summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap/ldap_id.c
Commit message (Collapse)AuthorAgeFilesLines
* Ignore users and groups that lack mandatory attributesStephen Gallagher2011-03-171-3/+6
| | | | https://fedorahosted.org/sssd/ticket/824
* Remove cached user entry if initgroups returns ENOENTStephen Gallagher2011-02-191-0/+11
| | | | | This behavior was present for getpwnam() but was lacking for initgroups.
* Add the user's primary group to the initgroups lookupStephen Gallagher2011-01-211-5/+6
| | | | | The user may not be a direct member of their primary group, but we still want to make sure that group is cached on the system.
* Add timeout parameter to sdap_get_generic_send()Sumit Bose2011-01-171-2/+6
|
* ldap: add checks to determine if USN features are available.Simo Sorce2010-12-071-1/+1
|
* Add a special filter type to handle enumerationsSumit Bose2010-12-021-17/+6
|
* Add check_online method to LDAP ID providerSumit Bose2010-12-011-0/+41
|
* Sanitize search filters in LDAP providerStephen Gallagher2010-11-151-2/+16
|
* Always use uint32_t for UID/GID numbersJakub Hrozek2010-10-261-6/+5
|
* Use unsigned long for conversion to id_tJakub Hrozek2010-10-181-2/+2
| | | | | | | | We used strtol() on a number of places to convert into uid_t or gid_t from a string representation such as LDAP attribute, but on some platforms, unsigned long might be necessary to store big id_t values. This patch converts to using strtoul() instead.
* Implement netgroup support for LDAP providerSumit Bose2010-10-131-0/+26
|
* Request all group attributes during initgroups processingStephen Gallagher2010-09-221-0/+1
| | | | | | | We tried to be too clever and only requested the name of the group, but we require the objectClass to validate the results. https://fedorahosted.org/sssd/ticket/622
* Use new LDAP connection framework to get user account groups from LDAP.eindenbom2010-07-091-108/+67
|
* Use new LDAP connection framework to get group account info from LDAP.eindenbom2010-07-091-36/+65
|
* Use new LDAP connection framework to get user account info from LDAP.eindenbom2010-07-091-37/+90
|
* Fix segfault in GSSAPI reconnect codeStephen Gallagher2010-05-071-55/+35
| | | | | Also clean up some duplicated code into a single common routine sdap_account_info_common_done()
* Better handle sdap_handle memory from callers.Simo Sorce2010-05-031-16/+40
| | | | | | | | | | | | | Always just mark the sdap_handle as not connected and let later _send() functions to take care of freeing the handle before reconnecting. Introduce restart functions to avoid calling _send() functions in _done() functions error paths as this would have the same effect as directly freeing the sdap_handle and cause access to freed memory in sdap_handle_release() By freeing sdap_handle only in the connection _recv() function we guarantee it can never be done within sdap_handle_release() but only in a following event.
* sysdb: delete sysdb_delete_groupSimo Sorce2010-04-121-33/+10
|
* sysdb: convert sysdb_delete_userSimo Sorce2010-04-121-33/+10
|
* Rename server/ directory to src/Stephen Gallagher2010-02-181-0/+795
Also update BUILD.txt