summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* intg: Fix RFC2307bis group member creationsssd-1-13Nikolai Kondrashov2015-10-091-14/+7
| | | | | | | | Fix creation of mixed user/group "member" attribute for RFC2307bis group entries in ldap_ent.py. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit c65de71bc38753320b9fd6f6fe1386244a2ff54a)
* intg: Reduce sssd.conf duplication in test_ldap.pyNikolai Kondrashov2015-10-091-95/+45
| | | | | | | | Use a function to generate basic sssd.conf in test_ldap.py to reduce code duplication. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 472800eda2ef4dfa3a738806d7adbc52be3fbe9c)
* intg: Split LDAP test fixtures for flexibilityNikolai Kondrashov2015-10-091-30/+83
| | | | | | | | Split ldap_test.py fixtures into several functions to allow for partial fixtures and direct use within tests. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 19c2d951059498703c28aea2ce2d9c3db71a8820)
* intg: Add support for specifying all user attrsNikolai Kondrashov2015-10-091-12/+39
| | | | | | | | Support passing all user attributes to ldap_ent.py's user-creation functions, in integration tests. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit c423ad75a56b199083463a2714c8fbfd6e8edcc8)
* intg: Get base DN from LDAP connection objectNikolai Kondrashov2015-10-092-5/+5
| | | | | | | | | Don't use the global LDAP_BASE_DN in integration tests and fixtures, but instead take it from the LDAP connection object (ldap_conn) passed to them explicitly. This makes the tests and fixtures a bit more modular. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit a190e39ea4f2c084091be1cd37a3c6e3b603540e)
* tests: Fix compilation warningJakub Hrozek2015-10-091-8/+8
| | | | | Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 6c2e507bd1571f9c7e26c5c9d60753b29fb75578)
* sss_override: steal msgs string to objsPavel Březina2015-10-081-0/+9
| | | | | | | | | | | Since msgs is attached to tmp_ctx then all the strings are freed with tmp_ctx. Now steal the strings to objs. Resolves: https://fedorahosted.org/sssd/ticket/2826 Reviewed-by: Pavel Reichl <preichl@redhat.com> (cherry picked from commit 3119225929463aecfbb1a7fc953263736955271e)
* sss_override: explicitly set ret = EOKPavel Březina2015-10-081-0/+2
| | | | | Reviewed-by: Pavel Reichl <preichl@redhat.com> (cherry picked from commit 220a4cbb7fcf30d954b2b4fecd62887373aa8764)
* sss_override: fix comment describing formatPavel Březina2015-10-081-1/+1
| | | | | Reviewed-by: Pavel Reichl <preichl@redhat.com> (cherry picked from commit 1bf0ada00f59c153fe00853394508021d0ff9b24)
* nss: fix UPN lookups for sub-domain usersSumit Bose2015-10-082-3/+11
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 8ded8b2f4a57d1833fd230307218d8b07a571785)
* fix upn cache_req for sub-domain usersSumit Bose2015-10-081-2/+7
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 374268c5eda35e8bbc2fef30752299199439cffe)
* fix ldb_search usageSumit Bose2015-10-081-8/+1
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 391b81f2a78a812a87530e0c50c70d59150f49eb)
* cache_req: remove raw_name and do not touch orig_namePavel Březina2015-10-081-23/+29
| | | | | | | | Parsed name or UPN is now stored in input->name instead of touching orig_name and storing the original name in raw_name. Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 2fce47f2dadd10d2a2c8bf9f03ab7094bc6c6b3a)
* cache_req tests: reduce code duplicationPavel Březina2015-10-081-1230/+394
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 3688374991afb34bbaf2b7843683fc13dd77879d)
* cache_req: add support for UPNPavel Březina2015-10-089-42/+674
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 28ebfa4373d1e7ce45b5d70a3619df1c074a661e)
* cache_req: provide extra flag for oob requestPavel Březina2015-10-081-5/+6
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit d8125f0e0d38c6939887a0849a44859d6c498c57)
* BUILD: Remove unused variable TEST_MOCK_OBJLukas Slebodnik2015-10-081-2/+0
| | | | | Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit a4ed6c3a56b68f0deb27f291df510c3ba735f836)
* BUILD: Link crypto_tests with existing libraryLukas Slebodnik2015-10-081-5/+4
| | | | | | | | It's not necessary to bundle libsss_crypto to crypto_tests. We can link it directly. Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit 8f61739e0de45ce2ee3be436fc91ef12a1a1c4f3)
* BUILD: Link just libsss_crypto with crypto librariesLukas Slebodnik2015-10-081-3/+5
| | | | | | | | | It should prevent such failures as in commit 73ec8fdfddb2d4bf99977f758eec80e1b1ee8542 BUILD: Link test_data_provider_be with -ldl Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit 69b46c32357ccf1aab9c0bd6d1afa33a8724ad77)
* AD: Consolidate connection list construction on ad_common.cJakub Hrozek2015-10-074-17/+71
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit afb21fd06690a0bec288a7970abf74ed2ea7dfdc)
* AD: Provide common connection list construction functionsJakub Hrozek2015-10-075-34/+80
| | | | | | | | | | | https://fedorahosted.org/sssd/ticket/2810 Provides a new AD common function ad_ldap_conn_list() that creates a list of AD connection to use along with properties to avoid mistakes when manually constructing these lists. Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 309aa83d16b5919f727af04850bcd0799ba0962f)
