summaryrefslogtreecommitdiffstats
path: root/src/tests/sysdb-tests.c
Commit message (Collapse)AuthorAgeFilesLines
* MEMBEROF: Keep inherited ghost users around on modify operation1.9.2-34Jakub Hrozek2012-12-061-0/+248
| | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1652 It is possible to simply reset the list of ghost users to a different one during a modify operation. It is also actually how we update entries that are expired in the SSSD cache. In this case, we must be careful and retain the ghost users that are not native to the group we are processing but are rather inherited from child groups. The intention of the replace operation after all is to set the list of direct members of that group, not direct and indirect.
* MEMBEROF: Implement the modify operation for ghost usersJakub Hrozek2012-12-061-0/+480
| | | | | | | Similar to the add and delete operation, we also need to propagate the changes of the ghost user attribute to the parent groups so that if a nested group updates memberships, its parents also get the membership updated.
* MEMBEROF: Implement delete operation for ghost usersJakub Hrozek2012-12-061-1/+106
| | | | | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1668 The memberof plugin did only expand the ghost users attribute to parents when adding a nested group, but didn't implement the reverse operation. This bug resulted in users being reported as group members even after the direct parent went away as the expanded ghost attributes were never removed from the parent entry. When a ghost entry is removed from a group, all its parent groups are expired from the cache by setting the expire timestamp to 1. Doing so would force the SSSD to re-read the group next time it is requested in order to make sure its members are really up-to-date.
* TESTS: Test ghosts users in the RFC2307 schemaJakub Hrozek2012-12-061-0/+248
|
* MEMBEROF: Do not add the ghost attribute to selfJakub Hrozek2012-12-061-2/+86
| | | | | | | | | | | | When a nested group with ghost users is added, its ghost attribute should propagate within the nested group structure much like the memberuid attribute. Unlike the memberuid attribute, the ghost attribute is only semi-managed by the memberof plugin and added manually to the original entry. This bug caused LDB errors saying that attribute or value already exists when a group with a ghost user was added to the hierarchy as groups were updated with an attribute they already had.
* LDAP: Only convert direct parents' ghost attribute to memberJakub Hrozek2012-11-211-6/+7
| | | | | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1612 This patch changes the handling of ghost attributes when saving the actual user entry. Instead of always linking all groups that contained the ghost attribute with the new user entry, the original member attributes are now saved in the group object and the user entry is only linked with its direct parents. As the member attribute is compared against the originalDN of the user, if either the originalDN or the originalMember attributes are missing, the user object is linked with all the groups as a fallback. The original member attributes are only saved if the LDAP schema supports nesting.
* SYSDB: Remove unnecessary domain parameter from several sysdb callsJakub Hrozek2012-09-241-8/+7
| | | | | The domain can be read from the sysdb object. Removing the domain string makes the API more self-contained.
* AUTOFS: Use both key and value in entry RDNJakub Hrozek2012-09-241-1/+1
| | | | | | This patch switches from using just key in the RDN to using both key and value. That is neccessary to allow multiple direct mounts in a single map.
* AUTOFS: Add entry objects below map objectsJakub Hrozek2012-09-241-31/+17
| | | | | | | | https://fedorahosted.org/sssd/ticket/1506 Changes how the new autofs entry objects are handled. Instead of creating the entry on the cn=autofs,cn=custom level, the entry is created below the map it belongs to.
* AUTOFS: Add sysdb testsJakub Hrozek2012-09-241-0/+249
|
* SYSDB: NULL-terminate the output of sysdb_get_{ranges,subdomains}Jakub Hrozek2012-09-101-2/+2
|
* SYSDB: Abort unit test if sysdb_getpwnam failsJakub Hrozek2012-09-051-0/+3
|
* Change refreshing of subdomainsSimo Sorce2012-08-011-16/+20
| | | | | | | | | This patch keeps a local copy of the subdomains in the ipa subdomains plugin context. This has 2 advantages: 1. allows to check if anything changed w/o always hitting the sysdb. 2. later will allows us to dump this information w/o having to retrieve it again. The timestamp also allows to avoid refreshing too often.
* Add realm paramter to subdomain listSimo Sorce2012-08-011-3/+3
| | | | This will be used later for setting domain_realm mappings in krb5.conf
* tests: Remove useless constsSimo Sorce2012-08-011-27/+15
| | | | | Declaring a bunch of structures as const and then wrapping all uses in discard_const_p() is a bit silly. Remove all these useless decorations.
* Change subdomain_infoSimo Sorce2012-08-011-16/+22
| | | | | Rename the structure to use a standard name prefix so it is properly name-spaced, in preparation for changing the structure itself.
* Cast uid_t to unsigned long long in DEBUG messagesJakub Hrozek2012-07-101-4/+4
|
* Ghost members - various small changesJan Zeleny2012-05-311-1/+1
|
* SYSDB: Handle user and group renames betterJakub Hrozek2012-05-111-0/+143
| | | | | | | | | | | | Fixes a regression in the local domain tools where sss_groupadd no longer detected a GID duplicate. The check for EEXIST is moved one level up into more high level function. The patch also adds the same rename support for users. I found it odd that we allowed a rename of groups but not users. There is a catch when storing a user -- his cached password would be gone. I think that renaming a user is such a rare operation that it's not severe, plus there is a warning in the logs.
