summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Change hbacservices/groups containersssd-1-2Sumit Bose2011-02-171-2/+2
| | | | | The containers store store hbacservices and hbacservicegroups definitions were changed in recent versions of FreeIPA.
* Do not attempt to use START_TLS on SSL connectionsStephen Gallagher2011-02-164-3/+36
| | | | | | | Not all LDAP servers are capable of handling dual-encryption with both TLS and SSL. https://fedorahosted.org/sssd/ticket/795
* Properly document ldap_purge_cache_timeoutStephen Gallagher2011-02-112-2/+29
| | | | Also allow it to be disabled entirely and make this the default
* Add overflow check to SAFEALIGN_COPY_*_CHECK macrosSumit Bose2011-01-111-2/+4
|
* Validate user supplied size of data itemsSumit Bose2011-01-113-76/+95
| | | | | | Specially crafted packages might lead to an integer overflow and the parsing of the input buffer might not continue as expected. This issue was identified by Sebastian Krahmer <krahmer@suse.de>.
* Set up signal handlers before initializing sysdbStephen Gallagher2010-12-021-29/+30
| | | | | | | | | | | A temporary signal handler for SIGTERM is set up in server_setup() that calls exit() from within a pure signal handler. This causes a race condition where it's possible that if the SSSD is restarted immediately while it is still initializing the sysdb caches for the first time, it can leave the cache in a corrupt and unusable state. https://bugzilla.redhat.com/show_bug.cgi?id=658444
* Resend SIGTERM if child doesn't terminateStephen Gallagher2010-12-021-24/+40
| | | | | | | | | There is a race condition where if we send a SIGTERM before the kernel has scheduled the child, it may be lost, and the child will not terminate and will leave the monitor hung in wait(). This patch alters this behavior so that we will send the SIGTERM again every 10ms and check the wait() in a nonblocking manner.
* Wait for all children to exitStephen Gallagher2010-12-021-2/+61
| | | | | Previously, there was a race-condition where the monitor might terminate before its children.
* Make default SIGTERM and SIGINT handlers use teventStephen Gallagher2010-12-021-1/+33
|
* Ensure that SSSD shuts down completely before restartingStephen Gallagher2010-12-021-0/+9
|
* Revert "Bumping version to 1.2.6 dev"Stephen Gallagher2010-12-021-1/+1
| | | | | | This reverts commit e1bd48257d2daa63a63bff35b2bbd9a277799fd0. This was bumped twice by accident. The correct version is 1.2.5.
* Properly check the return value from semanage_commitStephen Gallagher2010-11-051-2/+2
| | | | | | | semanage_commit() returns -1 on error, and can return a positive value on success. https://bugzilla.redhat.com/show_bug.cgi?id=649037
* Don't clean up groups for which a user has it as primary GIDStephen Gallagher2010-11-031-3/+15
| | | | | | | | | | We were cleaning up all groups that were expired and for which there existed no user with memberOf: <thegroup> as an attribute. This patch modifies the search to also check for cached users with this group's GID as their primary GID. Fixes https://fedorahosted.org/sssd/ticket/624
* Fix double free issueSumit Bose2010-11-021-2/+2
|
* Always use talloc_zero() to allocate cmdctxSumit Bose2010-11-021-2/+2
|
* Remove all nss requests after a reconnectSumit Bose2010-11-023-1/+26
| | | | | | | Currently we do not handle the open nss request after a reconnect and wait until they timeout (which is a couple of minutes!). This patch adds a handler that terminates all requests after a reconnect. Then responder will return matching cache entries or nothing.
* Bumping version to 1.2.6 devStephen Gallagher2010-10-261-1/+1
|
* Always use uint32_t for UID/GID numbersJakub Hrozek2010-10-269-63/+45
|
* Use unsigned long for conversion to id_tJakub Hrozek2010-10-224-40/+22
| | | | | | | | We used strtol() on a number of places to convert into uid_t or gid_t from a string representation such as LDAP attribute, but on some platforms, unsigned long might be necessary to store big id_t values. This patch converts to using strtoul() instead.
* Add sysdb_attrs_get_ulong utility functionJakub Hrozek2010-10-222-0/+29
|
* Bumping version to 1.2.5 for devStephen Gallagher2010-10-081-1/+1
|
* Releasing version 1.2.4sssd-1_2_4Stephen Gallagher2010-10-0815-192/+215
|
* Add fake users during saving of RFC2307 groupJakub Hrozek2010-10-081-2/+604
|
* Shortcut for save_group() to accept sysdb DNs as member attributesJakub Hrozek2010-10-081-7/+27
| | | | | | | | This patch is a backport of original written by Ralf Haferkamp. Addtional parameter "populate_members" for save_group() and save_groups() to indicate that the "member" attribute of the groups is populated with sysdb DNs of the members (instead of LDAP DNs).
