summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap/sdap_async.c
Commit message (Collapse)AuthorAgeFilesLines
* sdap_get_generic_ext_send: check if we a re still connectedsssd-1.9.2-129.el6Sumit Bose2013-10-221-0/+7
| | | | | | | | | | | | | | At the beginning of a LDAP request we check if we are connecte and have a valid sdap handle. But for some requests more than one LDAP operation, typically a search, is needed. Due to the asynchronous handling of LDAP request it might be possible that a second request might detect a server error and close the connection while the first request just finished one LDAP search and wants to start a new LDAP search. This patch tries to make sure that there is a valid sdap handle before sending a LDAP search to the server. Fixes https://fedorahosted.org/sssd/ticket/2126
* print hint about password complexity when new password is rejectedsssd-1.9.2-121.el6Pavel Březina2013-08-111-1/+15
| | | | https://fedorahosted.org/sssd/ticket/1827
* Adding option to disable retrieving large AD groups.sssd-1.9.2-113.el6Lukas Slebodnik2013-08-091-2/+13
| | | | | | | | | This commit adds new option ldap_disable_range_retrieval with default value FALSE. If this option is enabled, large groups(>1500) will not be retrieved and behaviour will be similar like was before commit ae8d047122c "LDAP: Handle very large Active Directory groups" https://fedorahosted.org/sssd/ticket/1823
* AD: Detect domain controller compatibility versionStephen Gallagher2012-09-241-0/+1
|
* Fixed wrong number in shadowLastChangeJan Zeleny2012-07-161-1/+2
| | | | | The attribute is supposed to contain number of days since the epoch, not the number of seconds.
* LDAP: Auto-detect support for the ldap match ruleStephen Gallagher2012-06-131-1/+95
| | | | | | | | This patch extends the RootDSE lookup so that we will perform a second request to test whether the match rule syntax can be used. If both groups and initgroups are disabled in the configuration, this lookup request can be skipped.
* Ghost members - removed sdap_check_aliases()Jan Zeleny2012-05-311-108/+0
| | | | | | | This function is no longer necessary because we don't have fake user entries any more. The original purpose of this function was to check if there are fake user entries for particular user and, if yes, to update its membership.
* Warn to syslog when dereference requests failAriel Barria2012-05-221-2/+2
|
* LDAP: Handle very large Active Directory groupsStephen Gallagher2012-05-101-2/+25
| | | | | | | | | | | | | Active Directory 2008R2 allows only 1500 group members to be retrieved in a single lookup. However, when we hit such a situation, we can take advantage of the ASQ lookups, which are not similarly limited. With this patch, we will add any members found by ASQ that were not found by the initial lookup so we will end with a complete group listing. https://fedorahosted.org/sssd/ticket/783
* Special-case LDAP_SIZELIMIT_EXCEEDEDJakub Hrozek2012-05-071-4/+9
| | | | | | | | | | | | Previous version of the SSSD did not abort the async LDAP search operation on errors. In cases where the request ended in progress, such as when the paging was very strictly limited, the old versions at least returned partial data. This patch special-cases the LDAP_SIZELIMIT_EXCEEDED error to avoid a user-visible regression. https://fedorahosted.org/sssd/ticket/1322
* Read sysdb attribute name, not LDAP attribute map nameJakub Hrozek2012-05-031-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1320
* sdap_check_aliases must not error when detects the same userJakub Hrozek2012-04-201-13/+31
| | | | https://fedorahosted.org/sssd/ticket/1307
* Prevent printing NULL from DEBUG messagesJakub Hrozek2012-04-181-2/+4
|
* LDAP: Add better error logging when ldap_result() failsStephen Gallagher2012-03-211-1/+3
|
* LDAP: Only use paging control on requests for multiple entriesStephen Gallagher2012-02-241-5/+40
| | | | | | | | | | The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
* End request if ldap_parse_result failsJakub Hrozek2012-02-211-0/+3
|
* Update shadowLastChanged attribute during LDAP password changeJan Zeleny2012-02-061-0/+132
| | | | https://fedorahosted.org/sssd/ticket/1019
* LDAP: Add option to disable paging controlStephen Gallagher2012-01-181-2/+6
| | | | Fixes https://fedorahosted.org/sssd/ticket/967
* Use the case sensitivity flag in the LDAP providerJakub Hrozek2011-12-161-4/+5
|
* Refactor saving sdap entitiesJakub Hrozek2011-12-161-0/+80
| | | | | There was too much code duplication between sdap_save_{user,group,netgroup}. This patch removes the most egregious ones.
* Cleanup: Remove unused parametersJakub Hrozek2011-11-221-1/+2
|
* Prevent printing NULL in several places of LDAP providerJakub Hrozek2011-11-181-2/+4
|
* Remove confusing do-while loopJakub Hrozek2011-11-021-35/+36
| | | | | The deref processing would return a single control back. The do-while loop was harmless but confusing.