* CI: Exclude whitespace_test from Valgrind checksNikolai Kondrashov2015-10-051-1/+4
| | | | | | | | Exclude whitespace_test from Valgrind checks in contrib/ci/run to prevent it from failing the tests due to Bash bugs. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 8dff4a773dd9525ec587cd31646a9f67252122c1)
* sbus codegen tests: free ctxPavel Březina2015-10-051-0/+2
| | | | | | | | | | | Memory context was not freed therefore we got stuck in tevent loop that mocks D-Bus. Resolves: https://fedorahosted.org/sssd/ticket/2759 Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit e51143e3e67c70b86dd9a67cb7e802dd96f989e1)
* SDAP: Relax POSIX checkPavel Reichl2015-10-021-4/+6
| | | | | | | | | | | | | | Relax the check on UID or GID just to check if at least one of them is present but do not require them to be positive numbers. Add requirement on objectclass attributes to be user or group to make check more reliable. Resolves: https://fedorahosted.org/sssd/ticket/2800 (cherry picked from commit 6735c0451d4e80d7cd4b480a8c1f7dafb2b536ea) Reviewed-by: Pavel Březina <pbrezina@redhat.com>
* sss tools: improve option handlingPavel Březina2015-10-022-20/+30
| | | | | | | | | | | | | The crash describe by ticket #2802 is caused by providing NULL options in popt and yet trying to iterate over them. Instead of simply testing for NULL this patch creates a new option table table merges several option tables together, thus improving and simplifying usage string. Resolves: https://fedorahosted.org/sssd/ticket/2802 Reviewed-by: Pavel Reichl <preichl@redhat.com> (cherry picked from commit bda8039465a0084fb380e878c8f9ea3e900505ea)
* PAM: only allow missing user name for certificate authenticationSumit Bose2015-10-022-3/+47
| | | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2811 Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 2e76b32e74abedb23665808bacc73cafd1097c37)
* CI: Update reason blocking move to DNFNikolai Kondrashov2015-10-011-1/+1
| | | | Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
* CI: Run integration tests on debian testingLukas Slebodnik2015-09-301-1/+8
| | | | Reviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>
* CI: Add missing dependency for debianLukas Slebodnik2015-09-301-0/+1
| | | | | | | | | | All test failed due to missing /usr/bin/libtool e.g. /home/build/sssd/build/test-driver: line 107: libtool: command not found FAIL test-io (exit status: 127) Reviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>
* CI: Don't depend on user input with apt-getLukas Slebodnik2015-09-302-1/+7
| | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2433 Reviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>
* confdb: warn if memcache_timeout > than entry_cachePavel Reichl2015-09-301-0/+25
| | | | | | | | | | Only group and user records are cached in memory cache so only timeouts for those are checked. Resolves: https://fedorahosted.org/sssd/ticket/2176 Reviewed-by: Pavel Březina <pbrezina@redhat.com>
* AD: add debug messages for netlogon get infoPavel Reichl2015-09-301-1/+4
| | | | Reviewed-by: Petr Cech <pcech@redhat.com>
* CI: Fix configure script arguments for CentOSLukas Slebodnik2015-09-301-2/+4
| | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2807 Reviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>
* Bump the version for the 1.13.2 developmentJakub Hrozek2015-09-301-1/+1
|
* Updating translations for the 1.13.1 releasesssd-1_13_1Jakub Hrozek2015-09-3038-14451/+20577
|
* AD: inicialize root_domain_attrs fieldPavel Reichl2015-09-301-1/+2
| | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2805 Reviewed-by: Pavel Březina <pbrezina@redhat.com>
* test_pam_srv: Run cert test only with NSSLukas Slebodnik2015-09-301-0/+3
| | | | Reviewed-by: Michal Židek <mzidek@redhat.com>
* sysdb-tests: Use valid base64 encoded certificate for searchLukas Slebodnik2015-09-301-1/+1
| | | | | | | sh$ printf "ABC" | base64 -d base64: invalid input Reviewed-by: Michal Židek <mzidek@redhat.com>
* BUILD: Link test_data_provider_be with -ldlLukas Slebodnik2015-09-301-0/+1
| | | | | | | | | | | | | | | | | | The module data_provider_be.o uses uncfion dlsym and thus need to be linked with -ldl. /usr/bin/ld: src/providers/test_data_provider_be-data_provider_be.o: undefined reference to symbol 'dlsym@@GLIBC_2.2.5' /usr/lib64/libdl.so.2: error adding symbols: DSO missing from command line collect2: error: ld returned 1 exit status Makefile:10461: recipe for target 'test_data_provider_be' failed It was not a problem when sssd was compiled with NSS because it contains -ldl among its flags. NSS_LIBS='-lssl3 -lsmime3 -lnss3 -lnssutil3 -lplds4 -lplc4 -lnspr4 -lpthread -ldl ' However the compilation failed when sssd was compiled with libcrypto Reviewed-by: Michal Židek <mzidek@redhat.com>
* IFP: Suppress warning from static analyzerLukas Slebodnik2015-09-263-6/+6
| | | | | | | It seems that clang expected that errno can change to 0 in case of error. It might be a bug in static analyzer. But the workaround does not change the logic and the errno is read just once.
