summaryrefslogtreecommitdiffstats
path: root/src/providers/dp_backend.h
Commit message (Collapse)AuthorAgeFilesLines
* BE: Make struct bet_queue_item private to sssd_beJakub Hrozek2014-11-061-10/+0
| | | | Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
* BE: Own the sbus socket as the SSSD userJakub Hrozek2014-10-221-0/+2
| | | | | | | | | In some cases, the back end might still be running as root, but the responder would be running unprivileged. In this case, we need to allow connecting from the SSSD user ID. Reviewed-by: Pavel Reichl <preichl@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Exit offline mode only if server is available.Michal Zidek2014-07-311-0/+2
| | | | | | | | | | | | | | | | | | | | | This patch adds periodic check to test if backend can exit offline mode and only marks backend as not offline if server for the service is available. Prior to this patch we marked backend as not offline if the offline_timeout was reached without checking for the server availability and when the next request failed again we switched back to the offline mode. This caused significant slowdowns in some edge cases. Fixes: https://fedorahosted.org/sssd/ticket/2355 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* IFP: Re-add the InfoPipe serverJakub Hrozek2014-04-041-0/+1
| | | | | | | | Related: https://fedorahosted.org/sssd/ticket/2072 This commit only adds the responder and the needed plumbing. No DBus related code is in yet.
* dp: add function to terminate request of specific domainPavel Březina2013-10-251-0/+3
| | | | | Resolves: https://fedorahosted.org/sssd/ticket/1968
* dp: store list of ongoing requestsPavel Březina2013-10-251-0/+3
| | | | | Resolves: https://fedorahosted.org/sssd/ticket/1968
* Add unconditional online callbacksSumit Bose2013-10-221-0/+9
| | | | | | | | | Currently online callbacks are only executed if the backend was offline before. This patch add a new class of callback which are always called if the backend gets a request to go online. They can be used e.g. to reset timeouts until a more sophisticated method (OpenLMI, sssctl) is available.
* DP: Notify propperly when removing PAC responderOndrej Kos2013-08-241-0/+1
| | | | | Adds pac_cli be_client structure pointer, to indetify and log the PAC responder termination correctly.
* Remove unused be_ctx->sigchld_ctxJakub Hrozek2013-07-181-1/+0
|
* back end: add refresh expired records periodic taskPavel Březina2013-06-101-0/+3
| | | | | | https://fedorahosted.org/sssd/ticket/1713 Add new option refresh_expired_interval.
* Add be request queueSumit Bose2013-06-041-0/+11
| | | | | | | For some backend targets it might be not desirable to run requests in parallel but to serialize them. To avoid that each provider has to implement a queue for this target this patch implements a generic queue which collects incoming requests before they are send to the target.
* DNS sites support - SRV DNS lookup pluginPavel Březina2013-04-101-0/+3
| | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1032 This plugin mimics the current behaviour. If discovery_domain is set it is the only domain that is tried. If discovery_domain is not set, we try to autodetect domain first and if that fails or SRV lookup on this domain fails, we fallback to SSSD domain name.
* DNS sites support - SRV lookup plugin interfacePavel Březina2013-04-101-0/+7
| | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1032 Introduces two new error codes: - ERR_SRV_NOT_FOUND - ERR_SRV_LOOKUP_ERROR Since id_provider is authoritative in case of SRV plugin choise, ability to override the selected pluging during runtime is not desirable. We rely on the fact that id_provider is initialized before all other providers, thus the plugin is set correctly.
* Init failover with be_res optionsJakub Hrozek2013-04-031-0/+10
|
* Provide a be_get_account_info_send functionJakub Hrozek2013-03-191-0/+14
| | | | | | | | | | | | | | In order to resolve group names in the simple access provider we need to contact the Data Provider in a generic fashion from the access provider. We can't call any particular implementation (like sdap_generic_send()) because we have no idea what kind of provider is configured as the id_provider. This patch splits introduces the be_file_account_request() function into the data_provider_be module and makes it public. A future patch should make the be_get_account_info function use the be_get_account_info_send function.
* Make struct be_req opaqueSimo Sorce2013-01-211-18/+0
|
* Add be_req_get_data() helper funciton.Simo Sorce2013-01-211-0/+3
| | | | In preparation for making struct be_req opaque.
* Add be_req_get_be_ctx() helper.Simo Sorce2013-01-211-0/+1
| | | | In preparation for making be_req opaque
* Add be_req_create() helperSimo Sorce2013-01-211-0/+3
|
* Introduce be_req_terminate() helperSimo Sorce2013-01-211-0/+6
| | | | | Call it everywhere instead of directly dereferencing be_req->fn This is in preparation of making be_req opaque.
* Remove domain from be_req structureSimo Sorce2013-01-211-2/+0
|
* Remove sysdb as a be request structure memberSimo Sorce2013-01-211-1/+0
| | | | The sysdb context is already available through the 'domain' context.
* Remove sysdb as a be context structure memberSimo Sorce2013-01-211-1/+0
| | | | The sysdb context is already available through the 'domain' structure.