* Use LDAPDerefSpec properlyJakub Hrozek2011-11-021-4/+6
| | | | | | | | ldap_create_deref_control_value expects an array of LDAPDerefSpec structures with LDAPDerefSpec.derefAttr == NULL as a sentinel. We were passing a single instance of a LDAPDerefSpec structure. https://fedorahosted.org/sssd/ticket/1050
* Store name aliases for users, groupsJakub Hrozek2011-09-281-0/+90
| | | | | | Also checks fake users for aliases when storing a real users so that getgrnam for a RFC2307 group that references a user by his secondary name followed by getpwnam for this user by his primary name works
* Keep deref controls until the whole request is finishedJakub Hrozek2011-09-061-8/+45
| | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/989 John Hodrien found out that when paging is used while dereferencing an entry, sssd_be may segfault on the second page. This was because paging returned the control to sdap_generic_search multiple times but sssd was freeing dereference control after the first search invocation. The subsequend sdap searched accessed memory that was already freed.
* Improve error message for LDAP password constraint violationJakub Hrozek2011-09-061-5/+12
| | | | https://fedorahosted.org/sssd/ticket/985
* Allow turning dereference off by setting the threshold to 0Jakub Hrozek2011-09-061-1/+7
|
* sss_ldap_err2string() - ldap_err2string() to sss_ldap_err2string()Pavel Březina2011-09-061-5/+5
| | | | https://fedorahosted.org/sssd/ticket/986
* New DEBUG facility - conversionPavel Březina2011-08-251-1/+1
| | | | | | | | | | https://fedorahosted.org/sssd/ticket/925 Conversion of the old debug_level format to the new one. (only where it was necessary) Removed: SSS_DEFAULT_DEBUG_LEVEL (completely replaced with SSSDBG_DEFAULT)
* Fix uninitialized pointer read in sdap_x_deref_parse_entryJakub Hrozek2011-05-241-1/+1
| | | | https://fedorahosted.org/sssd/ticket/877
* Fix bad comparison in sdap_has_deref_supportJakub Hrozek2011-05-241-1/+1
| | | | https://fedorahosted.org/sssd/ticket/876
* Generic dereference searchJakub Hrozek2011-05-201-0/+139
| | | | | | A generic wrapper around ASQ and OpenLDAP dereference searches. https://fedorahosted.org/sssd/ticket/635
* OpenLDAP dereference searchesJakub Hrozek2011-05-201-0/+210
| | | | | | | | This dereference method is supported at least by OpenLDAP and 389DS/RHDS For more details, see: http://tools.ietf.org/html/draft-masarati-ldap-deref-00
* Add support for Attribute Scoped QueriesJakub Hrozek2011-05-201-0/+203
| | | | | | For more details on ASQ, see: http://msdn.microsoft.com/en-us/library/aa366976%28VS.85%29.aspx http://msdn.microsoft.com/en-us/library/aa746418%28v=VS.85%29.aspx
* Generic dereference data structures and utilitiesJakub Hrozek2011-05-201-0/+35
| | | | These will be shared by both dereference methods in a later patch.
* sdap_get_generic_extJakub Hrozek2011-05-201-73/+202
| | | | | | | | | | | Add a private sdap_get_generic_ext_send()/_recv() request that exposes more of ldap_search_ext options, in particular the server contols. The existing sdap_generic_search_send()/_recv() request is now a thin wrapper around the new _ext request. The other important change is that an entry parsing is a callback now. That was done in order to allow custom parsing for results such as OpenLDAP deref or Attribute Scoped Queries.
* Do not leak LDAP paging controlsJakub Hrozek2011-04-281-0/+5
|
* Add ldap_page_size configuration optionStephen Gallagher2011-04-271-2/+1
|
* Enable paging support for LDAPStephen Gallagher2011-04-271-23/+117
|
* Log the LDAP message type we're processingStephen Gallagher2011-04-271-0/+57
|
* Don't pass NULL to printf for TLS errorsJakub Hrozek2011-04-081-4/+2
| | | | https://fedorahosted.org/sssd/ticket/643
* Release handle if not connectedSumit Bose2011-03-091-0/+1
|
* Add timeout parameter to sdap_get_generic_send()Sumit Bose2011-01-171-5/+6
|
* ldap: add checks to determine if USN features are available.Simo Sorce2010-12-071-0/+1
|
* Review comments for namingContexts patchesSumit Bose2010-11-051-9/+9
|
* Use (default)namingContext to set empty search basesSumit Bose2010-11-041-1/+1
|
* Add defaultNamingContext to RootDSE attributesSumit Bose2010-11-041-0/+1
|
* Add some missing ldap_memfree()Sumit Bose2010-10-221-1/+2
|
* Check if control is supported before using it.Simo Sorce2010-09-151-7/+9
|
generated by cgit (git 2.34.1) at 2024-04-27 12:18:46 +0000