Also update BUILD.txt
generated by cgit (git 2.34.1) at 2024-05-05 06:07:55 +0000