sssd.git - sssd with jhrozek's patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	tools: remove creation of event_context	Simo Sorce	2010-04-12	10	-47/+3
\| \| \| \| \|	Since the sysdb is now synchronous and creates its own event context we don't need an explicit event context anymore in the tools.
*	Make groupshow synchronous.	Simo Sorce	2010-04-12	1	-310/+105
\| \| \| \| \| \| \| \|	I tried to convert this code as mechanically as possible from the previously existing code. I am not sure it works right, and it will probably recurse infinetly as circular group memberships are admitted in sysdb. The original code had the same issues. This code should be probably discarded and redone from scratch.
*	sysydb: Finally stop using a common event context	Simo Sorce	2010-04-12	10	-30/+14
\| \| \| \|	This commit completes the migration to a synchronous sysdb
*	sysdb: remove remaining traces of sysdb_handle	Simo Sorce	2010-04-12	11	-237/+1
\|
*	sysdb: remove obsolete helpers from sysdb	Simo Sorce	2010-04-12	2	-158/+0
\|
*	sysdb: convert sysdb_initgroups	Simo Sorce	2010-04-12	3	-318/+166
\|
*	Adjust fill_pwent and fill_grent	Simo Sorce	2010-04-12	1	-13/+13
\| \| \| \| \| \| \| \| \|	fill_pwent should return the number of users actually processed. Otherwise in case of a recoverable error we may end up skipping a large chunk of users. fill_grent doesn't need to distinguish between number of entries and number of groups to process since we started adding memberuid. Remove remnants that are not useful anymore.
*	sysdb: convert sysdb_enumgrent	Simo Sorce	2010-04-12	4	-249/+147
\|
*	sysdb: convert sysdb_enumpwent	Simo Sorce	2010-04-12	4	-259/+144
\|
*	sysdb: convert sysdb_get_user_attr	Simo Sorce	2010-04-12	6	-293/+160
\|
*	sysdb: convert sysdb_getgrgid	Simo Sorce	2010-04-12	4	-263/+160
\|
*	sysdb: convert sysdb_getgrnam	Simo Sorce	2010-04-12	10	-394/+253
\|
*	sysdb: convert sysdb_getpwuid	Simo Sorce	2010-04-12	4	-265/+146
\|
*	sysdb: convert sysdb_getpwnam	Simo Sorce	2010-04-12	12	-623/+415
\|
*	sysdb: add automatic transactions where needed	Simo Sorce	2010-04-12	1	-7/+47
\| \| \| \| \| \|	Only functions that do multiple operations need explicit transactions as ldb_add/ldb_modify/ldb_delete already start transactions automatically intenrally.
*	sysdb: remove async transactions	Simo Sorce	2010-04-12	2	-157/+0
\| \| \| \|	not used anymore
*	Remove remaining use of sysdb_transaction_send	Simo Sorce	2010-04-12	5	-723/+205
\|
*	Use the sysdb synchronous transaction functions	Simo Sorce	2010-04-12	7	-424/+104
\|
*	proxy: complete conversion to synchronous sysdb	Simo Sorce	2010-04-12	1	-1113/+428
\| \| \| \|	This makes proxy use only synchronous functions again.
