summaryrefslogtreecommitdiffstats
path: root/src/tools
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove the sysdb_ctx_get_domain() function.Simo Sorce2013-01-151-10/+11
| | | | | We are deprecating sysdb->domain so kill the function that gives access to this member as we should stop relying on it being available (or correct).
* Refactor single domain initializationSimo Sorce2013-01-153-9/+6
| | | | | Bring it out of sysdb, which will slowly remove internal dependencies on domains and instead will always require them to be passed by callers.
* Refactor sysdb initializationSimo Sorce2013-01-151-21/+10
| | | | | | | | | | | | Change the way sysdbs are initialized. Make callers responsible for providing the list of domains. Remove the returned array of sysdb contexts, it was used only by sss_cache and not really necessary there either as that tool can easily iterate the domains. Make sysdb ctx children of their respective domains. Neither sysdb context nor domains are ever freed until a program is done so there shouldn't be any memory hierarchy issue. As plus we simplify the code by removing a destructor and a setter function.
* Use new sysdb_search_service() in sss_cacheSimo Sorce2013-01-141-35/+4
| | | | Also fixes https://fedorahosted.org/sssd/ticket/1754
* Revert "Add a default section to a switch-statement"Simo Sorce2013-01-091-12/+8
| | | | | | | This reverts commit d698499602461b98fd56f2d550f80c6cb25f12a9. And adds the correct fix. Also makes the function static,as it is used nowehere else.
* Add a default section to a switch-statementSumit Bose2013-01-091-0/+3
| | | | | Besides adding the missing default this patch suppresses a compiler warning about ret being uninitialized.
* Remove unhelpful vtable from sss_cacheSimo Sorce2013-01-081-24/+30
| | | | | | | | | Using a vtable like this has various drawacks, including the fact prototypes are not checked by the compiler so the code could silently break and still compile fine (in fact I found this out changing one of the prototypes). A switch statement is also better because it catches if the enum changed and won't risk allowing to access the table out of bounds.
* sss_cache: fqdn not acceptedMichal Zidek2013-01-041-14/+149
| | | | | | sss_cache did not accept fully quaified domain names. https://fedorahosted.org/sssd/ticket/1620
* tools: sss_userdel and groupdel remove entries from memory cacheMichal Zidek2012-12-132-0/+47
| | | | https://fedorahosted.org/sssd/ticket/1659
* sss_cache: Small refactor.Michal Zidek2012-11-283-58/+72
| | | | | | | The logic that checks if sssd_nss is running and then sends SIGHUP to monitor or removes the caches was moved to a function sss_memcache_clear_all() and made public in tools_util.h.
* LDAP: Only convert direct parents' ghost attribute to memberJakub Hrozek2012-11-202-2/+3
| | | | | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1612 This patch changes the handling of ghost attributes when saving the actual user entry. Instead of always linking all groups that contained the ghost attribute with the new user entry, the original member attributes are now saved in the group object and the user entry is only linked with its direct parents. As the member attribute is compared against the originalDN of the user, if either the originalDN or the originalMember attributes are missing, the user object is linked with all the groups as a fallback. The original member attributes are only saved if the LDAP schema supports nesting.
* Display more information on DB version mismatchOndrej Kos2012-11-193-0/+4
| | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1589 Added check for determining, whether database version is higher or lower than expected. To distinguish it from other errors it uses following retun values (further used for appropriate error message): EMEDIUMTYPE for lower version than expected EUCLEAN for higher version than expected When SSSD or one of it's tools fails on DB version mismatch, new error message is showed suggesting how to proceed.
* sss_cache: Remove fastcache even if sssd is not running.Michal Zidek2012-11-063-20/+152
| | | | https://fedorahosted.org/sssd/ticket/1584
* sss_cache: Multiple domains not handled properlyMichal Zidek2012-11-061-35/+37
| | | | | | | | | | When working with multiple domains and no matching objects for deletion were found in the first domain, the other domains were not searched at all. Also the ERROR message informing about object not found (the one printed for each domain) was changed to DEBUG message.