* DP: invalidate all cached maps if a request for auto.master comes inJakub Hrozek2012-12-181-0/+1
| | | | | | If the Data Provider receives a request for the auto.master map, it passes on a flag to let the actual provider let know he should invalidate the existing maps
* FO: Check server validity before setting statusJakub Hrozek2012-09-131-0/+1
| | | | | | | | | | | | | | | | | The list of resolved servers is allocated on the back end context and kept in the fo_service structure. However, a single request often resolves a server and keeps a pointer until the end of a request and only then gives feedback about the server based on the request result. This presents a big race condition in case the SRV resolution is used. When there are requests coming in in parallel, it is possible that an incoming request will invalidate a server until another request that holds a pointer to the original server is able to give a feedback. This patch simply checks if a server is in the list of servers maintained by a service before reading its status. https://fedorahosted.org/sssd/ticket/1364
* Duplicate detection in fail over did not work.Michal Zidek2012-08-151-1/+2
| | | | https://fedorahosted.org/sssd/ticket/1472
* Change refreshing of subdomainsSimo Sorce2012-08-011-1/+0
| | | | | | | | | This patch keeps a local copy of the subdomains in the ipa subdomains plugin context. This has 2 advantages: 1. allows to check if anything changed w/o always hitting the sysdb. 2. later will allows us to dump this information w/o having to retrieve it again. The timestamp also allows to avoid refreshing too often.
* Use a more tractable name for subdomain requestSimo Sorce2012-08-011-1/+1
| | | | | I am all for readable names, but there is a tradeof between expressing purpose and compactness.
* Change subdomain_infoSimo Sorce2012-08-011-1/+1
| | | | | Rename the structure to use a standard name prefix so it is properly name-spaced, in preparation for changing the structure itself.
* Primary server support: basic support in failover codeJan Zeleny2012-08-011-1/+2
| | | | | | | | Now there are two list of servers for each service. If currently selected server is only backup, then an event will be scheduled which tries to get connection to one of primary servers and if it succeeds, it starts using this server instead of the one which is currently connected to.
* Primary server support: introduce concept of reconnectionJan Zeleny2012-08-011-0/+8
| | | | | | | This patch adds two support functions for adding reconnection callbacks and invoking such callbacks. The concept of reconnection is simple: stop using current connection for for new queries to the server without actually going offline.
* Remove unused member of be_reqJan Zeleny2012-07-271-3/+0
|
* Move SELinux processing from session to account PAM stackJan Zeleny2012-07-271-0/+8
| | | | | | | | | | | | | | The idea is to rename session provider to selinux provider. Processing of SELinux rules has to be performed in account stack in order to ensure that pam_selinux (which is the first module in PAM session stack) will get the correct input from SSSD. Processing of account PAM stack is bound to access provider. That means we need to have two providers executed when SSS_PAM_ACCT_MGMT message is received from PAM responder. Change in data_provider_be.c ensures just that - after access provider finishes its actions, the control is given to selinux provider and only after this provider finishes is the result returned to PAM responder.
* Renamed session provider to selinux providerJan Zeleny2012-07-271-1/+1
|
* sudo: clean upPavel Březina2012-06-291-4/+0
|
* sudo ldap provider: add support for on demand refresh of specific rulesPavel Březina2012-06-291-0/+2
|
* SSH: Add dp_get_host_send to common responder codeJakub Hrozek2012-05-031-0/+7
| | | | | | | | Instead of using account_info request, creates a new ssh specific request. This improves code readability and will make the code more flexible in the future. https://fedorahosted.org/sssd/ticket/1176
* Carry sysdb context and domain info in be_req structureJan Zeleny2012-04-241-0/+3
|
* Add domain name to get_account_info requestSumit Bose2012-04-241-0/+1
|
* data provider: added subdomainsSumit Bose2012-04-241-0/+7
|
* Detect cycle in the fail over on subsequent resolve requests onlyJakub Hrozek2012-03-081-1/+2
|
* Only do one cycle when resolving a serverJakub Hrozek2012-03-061-0/+5
| | | | https://fedorahosted.org/sssd/ticket/1214
* IPA: Set the DNS discovery domain to match ipa_domainStephen Gallagher2012-03-011-2/+5
| | | | https://fedorahosted.org/sssd/ticket/1217
* SSH: ResponderJan Cholasta2012-02-071-0/+1
|
* DP: Add host info handlerJan Cholasta2012-02-071-0/+1
|
* Add session target in data providerJan Zeleny2012-02-061-0/+1
|
* AUTOFS: Data Provider requestJakub Hrozek2012-02-051-0/+6
|
* SUDO Integration - prepare data provider for new responder commandsPavel Březina2012-01-271-0/+3
| | | | https://fedorahosted.org/sssd/ticket/1143
* DP: Handle parsing extra results in be_get_account_infoStephen Gallagher2012-01-271-0/+1
|
* Move child_common routines to utilStephen Gallagher2011-12-191-1/+1
|
generated by cgit (git 2.34.1) at 2024-05-10 07:34:43 +0000