sssd2.git/src/responder/common, branch master System Security Services Daemon [okos' clone] Add sss_ncache_set_sid() and sss_ncache_check_sid() 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-22T14:26:56+00:00 b5afbc39c09baaef57b5300b636307e277c59d66 Two new calls are added to allow to add SID based lookups to the negative cache. 
Two new calls are added to allow to add SID based lookups to the
negative cache.
Add responder_get_domain_by_id() 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-19T09:54:14+00:00 498dcbdfdfffa1aee65d53e83c7eafd5e3b084a5 This new call is similar to responder_get_domain() but uses the domain SID as search parameter. Since the length of the stored domain SID is used in the comparison, SIDs of users and groups and be used directly without stripping the RID component. The functionality is not merged into responder_get_domain() to allow to calculate the timeout correctly and return a specific error code if the entry is expired. 
This new call is similar to responder_get_domain() but uses the domain
SID as search parameter. Since the length of the stored domain SID is
used in the comparison, SIDs of users and groups and be used directly
without stripping the RID component.

The functionality is not merged into responder_get_domain() to allow to
calculate the timeout correctly and return a specific error code if the
entry is expired.
Add two new request types to the data-provider interface 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-22T14:29:51+00:00 f0944fdd627bd684ff36c9670dc857ffdedc343f The patch adds two new request types for SID related requests. The first one is used if a SID is given and the corresponding object should be found. The second one can be used if the SID for an object is requested but it is not clear if the object is a user or a group. 
The patch adds two new request types for SID related requests. The first
one is used if a SID is given and the corresponding object should be
found. The second one can be used if the SID for an object is requested
but it is not clear if the object is a user or a group.
Add secid filter to responder-dp protocol 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-11T16:23:27+00:00 206329d3901738036352f2ac1e8d7804f728861d This patch add a new filter type to the data-provider interface which can be used for SID-based lookups. 
This patch add a new filter type to the data-provider interface which
can be used for SID-based lookups.
responder_get_domain(): remove timeout calculation 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-18T14:29:21+00:00 5a6e3cb57cf2d8d4118b58be0574cccea171ca19 The current timout calculation code in responder_get_domain() is flawed and I think it always was. I removed the related code because - it currently has no effect, a match is returned even if it is expired - that callers do not have any code to handle expired domains. 
The current timout calculation code in responder_get_domain() is flawed
and I think it always was. I removed the related code because
- it currently has no effect, a match is returned even if it is expired
- that callers do not have any code to handle expired domains.
responder_get_domain: do not return disabled domains 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-18T10:50:18+00:00 2648ec1017d37c0840294352b69fc87047da0368 Recent refactoring introduced to concept of disabled domains, i.e. domains which does not exists anymore. responder_get_domain() should not return disabled domains. 
Recent refactoring introduced to concept of disabled domains, i.e.
domains which does not exists anymore. responder_get_domain() should not
return disabled domains.
Remove unused TALLOC_CTX from responder_get_domain() 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-18T10:43:47+00:00 4668b4765530cf37289235e483f301100cc1ae21 Recent refactoring removed the need to copy the domain info data of sub-domains because the related objects will not be removed from memory anymore. 
Recent refactoring removed the need to copy the domain info data of
sub-domains because the related objects will not be removed from memory
anymore.
coding style fix 2013-03-20T12:29:29+00:00 Pavel Březina pbrezina@redhat.com 2012-10-19T10:23:17+00:00 3c6b579b14bbf24acd4e8151673fc9c17c9f8615 






do not leak memory on failure in *_process_init()
2013-03-20T12:29:29+00:00

Pavel Březina
pbrezina@redhat.com

2012-10-19T09:31:08+00:00

6f8ae17869f4f8a1496e3f171ae6b5c11af1845c












Move sss_cmd_execute from client to responder code.
2013-03-08T21:19:26+00:00

Jakub Hrozek
jhrozek@redhat.com

2013-02-12T12:58:46+00:00

1a5d83798af7bd88c9d20862c8830ebb5b755e2d

I think it logically belongs there and allows to better exercise the
responder commands from unit tests.





I think it logically belongs there and allows to better exercise the
responder commands from unit tests.