summaryrefslogtreecommitdiffstats
path: root/src/sss_client
Commit message (Collapse)AuthorAgeFilesLines
* PAC client: add krb5 authdata pluginSumit Bose2012-06-212-0/+467
|
* PAC client: add basic support in common client codeSumit Bose2012-06-212-0/+38
|
* PAC responder: add the core functionalitySumit Bose2012-06-211-0/+4
| | | | | | | This adds support for parsing PAC and storing information contained within. In particular the user and all his memberships are stored. In case it is necessary, getgrgid() requests are sent to provider for group resolution.
* Add close on exec support for old platformsSimo Sorce2012-06-211-1/+16
| | | | | | | Older platfroms like RHEL5 do not have support for O_CLOEXC and need an explicit fcntl after the fd is created. Add it conditionally so it can be clearly removed once we declared those platfroms obsolete and unsupported.
* Do not leak file descriptors in client libs.Simo Sorce2012-06-211-1/+1
| | | | | | We need to make sure the mc socket is not leaked otherwise child processes will pile up leaked file descriptors. Add O_CLOEXEC when opening the cache.
* Do not send SIGPIPE on disconnectionShantanu Goel2012-06-181-6/+21
| | | | | | | | Note we set MSG_NOSIGNAL to avoid having to fiddle with signal masks but also do not want to die in case SIGPIPE gets raised and the application does not handle it.
* Set return errno to the value prior to calling close().Shantanu Goel2012-06-181-2/+2
|
* SSS_CLIENT: Fix uninitialized value errorStephen Gallagher2012-06-151-1/+1
| | | | | This would cause a crash if we jump to the done: label before it has been allocated.
* Provide "service filter" for SELinux contextJan Zeleny2012-06-141-0/+20
| | | | | | | At this moment we will support only asterisk, designating "all services". https://fedorahosted.org/sssd/ticket/1360
* SSH: Don't abort connection in sss_ssh_knownhostsproxy when DNS records are ↵Jan Cholasta2012-05-311-36/+49
| | | | | | missing https://fedorahosted.org/sssd/ticket/1356
* SSH: Supress error message output in sss_ssh_knownhostsproxyJan Cholasta2012-05-312-15/+8
|
* Revert the client packet length, too, after reverting the packet protocolJakub Hrozek2012-05-291-1/+1
|
* NSS: Restore original protocol for getservbyportStephen Gallagher2012-05-251-2/+3
| | | | When fixing an endianness bug, we changed the protocol unnecessarily.
* Send 16bit protocol numbers from the sss_clientJakub Hrozek2012-05-251-6/+7
| | | | https://fedorahosted.org/sssd/ticket/1348
* Always use positional arguments in translatable stringsStephen Gallagher2012-05-221-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1336
* AUTOFS: remove unused assignmentsJakub Hrozek2012-05-031-1/+0
| | | | | Also changes setautomntent_send so that is only return NULL in case the tevent_req creation fails.
* PAM_SSS: report error code if write failsJakub Hrozek2012-05-021-2/+2
| | | | | clang had reported this as "value of ret is never used", I think it would be nice to report a meaningful error message.