* sysdb interface for adding expired user entriesJakub Hrozek2010-10-084-4/+198
|
* Add proper nested initgroup support for RFC2307bis serversStephen Gallagher2010-10-081-1/+1014
|
* Modify sysdb_add_group_member_send to accept users and groupsStephen Gallagher2010-10-084-27/+66
| | | | | Previously, it assumed that all members were users. This changes the interface so that either a user or a group can be specified.
* Make user argument of sysdb_update_members_send a constStephen Gallagher2010-10-082-2/+2
|
* Handle nested groups in RFC2307bisStephen Gallagher2010-10-081-1/+854
| | | | | | | | This first approach handles the non-optimized "pure" RFC2307bis case. It recursively calls into nested groups until it it has found them all or hits the pre-defined nesting limit. It then saves all member users first, then all groups to the sysdb
* Make sdap_save_users_send handle zero users gracefullyStephen Gallagher2010-10-081-0/+9
| | | | | If we send a zero num_users value, we should just immediately return success, rather than starting a useless transaction
* Add option to limit nested groupsSimo Sorce2010-10-084-4/+7
|
* Add fake groups during initgroupsJakub Hrozek2010-10-081-31/+284
| | | | | | | | | If during initgroups operation we find out that any of the groups the user is a member of is not cached yet we add a incomplete, expired group entry. That way, we save ourselves from looking up and saving all the potential user entries the group may also consist of. Because the group is expired, it will be refreshed during the next getgrgid/getgrnam call and correct member list will be returned.
* sysdb interface for adding incomplete group entriesJakub Hrozek2010-10-083-0/+255
| | | | Useful for optimizing the initgroups operation.
* End update_members request if there's nothing to doJakub Hrozek2010-10-081-0/+8
|
* Add common hash table setupStephen Gallagher2010-10-083-1/+59
| | | | | sss_hash_create() produces a dhash table living in the talloc hierarchy.
* Disable events on ldap fd when offline.Jan Zeleny2010-10-081-2/+4
| | | | | | | | | Erase events on LDAP socket when backend is offline and an event appears on the socket. Normally this would lead to infinite loop, because event is present on the fd, but instead of being processed, an error log is written and the program continues to wait for the event. Ticket: #599
* Request the correct attribute nameJakub Hrozek2010-09-231-1/+1
|
* Fix sysdb_attrs_to_listJakub Hrozek2010-09-231-2/+2
|
* Fix sysdb_group_dn_nameJakub Hrozek2010-09-231-1/+9
|
* Request all group attributes during initgroups processingStephen Gallagher2010-09-231-5/+6
| | | | | | | We tried to be too clever and only requested the name of the group, but we require the objectClass to validate the results. https://fedorahosted.org/sssd/ticket/622
* Updating ES translationHéctor Daniel Cabrera2010-09-021-163/+146
|
* Updating version to 1.2.3sssd-1_2_3Stephen Gallagher2010-08-241-1/+1
|
* Treat a zero-length password as a failureStephen Gallagher2010-08-241-0/+7
| | | | | Some LDAP servers allow binding with blank passwords. We should not allow a blank password to authenticate the SSSD.
* Fix chpass operations with LDAP providerStephen Gallagher2010-08-041-0/+1
| | | | | | | The initial verification of the old password was returning an error because we were not explicitly setting dp_err to DP_ERR_SUCCESS and it was initialized earlier in the function to DP_ERR_FATAL.
* be_pam_handler(): Fix potential NULL dereferenceStephen Gallagher2010-08-031-1/+2
|
* Fix incorrect NULL checkStephen Gallagher2010-08-031-1/+1
|
* Release SSSD 1.2.2sssd-1_2_2Stephen Gallagher2010-08-0215-145/+157
|
* Clean up initgroups processing for RFC2307Stephen Gallagher2010-07-301-16/+196
| | | | | | | | Instead of recursively updating all users of each group the user being queried belongs to, just add or remove membership for the requested user. Fixes https://fedorahosted.org/sssd/ticket/478
* Add sysdb_update_members functionStephen Gallagher2010-07-303-0/+369
| | | | | | | | This function will take a user, a list of groups that this user should be added to and a list of groups the user should be removed from and will recursively call sysdb_[add|remove]_group_member Includes a unit test
* Add dup_string_list() utility functionStephen Gallagher2010-07-302-0/+37
|
generated by cgit (git 2.34.1) at 2024-04-30 21:21:17 +0000