*	sysdb: add synchronous transaction functions	Simo Sorce	2010-04-12	2	-14/+37
\|
*	tests: remove use of asynchronus transactions	Simo Sorce	2010-04-12	1	-502/+86
\| \| \| \|	now all calls are synchronous
*	sysdb: remove sysdb_check_handle	Simo Sorce	2010-04-12	1	-90/+0
\| \| \| \|	not used anymore
*	sysdb: convert sysdb_cache_auth	Simo Sorce	2010-04-12	4	-264/+136
\|
*	sysdb: convert sysdb_search_groups	Simo Sorce	2010-04-12	4	-410/+151
\|
*	sysdb: delete sysdb_delete_group	Simo Sorce	2010-04-12	6	-321/+109
\|
*	sysdb: convert sysdb_delete_user	Simo Sorce	2010-04-12	6	-356/+115
\|
*	sysdb: convert sysdb_search_users	Simo Sorce	2010-04-12	3	-169/+72
\|
*	sysdb remove sldb_request_send, not used anymore	Simo Sorce	2010-04-12	1	-125/+0
\|
*	sysdb: convert sysdb_asq_search	Simo Sorce	2010-04-12	4	-358/+140
\|
*	sysdb: convert sysdb_store_custom	Simo Sorce	2010-04-12	4	-258/+93
\|
*	sysdb: convert sysdb_search_custom	Simo Sorce	2010-04-12	4	-371/+229
\|
*	sysdb: convert sysdb_cache_password	Simo Sorce	2010-04-12	6	-209/+62
\|
*	sysdb: convert sysdb_mod/add/remove_group_member	Simo Sorce	2010-04-12	4	-628/+117
\|
*	sysdb: convert sysdb_store/add(_basic)_group	Simo Sorce	2010-04-12	6	-850/+294
\|
*	sysdb: convert sysdb_store/add(_basic)_user	Simo Sorce	2010-04-12	6	-891/+430
\|
*	sysdb: convert sysdb_get_new_id	Simo Sorce	2010-04-12	2	-397/+136
\|
*	sysdb: convert sysdb_set_entry/user/group_attr	Simo Sorce	2010-04-12	7	-589/+144
\|
*	sysdb: convert sysdb_search_group_by_name/gid	Simo Sorce	2010-04-12	4	-596/+277
\|
*	sysdb: convert sysdb_search_user_by_name/uid	Simo Sorce	2010-04-12	4	-616/+219
\|
*	sysdb: convert sysdb_search_entry and sysdb_delete_recursive	Simo Sorce	2010-04-12	5	-456/+121
\|
*	sysdb: convert sysdb_delete_custom	Simo Sorce	2010-04-12	3	-147/+36
\|
*	sysdb: use sysdb_delete_entry in recursive delete	Simo Sorce	2010-04-12	1	-58/+8
\|
*	sysdb: convert sysdb_delete_entry	Stephen Gallagher	2010-04-12	9	-430/+101
\|
*	sysdb: start conversion from async to sync	Simo Sorce	2010-04-12	1	-0/+4
\| \| \| \|	allow nesting during transition
*	Support docdir and abs_builddir	Stephen Gallagher	2010-04-12	1	-0/+1
\| \| \| \| \| \| \| \|	Old versions of autoconf (before 2.60) did not include support for the docdir and abs_builddir variables. This patch emulates support for them. Fixes https://fedorahosted.org/sssd/ticket/422
*	Updating IT translation	Guido Grazioli	2010-04-08	1	-135/+160
\|
*	SELinux login management	Jakub Hrozek	2010-04-08	11	-0/+434
\| \| \| \| \| \| \| \| \| \|	Adds a new option -Z to sss_useradd and sss_usermod. This option allows user to specify the SELinux login context for the user. On deleting the user with sss_userdel, the login mapping is deleted, so subsequent adding of the same user would result in the default login context unless -Z is specified again. MLS security is not supported as of this patch.
*	Move SELinux related functions into its own module	Jakub Hrozek	2010-04-08	4	-60/+86
\| \| \| \|	Fix whitespace errors
*	Adding Russion Translation	Dmitry Drozdov	2010-04-07	2	-0/+861
\|
*	Protect against check-and-open race conditions	Stephen Gallagher	2010-04-06	3	-30/+79
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	There is a small window between running lstat() on a filename and opening it where it's possible for the file to have been modified. We were protecting against this by saving the stat data from the original file and verifying that it was the same file (by device and inode) when we opened it again, but this is an imperfect solution, as it is still possible for an attacker to modify the permissions during this window. It is much better to simply open the file and test on the active file descriptor. Resolves https://fedorahosted.org/sssd/ticket/425 incidentally, as without the initial lstat, we are implicitly accepting symlinks and only verifying the target file.