* Include talloc log in our debug facilityMichal Zidek2012-10-2910-10/+10
| | | | https://fedorahosted.org/sssd/ticket/1495
* sss_debuglevel: Multiple arguments are treated as error.Michal Zidek2012-10-161-0/+6
| | | | https://fedorahosted.org/sssd/ticket/1327
* sss_seed: Improved error message when the domain does not exist.Michal Zidek2012-10-031-2/+5
| | | | https://fedorahosted.org/sssd/ticket/1553
* sss_seed: Passwords longer then PASS_MAX not allowed.Michal Zidek2012-10-031-1/+8
| | | | | | | | sss_seed fails if password file specified with -p or --password-file option contains password longer than PASS_MAX. Man pages inform about PASS_MAX limitation.
* sss_seed: Make only first line of password file valid.Michal Zidek2012-10-031-0/+36
| | | | | | | | When file is used to specify a password in sss_seed, then only first line of this file is used. Also empty passwords are treated as errors. https://fedorahosted.org/sssd/ticket/1548
* sss_seed: Show error message when interactive input fails.Michal Zidek2012-10-031-0/+1
| | | | https://fedorahosted.org/sssd/ticket/1549
* sss_seed: Option --debug did not work in sss_seed tool.Michal Zidek2012-10-031-4/+4
| | | | | | | debug_level was set before the parameters were parsed, so the default debug_level value was always used. Also CHECK_ROOT macro was used on bad place, so only root was able to run sss_seed --help/-?.
* SYSDB: Remove unnecessary domain parameter from several sysdb callsJakub Hrozek2012-09-242-13/+6
| | | | | The domain can be read from the sysdb object. Removing the domain string makes the API more self-contained.
* sss_cache tool invalidates records in memory cache.Michal Zidek2012-09-241-0/+26
|
* tools_util.h provides signal_sssd function.Michal Zidek2012-09-243-99/+99
|
* Unify usage of sysdb transactionsMichal Zidek2012-08-236-11/+67
| | | | | | Removing bad examples of usage of sysdb_transaction_start/commit/end functions and making it more consistent (all files except of src/db/sysdb_*.c).
* Return value of fread in src/tools/sss_debuglevel.c no longer ignored.Michal Zidek2012-08-031-1/+9
| | | | https://fedorahosted.org/sssd/ticket/1426
* First-boot sss_seed toolNick Guay2012-08-011-0/+829
|
* Make re_expression and full_name_format per domain optionsStef Walter2012-06-121-1/+1
| | | | | | | | | | | * Allows different user/domain qualified names for different domains. For example Domain\User or user@domain. * The global re_expression and full_name_format options remain as defaults for the domains. * Subdomains get the re_expression and full_name_format of their parent domain. https://bugzilla.redhat.com/show_bug.cgi?id=811663
* Ghost members - modified sss_groupshowJan Zeleny2012-05-311-4/+40
|
* Always use positional arguments in translatable stringsStephen Gallagher2012-05-228-23/+23
| | | | https://fedorahosted.org/sssd/ticket/1336
* SSS_DEBUGLEVEL: silence analyzer warningsJakub Hrozek2012-05-031-2/+3
| | | | | | | Errno was returned instead of ret. The other hunk removes return code from fread - it is not needed, the NULL termination of the string is ensured by initializing the buffer.
