summaryrefslogtreecommitdiffstats
path: root/server/tools
Commit message (Collapse)AuthorAgeFilesLines
* Fix tools sync operations and mem hierarchySimo Sorce2009-10-0110-319/+193
| | | | | | | Tools were using nested loops that are illegal. (and enforced in latest tevent with a nice abort()) Fix them by creating appropriate synchronous transaction calls. Also fix tools_ctx mem hierarchy setup.
* Upgrade confdb to version 2Stephen Gallagher2009-09-251-8/+11
| | | | | This converts a great many configuration options to the new standard format.
* Allow entering parent groups as FQDNJakub Hrozek2009-09-238-7/+83
| | | | | | | | Allow entering parent groups for groupadd,useradd,usermod as FQDN. Since members and parents must be from the same domain, error out if we can't determine the domain of member. Fixes: #121
* Revert "Use syslog for logging error conditions in SSSD"Stephen Gallagher2009-09-231-3/+0
| | | | | | | | This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
* Use syslog for logging error conditions in SSSDJakub Hrozek2009-09-211-0/+3
| | | | | This is just a band-aid until ELAPI is fully functional and ready to use.
* Provide python bindings for sysdbJakub Hrozek2009-09-211-0/+2
| | | | | | | | Implement a set of python bindings for the sysdb with feature set similar to what is available in the tools. The primary consumers would be applications like system-config-users. Resolves: Ticket #102
* Decouple synchronous sysdb interface from toolsJakub Hrozek2009-09-2110-1020/+1843
| | | | | | | | Instead of working directly with async code in tools, create synchronous wrappers that could be used by tools and python bindings. Also resolves many issues with code duplication in tools and thus fixes ticket #87
* Refactor tools codeJakub Hrozek2009-09-218-268/+244
| | | | | | | | | | | | | | | | Move parameter parsing in tools before attempting to do anything that might fail - so that we have debug_level set correctly for potential error messages. That allows printing the --help and --usage messages without being root. Fix code duplicates in tools and refactor its code a little to lay ground for decoupling the synchronous interfaces. Remove some legacy tools leftovers, re-add sensible error message on removing nonexistent users/groups which was removed by accident. Fixes: Trac ticket #75 Fix typo in groupdel: fixes ticket #136
* Add copyright noticesJakub Hrozek2009-09-111-0/+22
| | | | Fixes: #138
* Remove unused event context argument from confdb_initStephen Gallagher2009-09-101-1/+1
| | | | | | Because the confdb always operates synchronously, it maintains its own private event context internally. The event context argument passed to it is never used, so we'll remove it to avoid confusion.
* Remove shadow-utils support from toolsJakub Hrozek2009-09-088-763/+73
| | | | | Removes the ability to proxy to shadow-utils. Also remove all the supporting functions for getting domain type, domain by id etc.
* Tools are allowed to touch only the 'local' domainSimo Sorce2009-09-088-76/+35
|
* Split database in multiple filesSimo Sorce2009-09-088-22/+71
| | | | | The special persistent local database retains the original name. All other backends now have their own cache-NAME.ldb file.
* Disallow all operations outside domains, fix deleting cache for filesJakub Hrozek2009-08-214-11/+41
| | | | | | | | | | One of the previous patches disallowed adding users and groups outside known domains but it was missing disallowing modifying, deleting, etc. Also don't error if there's no sysdb cache to delete after deleting legacy user/domain. Fixes: tickets #113,#114
* Make "files" a reserved word for legacy local domainJakub Hrozek2009-08-131-1/+2
| | | | | | | | This patch introduces provider=files as a valid provider. Upon loading the backend, its properties in confdb are overwritten to those that represent legacy local domain. Also document this in sssd.conf(5) and example config
* Tools ID range fixesJakub Hrozek2009-08-133-4/+16
| | | | | | | | | The tools did not take the special case where id_max = 0 (no limit) into account. Also disallow adding users when ID is specified outside any domain. Resolves trac tickets #86 and #89
* Fix reversal of parent and member in groupmodSimo Sorce2009-08-121-8/+8
| | | | ticket #101
* Parse fully qualified names in toolsJakub Hrozek2009-08-058-88/+289
| | | | | | Allow adding users into different domains not only by specifying ID directly but also by specifying fully qualified name. Exit when both specifications are used in conflict.
* Fix adding to groups on user creationJakub Hrozek2009-08-051-1/+1
|
* Correct check for local domain in toolsJakub Hrozek2009-07-312-14/+2
| | | | | | When looking for the local domain in the tools, do so by looking on provider value, not domain name. Also removes one redundant lookup of local domain.
* Notify user when deleting nonexistent user or groupJakub Hrozek2009-07-312-5/+20
| | | | Fixes: RHBZ #513247, RHBZ #513250
* Use correct return codesJakub Hrozek2009-07-314-4/+4
| | | | | Some code paths that should exit with an error used potentionally incorrect return code.