* Sysdb routines for subdomainsJan Zeleny2012-04-241-0/+232
|
* Keep sysdb context in domain info structSumit Bose2012-02-291-9/+3
|
* Delete missing attributes from netgroups to be storedJan Zeleny2012-02-241-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1136
* SYSDB: extend sysdb_store_service() to accept additional attributesStephen Gallagher2012-01-311-4/+4
|
* SYSDB: Add indexes for servicePort and serviceProtocolStephen Gallagher2012-01-271-0/+14
|
* SYSDB: Add sysdb routines for manipulating service entriesStephen Gallagher2012-01-271-0/+358
|
* SysDB commands that save lastUpdate allows this value to be passed inPavel Březina2011-10-131-11/+11
| | | | https://fedorahosted.org/sssd/ticket/836
* New DEBUG facility - SSSDBG_UNRESOLVED changed from -1 to 0Pavel Březina2011-08-251-1/+4
| | | | | | | | | | | | | | | | | | | | | Removed: SSS_UNRESOLVED_DEBUG_LEVEL (completely replaced with SSSDBG_UNRESOLVED) Added new macro: CONVERT_AND_SET_DEBUG_LEVEL(new_value) Changes unresolved debug level value (SSSDBG_UNRESOLVED) from -1 to 0 so DEBUG macro could be reduced by one condition. Anyway, it has a minor effect, every time you want to load debug_level from command line parameters, you have to use following pattern: /* Set debug level to invalid value so we can deside if -d 0 was used. */ debug_level = SSSDBG_INVALID; pc = poptGetContext(argv[0], argc, argv, long_options, 0); while((opt = poptGetNextOpt(pc)) != -1) { ... } CONVERT_AND_SET_DEBUG_LEVEL(debug_level);
* New DEBUG facility - conversionPavel Březina2011-08-251-0/+2
| | | | | | | | | | https://fedorahosted.org/sssd/ticket/925 Conversion of the old debug_level format to the new one. (only where it was necessary) Removed: SSS_DEFAULT_DEBUG_LEVEL (completely replaced with SSSDBG_DEFAULT)
* sysdb refactoring: memory context deletedJan Zeleny2011-08-151-21/+20
| | | | | | This patch deletes memory context parameter in those places in sysdb where it is not necessary. The code using modified functions has been updated. Tests updated as well.
* sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny2011-08-151-108/+56
| | | | | The patch also updates code using modified functions. Tests have also been adjusted.
* Non-posix group processing - sysdb changesJan Zeleny2011-06-021-4/+6
|
* Case insensitive originalDN testJakub Hrozek2011-04-251-0/+47
|
* Add originalDN to fake groupsJakub Hrozek2011-03-231-2/+2
|
* Delete attributes that are removed from LDAPStephen Gallagher2011-01-211-1/+1
| | | | | | | | Sometimes, a value in LDAP will cease to exist (the classic example being shadowExpire). We need to make sure we purge that value from SSSD's sysdb as well. https://fedorahosted.org/sssd/ticket/750
* Add sysdb_has_enumerated and sysdb_set_enumerated helper functionsStephen Gallagher2010-12-201-0/+40
| | | | Includes a unit test
* Fix unchecked return value in test_sysdb_attrs_to_listStephen Gallagher2010-12-171-3/+6
| | | | https://fedorahosted.org/sssd/ticket/714
* Fix const cast warnings in testsStephen Gallagher2010-11-151-1/+1
|
* Fix const cast warning for sysdb_update_membersStephen Gallagher2010-11-151-4/+4
|
* Add unit tests for users and groups with odd charactersStephen Gallagher2010-11-151-0/+145
|
* Modify sysdb_[add|remove]_group_member to accept users and groupsStephen Gallagher2010-10-181-5/+10
| | | | | | | | Previously, it assumed that all members were users. This changes the interface so that either a user or a group can be specified. Also, it eliminates the need for a memory context to be passed, since the internal memory should be self-contained.
* sysdb interface for adding incomplete groupsJakub Hrozek2010-10-151-0/+40
| | | | Useful for optimizing the initgroups operation.
* Also return member groups to the clientSumit Bose2010-10-131-44/+44
|
* netgroup testsStephen Gallagher2010-10-131-0/+516
|
* Use POPT_TABLEEND to close option tableSumit Bose2010-10-131-1/+1
|
* Fix sysdb_group_dn_nameJakub Hrozek2010-09-221-0/+35
|
* Add parameter to skip cleanup in sysdb testJakub Hrozek2010-09-151-1/+4
| | | | This might be useful for examining the test database manually with LDB tools
* Add sysdb_update_members functionStephen Gallagher2010-08-031-0/+56
| | | | | | | | This function will take a user, a list of groups that this user should be added to and a list of groups the user should be removed from and will recursively call sysdb_[add|remove]_group_member Includes a unit test
* Add sysdb_attrs_to_list() utility functionStephen Gallagher2010-08-031-0/+31
|
* Add support for delayed kinit if offlineSumit Bose2010-05-261-2/+2
| | | | | | | If the configuration option krb5_store_password_if_offline is set to true and the backend is offline the plain text user password is stored and used to request a TGT if the backend becomes online. If available the Linux kernel key retention service is used.
* Fix warning in sysdb-tests.cStephen Gallagher2010-04-141-8/+0
| | | | | | When we converted to the synchronous sysdb interface, the synchronous-simulating function test_loop() became unnecessary, but we forgot to remove it.