* Convert read and write operations to sss_atomic_readJakub Hrozek2012-04-201-32/+19
| | | | https://fedorahosted.org/sssd/ticket/1209
* sss_cache: Better error reportingJakub Hrozek2012-04-181-37/+94
| | | | | | | | | | * Print usage when no options are given * Report skipped entries * Print error message when a nonexistent domain is selected https://fedorahosted.org/sssd/ticket/1301 https://fedorahosted.org/sssd/ticket/1305 https://fedorahosted.org/sssd/ticket/1306
* sss_cache: support invalidating services and autofs mapsJakub Hrozek2012-04-181-9/+118
| | | | https://fedorahosted.org/sssd/ticket/1170
* Hide --debug option in sss_debuglevelPavel Březina2012-03-021-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1224
* Keep sysdb context in domain info structSumit Bose2012-02-292-16/+4
|
* pam_sss: keep selinux optionalSimo Sorce2012-02-231-3/+0
| | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
* Don't give memory context in confdb where not neededJan Zeleny2012-02-211-3/+3
|
* Cleanup: Remove unused parametersJakub Hrozek2011-11-227-39/+30
|
* Fixed possible resource leak in create_mail_spool()Jan Zeleny2011-11-071-9/+9
| | | | https://fedorahosted.org/sssd/ticket/1071
* TOOLS: Do not leak pid_file handle on errorStephen Gallagher2011-10-141-1/+2
| | | | Coverity 11032
* SysDB commands that save lastUpdate allows this value to be passed inPavel Březina2011-10-131-2/+2
| | | | https://fedorahosted.org/sssd/ticket/836
* Use explicit base 10 for converting strings to integersJakub Hrozek2011-10-031-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1013
* Multiline macro cleanupJakub Hrozek2011-09-281-1/+1
| | | | | | | | | | This is mostly a cosmetic patch. The purpose of wrapping a multi-line macro in a do { } while(0) is to make the macro usable as a regular statement, not a compound statement. When the while(0) is terminated with a semicolon, the do { } while(0); block becomes a compound statement again.
* sss_debuglevel - change the debug levels on the flyPavel Březina2011-09-061-0/+393
| | | | https://fedorahosted.org/sssd/ticket/950
* New DEBUG facility - SSSDBG_UNRESOLVED changed from -1 to 0Pavel Březina2011-08-258-8/+8
| | | | | | | | | | | | | | | | | | | | | Removed: SSS_UNRESOLVED_DEBUG_LEVEL (completely replaced with SSSDBG_UNRESOLVED) Added new macro: CONVERT_AND_SET_DEBUG_LEVEL(new_value) Changes unresolved debug level value (SSSDBG_UNRESOLVED) from -1 to 0 so DEBUG macro could be reduced by one condition. Anyway, it has a minor effect, every time you want to load debug_level from command line parameters, you have to use following pattern: /* Set debug level to invalid value so we can deside if -d 0 was used. */ debug_level = SSSDBG_INVALID; pc = poptGetContext(argv[0], argc, argv, long_options, 0); while((opt = poptGetNextOpt(pc)) != -1) { ... } CONVERT_AND_SET_DEBUG_LEVEL(debug_level);
* New DEBUG facility - conversionPavel Březina2011-08-259-21/+9
| | | | | | | | | | https://fedorahosted.org/sssd/ticket/925 Conversion of the old debug_level format to the new one. (only where it was necessary) Removed: SSS_DEFAULT_DEBUG_LEVEL (completely replaced with SSSDBG_DEFAULT)
* sysdb refactoring: memory context deletedJan Zeleny2011-08-152-13/+9
| | | | | | This patch deletes memory context parameter in those places in sysdb where it is not necessary. The code using modified functions has been updated. Tests updated as well.
* sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny2011-08-1510-45/+23
| | | | | The patch also updates code using modified functions. Tests have also been adjusted.
* Replace system() function with fork and execl call.Matthew Ife2011-07-011-22/+30
| | | | | | | | | | This is much more selinux friendly as it allows policy makers to call nscd_domtrans to transition to nscd_t instead of giving more access to the system via the corcmd_exec_bin macro. Modified-by: Simo Sorce <ssorce@redhat.com> Signed-off-by: Simo Sorce <ssorce@redhat.com>
generated by cgit (git 2.34.1) at 2024-05-19 14:55:56 +0000