* Improve error messagesJakub Hrozek2009-07-314-5/+32
| | | | | | | | | | | Fixes: * RHBZ 513282 - Error Message Incorrect when Trying to add Group with GID already in use * RHBZ 513284 - Error Message Incorrect when Trying to add User with UID already in use * RHBZ 513242 - Better error Message when modifying a user that doesn't exist * RHBZ 513244 - Better error Message when adding a user to a group that doesn't exist
* Start rationalizing user tools a bitSimo Sorce2009-07-207-408/+299
| | | | | There is a lot of duplication in user tools. First steps to remove as much duplication as possible.
* fixed a double talloc_free errorSumit Bose2009-07-086-12/+0
|
* Check for root before initializingJakub Hrozek2009-07-068-4/+98
| | | | | Also move setting locale to separate function to be called before anything else to make sure the "Not root" message would be localized.
* Rework transaction code to use tevent_reqSimo Sorce2009-07-036-280/+651
| | | | | | This is part of a set of patches to rewrite sysdb to a hopefully better API, that will also let use use tevent_req async style calls to manipulate our cache.
* Rename sysdb_req to sysdb_handle.Simo Sorce2009-07-036-41/+41
| | | | | | | | | This sysdb_req has always really been a transaction handle and not a request. This is part of a set of patches to rewrite transaction support in sysdb to a hopefully better API, that will also let use use tevent_req async style to manipulate our cache.
* Gettextize the sss_ toolsJakub Hrozek2009-07-027-109/+176
|
* Create gettext framework for SSSD daemonStephen Gallagher2009-06-178-13/+38
|
* Silence warningsSimo Sorce2009-05-261-1/+1
|
* Move useradd defaults to confdbJakub Hrozek2009-05-261-3/+25
| | | | | | Previously, sss_useradd defaults were hardcoded with no way to change user's default shell or base for home directory. This patch moves them into config/user_defaults
* Move actual password caching into sysdbSimo Sorce2009-05-181-1/+0
| | | | Convert auth modules to do the caching themselves
* More useful error message when adding user/group that already existsJakub Hrozek2009-05-142-2/+18
| | | | Fixes: RHBZ #498462
* Add debug param to the tools, fix lock/unlock in sss_usermodJakub Hrozek2009-04-286-3/+31
|
* Invoke shadow-utils in sss_ toolsJakub Hrozek2009-04-288-47/+626
| | | | | Make shadow-utils base path configurable Use default values for params, allow configuring them
* fixes for user and group creation in LOCAL domainSumit Bose2009-04-231-1/+1
| | | | | - added range check for supplied UIDs and GIDs - initialize pc_gid to 0 to trigger gid generation
* Always pass full domain infoSimo Sorce2009-04-131-1/+1
| | | | | Change sysdb to always passwd sss_domain_info, not just the domain name. This way domain specific options can always be honored at the db level.
* Change the way we retrieve domainsSimo Sorce2009-04-087-21/+46
| | | | | | | | | | | | | To be able to correctly filter out duplicate names when multiple non-fully qualified domains are in use we need to be able to specify the domains order. This is now accomplished by the configuration paramets 'domains' in the config/domains entry. 'domains' is a comma separated list of domain names. This paramter allows also to have disbaled domains in the configuration without requiring to completely delete them. The domains list is now kept in a linked list of sss_domain_info objects. The first domain is also the "default" domain.
* Fix returning user with missing optional attributes.Simo Sorce2009-03-101-1/+1
| | | | | | | | | Gecos, homedir and shell are optional, fix the responder not to refuse to return the user completely if they are missing, replace an empty homedir with "/". Also fix fullname vs gecos, and always return gecos for NSS data. On user creation set gecos to the same value as the user Full Name, to help populate the gecos field with data that makes sense.
* Hide uid and gid options in usermod and groupmodJakub Hrozek2009-03-102-3/+3
|
* Always pass sss_domain_info to sysdb functions.Simo Sorce2009-03-091-4/+5
|
* Move MPG checks within sysdb.Simo Sorce2009-03-094-116/+0
| | | | | This allows to perform checks and modifications in one transaction. Uses configuration stored in confdb to determins if a domain uses MPGs.
* sss_groupmodJakub Hrozek2009-03-091-0/+281
|
* sss_usermodJakub Hrozek2009-03-094-44/+407
| | | | Move parse_groups into tools_utils
* Fix parameter parsing and adding to groups in useraddJakub Hrozek2009-03-091-4/+10
|
* Fix initialization problemsJakub Hrozek2009-03-084-11/+12
| | | | Init tools ctx in groupadd before copying its value
* sss_groupdel, delete by DN in sss_userdelJakub Hrozek2009-03-072-73/+177
| | | | Don't convert username->uid in userdel, use DN
* sss_groupaddJakub Hrozek2009-03-061-0/+172
|
* sss_userdelJakub Hrozek2009-03-061-0/+230
| | | | Also install tools into /sbin, own them in specfile