* SSH: Add support for hashed known_hostsJan Cholasta2012-04-241-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1203
* Convert read and write operations to sss_atomic_readJakub Hrozek2012-04-202-27/+27
| | | | https://fedorahosted.org/sssd/ticket/1209
* autofs: Raise the maximum key length to PATH_MAXJakub Hrozek2012-04-181-2/+4
| | | | https://fedorahosted.org/sssd/ticket/1300
* sudo api: check sss_status instead of errnop in sss_sudo_send_recv_generic()Pavel Březina2012-04-181-2/+4
|
* pam_sss: improve error handling in SELinux codeJakub Hrozek2012-04-181-3/+5
|
* Use HTML_TIMESTAMP instead of HTML_FOOTER_DESCRIPTIONJakub Hrozek2012-04-051-3/+4
| | | | https://fedorahosted.org/sssd/ticket/1271
* Silence Coverity warning in the autofs test toolJakub Hrozek2012-03-281-8/+22
| | | | https://fedorahosted.org/sssd/ticket/1237
* AUTOFS: fix copy-and-paste bug in the autofs clientJakub Hrozek2012-03-261-1/+1
|
* SSH: Fix infinite loop in sss_ssh_knownhostsproxyJan Cholasta2012-03-201-6/+9
| | | | https://fedorahosted.org/sssd/ticket/1268
* sss_client: shared memory cache group map supportSimo Sorce2012-03-193-0/+268
|
* sss_client: shared memory cache passwd map supportSimo Sorce2012-03-193-0/+262
|
* sss_client: Add common shared memory cache utilsSimo Sorce2012-03-192-0/+334
|
* SSH: Canonicalize host name and do reverse DNS lookup in sss_ssh_knownhostsproxyJan Cholasta2012-03-151-26/+38
| | | | https://fedorahosted.org/sssd/ticket/1245
* SSH: Allow clients to explicitly specify host aliasJan Cholasta2012-03-154-6/+25
| | | | | This change removes the need to canonicalize host names on the responder side - the relevant code was removed.
* Fixed resource leak in ssh client codeJan Zeleny2012-03-091-0/+1
|
* Fixed uninitialized pointer in SSH authorized keys clientJan Zeleny2012-03-091-1/+1
|
* Fixed uninitialized pointer in SSH known host proxyJan Zeleny2012-03-091-1/+1
|
* Use of unininitialized value in sss_sudo_parse_responsePavel Březina2012-03-091-0/+2
| | | | https://fedorahosted.org/sssd/ticket/1231
* Two memory leaks in sss_sudo_get_valuesPavel Březina2012-03-091-1/+4
| | | | https://fedorahosted.org/sssd/ticket/1235
* Only free returned values on successJakub Hrozek2012-03-081-3/+3
| | | | https://fedorahosted.org/sssd/ticket/1237
* Autofs: operate on contents of double-pointer, not addressJakub Hrozek2012-03-081-3/+3
| | | | https://fedorahosted.org/sssd/ticket/1234
* SSH: Remove unused --file option of sss_ssh_knownhostsproxyJan Cholasta2012-02-271-5/+0
|
* SSH: Add more debugging messagesJan Cholasta2012-02-272-4/+18
|
* AUTOFS: speed up the client by requesting multiple entries at onceJakub Hrozek2012-02-271-44/+160
| | | | https://fedorahosted.org/sssd/ticket/1166
* SSH: Manage global known_hosts file in the responderJan Cholasta2012-02-261-78/+2
| | | | https://fedorahosted.org/sssd/ticket/1193
* SSH: Continue connecting to SSH server even when SSSD is not running in ↵Jan Cholasta2012-02-261-112/+85
| | | | | | | | | | sss_ssh_knownhostsproxy Additionally, don't drop the connection when the sss_ssh_knownhostsproxy process receives a signal. https://fedorahosted.org/sssd/ticket/1179 https://fedorahosted.org/sssd/ticket/1184
* SSH: Refactor responder and client common codeJan Cholasta2012-02-264-177/+72
|
* pam_sss: keep selinux optionalSimo Sorce2012-02-231-0/+6
| | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
* nss_group: Cache the result from sssd when the glibc provided buffer is too ↵Simo Sorce2012-02-231-8/+145
| | | | small.
* Refactor sss_result into sss_sudo_resultPavel Březina2012-02-145-36/+38
| | | | https://fedorahosted.org/sssd/ticket/1159
* Fix missing NULL check after mallocStephen Gallagher2012-02-131-0/+4
| | | | Coverity #12528
* SSH: Verify that names received from client are valid UTF-8 in responderJan Cholasta2012-02-131-0/+17
| | | | | | | Also added a comment describing the wire format of client requests and responses. https://fedorahosted.org/sssd/ticket/1177
* Fix SSH compilation on RHEL5Jakub Hrozek2012-02-071-1/+3
|