summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap/sdap_id_op.c
Commit message (Collapse)AuthorAgeFilesLines
* Don't terminate the same connection twiceJakub Hrozek2012-09-051-6/+0
| | | | https://fedorahosted.org/sssd/ticket/1488
* Clean up cache on server reinitializationPavel Březina2012-08-231-0/+38
| | | | | | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/734 We successfully detect when the server is reinitialized by testing the new lastUSN value. The maximum USN values are set to zero, but the current cache content remains. This patch removes records that were deleted from the server. It uses the following approach: 1. remove entryUSN attribute from all entries 2. run enumeration 3. remove records that doesn't have entryUSN attribute updated We don't need to do this for sudo rules, they will be refreshed automatically during next smart/full refresh, or when an expired rule is deleted.
* Primary server support: support for "disconnecting" connections in LDAPJan Zeleny2012-08-011-4/+37
| | | | | | | | | This patch adds support for marking existing connections as being disconnected. Each such connection can't be used for new queries and a new one has to be created instead if necessary. This will ensure that pending operations will end gracefully during reconnection. Also all new queries to the server we are reconnecting to will use another (probably newly created) connection.
* ldap provider: add sudo usn valuePavel Březina2012-06-291-0/+1
|
* LDAP: Add enumeration support for servicesStephen Gallagher2012-01-311-0/+1
|
* Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek2011-11-291-1/+3
|
* Fixed lastUSN checking improvementsJan Zeleny2011-05-041-2/+2
| | | | | | | | This patch fixes some issues with setting lastUSN attribute and it adds check against the highest user/group USN after enumeration to keep better track of the real highest USN. Optimal solution here would be to schedule a check of rootDSE entry right after the enumeration finishes, but for the moment this is good enough.
* Add last usn checking after reconnectionJan Zeleny2011-04-191-0/+15
| | | | | | | | | | | When reconnecting to the LDAP server supporting USNs (either because of new incomming id operation or invokation of callback responsible for checking status of the backend), detect whether the highest USN is lower than the one SSSD has recorded. If so, setup enumeration/cleanup to refresh potentionally changed account information in the SSSD cache. Related ticket: https://fedorahosted.org/sssd/ticket/734
* Fix one unlikely case of failure in sdap_id_op moduleJan Zeleny2011-03-141-1/+3
| | | | | | | | There can be an unlikely scenario when the first part of sdap_id_op_connect_done works fine and there is no need to mark backend offline. But right after the check, the memory allocation can fail in which case the backend needs to be marked offline along with disabled reconnecting.
* ldap: Use USN entries if available.Simo Sorce2010-12-071-1/+2
| | | | Otherwise fallback to the default modifyTimestamp indicator
* ldap: add checks to determine if USN features are available.Simo Sorce2010-12-071-4/+5
|
* ldap: remove variable that was never assigned nor usedSimo Sorce2010-12-071-8/+0
|
* Pass sdap_id_ctx in sdap_id_op functions.Simo Sorce2010-12-071-38/+48
|
* Store rootdse supported features in sdap_handlerSumit Bose2010-09-151-2/+2
|
* Use new LDAP connection framework in IPA dynamic DNS forwarder.eindenbom2010-07-091-0/+4
|
* Add an interface to try next fail-over server after connection to the active ↵eindenbom2010-07-091-0/+3
| | | | server was unexpectedly dropped.
* LDAP connection usage tracking, sharing and failover retry framework.eindenbom2010-07-091-0/+758