summaryrefslogtreecommitdiffstats
path: root/src/util
Commit message (Collapse)AuthorAgeFilesLines
* Limit krb5_get_init_creds_keytab() to etypes in keytabStef Walter2012-05-072-0/+145
| | | | | | | | | * Load the enctypes for the keys in the keytab and pass them to krb5_get_init_creds_keytab(). * This fixes the problem where the server offers a enctype that krb5 supports, but we don't have a key for in the keytab. https://bugzilla.redhat.com/show_bug.cgi?id=811375
* Remove erroneous failure message in find_principal_in_keytabStef Walter2012-05-071-1/+1
| | | | | * When it's actually a failure, then the callers will print a message. Fine tune this.
* Modify behavior of pam_pwd_expiration_warningJan Zeleny2012-05-042-0/+6
| | | | | | | | | | | | | | | | | | New option pwd_expiration_warning is introduced which can be set per domain and can override the value specified by the original pam_pwd_expiration_warning. If the value of expiration warning is set to zero, the filter isn't apllied at all - if backend server returns the warning, it will be automatically displayed. Default value for Kerberos: 7 days Default value for LDAP: don't apply the filter Technical note: default value when creating the domain is -1. This is important so we can distinguish between "no value set" and 0. Without this possibility it would be impossible to set different values for LDAP and Kerberos provider.
* Fix endian issue in SID conversionSumit Bose2012-05-041-0/+2
| | | | | | Since the byte-order is only important when dealing with the binary SID the sub-auth values are stored in host order and are only converted while reading or writing the binary SID.
* Handle endianness issues on older systemsStephen Gallagher2012-05-021-0/+17
| | | | | | | Older versions of glibc (like that on RHEL 5) do not have the le32toh() function exposed. We need this for handling the Active Directory ID-mapping, so we'll copy these macros from endian.h on a newer glibc.
* SERVER: use the correct return code of sss_atomic_write_sJakub Hrozek2012-05-021-1/+1
|
* execv, excvp and exec_child never return EOKStef Walter2012-05-012-8/+5
| | | | * So don't need to handle that case
* murmurhash: Relax inline requirementStephen Gallagher2012-04-241-2/+2
|
* Two fixes in responder subdomain codeJan Zeleny2012-04-241-1/+1
|
* SSH: Add support for hashed known_hostsJan Cholasta2012-04-242-3/+9
| | | | https://fedorahosted.org/sssd/ticket/1203
* UTIL: Add HMAC-SHA-1 functionJan Cholasta2012-04-243-0/+127
|
* Moved expand_homedir_template() from NSS responder to utility codeJan Zeleny2012-04-242-0/+167
|
* New config option for subdomainsJan Zeleny2012-04-241-0/+2
| | | | | subdomain_homedir - if set, it contains default value, can be overriden in further processing
* Add conn_name to allow different names for domains and connectionsJan Zeleny2012-04-241-2/+2
|
* Add some utility functions for subdomainsJan Zeleny2012-04-242-0/+119
|
* Convert read and write operations to sss_atomic_readJakub Hrozek2012-04-204-120/+89
| | | | https://fedorahosted.org/sssd/ticket/1209
* Move atomic io function to a separate moduleJakub Hrozek2012-04-204-43/+102
| | | | | | We'll be using it on various places of the SSSD. The function is in its own file to allow using just the one piece without having to drag in the whole util.c module.
* sss_atomic_io: Do not fail reads with EPIPE if there is not enough data to readJakub Hrozek2012-04-201-1/+2
| | | | Also adds a unit test for sss_atomic_io()
* Clean up log messages about keytab_nameStephen Gallagher2012-04-052-11/+21
| | | | | | | | | There were many places where we were printing (null) to the logs because a NULL keytab name tells libkrb5 to use its configured default instead of a particular path. This patch should clean up all uses of this to print "default" in the logs. https://fedorahosted.org/sssd/ticket/1288
* Fix off-by-one error in principal selectionJakub Hrozek2012-03-291-3/+3
| | | | https://fedorahosted.org/sssd/ticket/1269
* Add sss_get_cased_name_list utility functionJakub Hrozek2012-03-292-0/+41
|
* Always initialize the returned data in sss_krb5_princ_realm()Sumit Bose2012-03-261-0/+3
|
* Make the string_equal() function publicJakub Hrozek2012-03-212-0/+10
|
* nsssrv: add handling of memory cache group mapSimo Sorce2012-03-191-0/+10
|
* util: Helper headers for shared memory cacheSimo Sorce2012-03-191-0/+117
|
* Handle cases where UID is -1Stephen Gallagher2012-02-291-6/+1
| | | | | | | Also removes an unnecessary range check (since it's already handled by strtoint32() https://fedorahosted.org/sssd/ticket/1216
* SSH: Add missing break statements to sss_ssh_format_pubkeyJan Cholasta2012-02-271-0/+2
|
* SSH: Add more debugging messagesJan Cholasta2012-02-271-0/+1
|
* UTIL: Add function for atomic I/OJan Cholasta2012-02-262-0/+44
|
* SSH: Refactor responder and client common codeJan Cholasta2012-02-262-0/+233
|
* Don't give memory context in confdb where not neededJan Zeleny2012-02-211-4/+4
|
* Ensure NULL-termination in get_uid_from_pid()Stephen Gallagher2012-02-141-0/+3
| | | | Coverity #12399
* UTIL: Provide base64 encoding and decoding functionsJan Cholasta2012-02-074-36/+139
|
* Added some SELinux-related utility functionsJan Zeleny2012-02-062-0/+232
|
* UTIL: Add strtouint16Stephen Gallagher2012-01-232-0/+20
|
* Move sized_string declaration to utilsStephen Gallagher2012-01-232-0/+19
|
* Fix invalid index in pidfile()Stephen Gallagher2012-01-211-1/+3
| | | | | | | If we hit the "read too much, this should never happen" line, we would write a NULL-terminator past the end of the static buffer. Coverity 12472
* Raise the debug level of two very noisy statementsStephen Gallagher2012-01-171-2/+3
|
* Log fixes for sdap_call_conn_cbStephen Gallagher2012-01-141-1/+2
|
* util: Fix murmurhash3 on machines with old glibcSimo Sorce2012-01-091-0/+10
|
* util: add murmurhash3 hash functionSimo Sorce2012-01-092-0/+120
|
* Add compatibility layer for Heimdal Kerberos implementationStephen Gallagher2011-12-222-12/+73
|
* sss_get_cased_name utility functionJakub Hrozek2011-12-212-0/+13
|
* Reorder pidfile() function to guarantee NULL-terminationStephen Gallagher2011-12-191-3/+3
| | | | Coverity 12400
* Move child_common routines to utilStephen Gallagher2011-12-192-0/+844
|
* Use of uninitialized value in sss_ldap_dn_in_search_basesPavel Březina2011-12-161-3/+3
| | | | https://fedorahosted.org/sssd/ticket/1112
* sss_utf8_tolower utility function+unit testsJakub Hrozek2011-12-165-0/+123
|
* Added sss_ldap_dn_in_search_bases()Pavel Březina2011-12-142-0/+132
|
* Fix potential resource leak in backup_file.cStephen Gallagher2011-12-091-1/+1
|
* Always attempt to connect in sdap_async_sys_connect_doneJakub Hrozek2011-12-071-18/+6
| | | | This syncs up with Samba commit 50e30afa608dfdeae8a260730ead9761ed424dad