* CONFIGURE: Remove bashismLukas Slebodnik2015-09-263-3/+3
| | | | | | | | | | | | | | There were errors in configure script when /bin/sh was not bash ./configure: 15889: test: xfedora: unexpected operator ./configure: 19981: test: xyes: unexpected operator ./configure: 23103: test: x1: unexpected operator The equality operator "==" works in bash but it's not a standard. The man page test(1) also does not mention it. There is only short version "=" STRING1 = STRING2 the strings are equal
* BUILD: Remove unused variable SSSD_UTIL_OBJLukas Slebodnik2015-09-241-2/+0
| | | | | | | It was removed as part of commit fe2091327ff44f80d6681c261494e4432404e9ba Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
* BUILD: Do not build libsss_ad_common.la as libraryLukas Slebodnik2015-09-242-19/+15
| | | | | | | | | | | | libsss_ad_common.la was a dynamic library and was linked just with unit tests. It was a workaroud because module libsss_ad.so cannot be linked with tests without portability issues. But it was addted to pkglib_LTLIBRARIES and therefore it was installed with other libraries. This patch changed it and libsss_ad_test.la (old name libsss_ad_common.la) will be compiled only for unit tests (check_LTLIBRARIES) and will not be installed with command "make install". Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
* BUILD: Remove unused variable CHECK_OBJLukas Slebodnik2015-09-241-2/+2
| | | | Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
* BUILD: Simplify build of test_data_provider_beLukas Slebodnik2015-09-241-8/+3
| | | | | | | It's an alternative solution for https://fedorahosted.org/sssd/ticket/2799 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
* IPA: Retry fetching keytab if IPA user lookup failsJakub Hrozek2015-09-232-14/+185
| | | | | | | | | | | | | | | | | | Required for: https://fedorahosted.org/sssd/ticket/2639 Instead of calling ipa_get_ad_acct_send directly, call a new request ipa_srv_ad_acct_send. The new request wraps ipa_get_ad_acct_send and either tries to request a new keytab every time the lookup fails but the domain is online. be_mark_dom_offline() is called when the retry fails with the new code. The retry tries to re-setup the trusted domain. With two-way setups, the request is a no-op. With one-way trust setups, the request re-fetches new keytab unconditionally. Reviewed-by: Sumit Bose <sbose@redhat.com>
* FO: Also reset the server common data in addition to SRVJakub Hrozek2015-09-232-50/+142
| | | | | | | | | | | In a server that is expanded from a SRV query was reset, only it's 'meta-server' status was set to neutral, but the server->common structure still retained its not_working status. This patch also resets the status of the common structure so that both the SRV query and resolving the server are retried next time. Reviewed-by: Sumit Bose <sbose@redhat.com>
* FO: Add an API to reset all servers in a single serviceJakub Hrozek2015-09-234-10/+42
| | | | | | | | | | | | | | Required for: https://fedorahosted.org/sssd/ticket/2639 Previously, we had a function that allowed the caller to reset the status of all services in the global fail over context. This patch adds a new function that allows the caller to reset a single service instead. The main user would be IPA subdomain provider that might need to reset the status of an AD trusted domain on demand. Reviewed-by: Sumit Bose <sbose@redhat.com>
* IPA: Change ipa_server_trust_add_send request to be reusable from ID codeJakub Hrozek2015-09-232-58/+75
| | | | | | | | | | | | | | Required for: https://fedorahosted.org/sssd/ticket/2639 Expose a request ipa_server_trusted_dom_setup_send that sets up a trusted domain. The setup might include actions like retrieving a keytab for one-way trusts. Creating the AD ID context for the trused domain is now done in the caller of this new request. Reviewed-by: Sumit Bose <sbose@redhat.com>
* tests: Set p11_child_timeout to 30 in testsMichal Židek2015-09-231-4/+31
| | | | | | | | | | | | Ticket: https://fedorahosted.org/sssd/ticket/2773 Add way to set pam specific options in pam_test_setup adn use it to set the p11_child_timeout value to 30. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> Reviewed-by: Pavel Reichl <preichl@redhat.com>
generated by cgit (git 2.34.1) at 2025-08-31 05:57:00 +0000