summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* SYSDB: add index for nameAliasStephen Gallagher2011-11-023-1/+97
|
* Handle group renaming correctlyJan Zeleny2011-11-021-2/+7
| | | | https://fedorahosted.org/sssd/ticket/1040
* Support to request canonicalization in LDAP/IPA providerJan Zeleny2011-11-0210-1/+45
| | | | https://fedorahosted.org/sssd/ticket/957
* Add support to request canonicalization on krb AS requestsJan Zeleny2011-11-0210-6/+68
| | | | https://fedorahosted.org/sssd/ticket/957
* Add wrapper for krb5_get_init_creds_opt_set_canonicalizeJan Zeleny2011-11-023-0/+14
|
* Fixes debug-tests.c coverity issues: NEGATIVE_RETURNS, FORWARD_NULLPavel Březina2011-11-021-49/+140
| | | | https://fedorahosted.org/sssd/ticket/1046
* RESPONDER: Fix segfault in sss_packet_send()Stephen Gallagher2011-11-021-0/+5
| | | | | | | | | There are several places (all error-handling) where sss_cmd_done() is called with no response packet created. As a short-term solution, we need to check whether the packet is NULL and simply return EINVAL. client_send() (the consumer) will then forcibly disconnect the client (which will return PAM_SYSTEM_ERR to the client).
* LDAP: Add support for multiple search bases for group enumerationStephen Gallagher2011-11-024-24/+101
|
* LDAP: Add support for multiple search bases for user enumerationStephen Gallagher2011-11-024-8/+49
|
* LDAP: Convert ldap_*_search_filterStephen Gallagher2011-11-023-59/+23
| | | | | | Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter.
* LDAP: Update manpages with multiple search base informationStephen Gallagher2011-11-021-1/+56
|
* LDAP: Add multiple search bases for initgroups (RFC2307bis groups)Stephen Gallagher2011-11-021-77/+225
|
* LDAP: Add multiple search bases for initgroups (RFC2307 groups)Stephen Gallagher2011-11-021-17/+99
|
* LDAP: Add multiple search bases for initgroups (users)Stephen Gallagher2011-11-021-30/+72
|
* LDAP: Support multiple group search bases (non-enumeration, RFC2307)Stephen Gallagher2011-11-024-16/+74
|
* LDAP: Support multiple netgroup search basesStephen Gallagher2011-11-023-14/+65
|
* LDAP: Support multiple user search bases (non-enumeration)Stephen Gallagher2011-11-024-14/+70
|
* LDAP: Add parser for multiple search basesStephen Gallagher2011-11-025-26/+380
|
* Make sdap_get_id_specific_filter() more strictStephen Gallagher2011-11-022-4/+4
|
* Fix size return for split_on_separator()Stephen Gallagher2011-11-022-6/+6
| | | | | | | It was returning the size of the array, rather than the number of elements. (The array was NULL-terminated). This argument was only used in one place that was actually working around this odd return value.
* Remove unused sdap_options attributesStephen Gallagher2011-11-021-3/+0
| | | | These DNs were never assigned or referenced anywhere.
* Cleanup of unused function in ldap access providerJan Zeleny2011-11-021-2/+0
|
* Remove confusing do-while loopJakub Hrozek2011-11-021-35/+36
| | | | | The deref processing would return a single control back. The do-while loop was harmless but confusing.
* Use LDAPDerefSpec properlyJakub Hrozek2011-11-021-4/+6
| | | | | | | | ldap_create_deref_control_value expects an array of LDAPDerefSpec structures with LDAPDerefSpec.derefAttr == NULL as a sentinel. We were passing a single instance of a LDAPDerefSpec structure. https://fedorahosted.org/sssd/ticket/1050
* Steal result onto mem_ctx in sdap_initgr_nested_get_direct_parentsJakub Hrozek2011-10-311-2/+1
|
* RFC2307bis initgroups: fix nested groups processingJakub Hrozek2011-10-311-20/+33
| | | | | Due to incorrectly written loop, SSSD would go into infitite loop if it processed the same group on two different levels of membership.
* resolver: Free the whole hostent structureJakub Hrozek2011-10-311-1/+1
| | | | | We would only free the hostent structure itself, not its contents. Use a wrapper provided by c-ares to do so.
* Do not leak hash table iterator during proxy authJakub Hrozek2011-10-311-0/+1
|
* Plug memory leaks in sysdb_opsJakub Hrozek2011-10-311-20/+54
| | | | https://fedorahosted.org/sssd/ticket/1051
* Added krb5_fast_principal to SSSDConfig APIJan Zeleny2011-10-314-3/+9
|
* SSSDConfig: Handle integer parsing more lenientlyStephen Gallagher2011-10-252-1/+4
| | | | | | Allow the base to be auto-detected rather than limited to base 10 Add hexadecimal integer test
* Plug memory leaks in LDAP providerJakub Hrozek2011-10-251-0/+3
|
* Updating translation filesStephen Gallagher2011-10-1835-2496/+148969
|
* Cancel transactions correctly during initgroupsJakub Hrozek2011-10-171-13/+31
|
* Use fewer transactions during IPA initgroupsJakub Hrozek2011-10-171-171/+273
|
* Use fewer transactions during RFC2307bis initgroupsJakub Hrozek2011-10-171-346/+366
|
* Utility functions for LDAP nested schema initgroupsJakub Hrozek2011-10-171-0/+119
|
* MONITOR: fix timeout conversionStephen Gallagher2011-10-171-1/+1
|
* Sanitize DN in sysdb_get_direct_parentsJakub Hrozek2011-10-171-1/+7
|
* Add a missing breakJakub Hrozek2011-10-171-0/+1
|
* Update sssd-example.confMarko Myllynen2011-10-141-3/+6
| | | | | | Mention cache_credentials and tweak the AD example to match the wiki page. https://fedorahosted.org/sssd/wiki/Configuring%20sssd%20to%20authenticate%20with%20a%20Windows%202008%20Domain%20Server
* TOOLS: Do not leak pid_file handle on errorStephen Gallagher2011-10-141-1/+2
| | | | Coverity 11032
* Report on errno, not return code in create_socket_symlinkJakub Hrozek2011-10-141-0/+2
| | | | https://fedorahosted.org/sssd/ticket/1044
* Fix off-by-one error in remove_socket_symlink()Jakub Hrozek2011-10-141-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1043
* Fixed timeout handling in respondersJan Zeleny2011-10-141-72/+72
|
* HBAC: Use originalMember for identifying hostgroupsStephen Gallagher2011-10-143-45/+165
|
* HBAC: Use originalMember for identifying servicegroupsStephen Gallagher2011-10-143-41/+169
|
* HBAC: Do not save member/memberOf linksStephen Gallagher2011-10-141-120/+0
| | | | We can just trust the values from the FreeIPA server
* SysDB commands that save lastUpdate allows this value to be passed inPavel Březina2011-10-1311-77/+130
| | | | https://fedorahosted.org/sssd/ticket/836
* Check if dp_requests hash table exists before using itJakub Hrozek2011-10-131-0/+5
|