summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* SDAP: allow_paging in sdap_get_generic_ext_send()Pavel Reichl2015-10-221-18/+25
| | | | | | | | Make allow_paging parameter a part of the flag parameter in sdap_get_generic_ext_send(). Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 45363a04548738ac99a5d173e3fe021c28b61aec)
* SDAP: optional warning - sizelimit exceeded in POSIX checkPavel Reichl2015-10-221-9/+22
| | | | | | | | | | | Add new parameter 'flags' to sdap_get_generic_ext_send_ext() which can be set to suppress warning about 'sizelimit exceeded'. Resolves: https://fedorahosted.org/sssd/ticket/2804 Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 1f1b41931d299d6356ac205b75b402adb2cc9234)
* spec: Missing initgroups mmap fileMichal Židek2015-10-221-0/+1
| | | | | Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 6a50ad7180adf86f0c8beb31d4d636e407eaffd1)
* CI: Handle dashes in valgrind-condenseNikolai Kondrashov2015-10-201-3/+3
| | | | | | | Make valgrind-condense work on program names which start with a dash character. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
* CI: Do not skip tests not checked with ValgrindNikolai Kondrashov2015-10-201-31/+38
| | | | | | | | | | | Make contrib/ci/valgrind-condense execute programs not matching the supplied PATH_PATTERN without Valgrind, instead of simply exiting successfully. This makes the make-check-valgrind stage actually run the tests not checked with Valgrind, instead of skipping them. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
* SSSDConfigTest: Test real config without config_file_versionLukas Slebodnik2015-10-192-0/+107
| | | | | | | | | | src/config/testconfigs/sssd-valid.conf explicitly contains config_file_version. Recently we changed the default value to 2 and therefore it needn't be listed in configuration file. This patch test real sssd.conf without config_file_version. Reviewed-by: Michal Židek <mzidek@redhat.com> (cherry picked from commit 7388fc91bd6c22705e60632346ec815f4a4963f1)
* SSSDConfigTest: Try load saved configLukas Slebodnik2015-10-191-1/+11
| | | | | | | | | | | Python module SSSDConfig should be able to save configuration file and later load the same configuration file without problem. Unit test for: https://fedorahosted.org/sssd/ticket/2837 Reviewed-by: Michal Židek <mzidek@redhat.com> (cherry picked from commit 87ef67286b64af98d32a3a5abcd28a9c2886f751)
* SSSDConfig: Do not raise exception if config_file_version is missingMichal Židek2015-10-192-9/+4
| | | | | | | | Ticket: https://fedorahosted.org/sssd/ticket/2837 Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 6a044fa43d53638c1d0b874d43f58c0428820362)
* sudo: send original name and id with local views if possiblePavel Březina2015-10-141-5/+13
| | | | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2833 Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit fb8985a3a3a267940760967beaf8af3979ce91ea)
* sudo: search with view even if user is foundPavel Březina2015-10-141-1/+4
| | | | | | | | | | If an overriden name is provided and the user is already cache we fail to refresh it since we won't search with VIEW flag. This patch fix it. Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit 51a0e3a2ef9186d19cbc28d87fe6fc5d5998a0a7)
* nss: send original name and id with local views if possiblePavel Březina2015-10-141-3/+128
| | | | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2833 Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit 2f793681b4debbe015815f908dc12c0463711609)
* BUILD: Avoid symlinks with python modulesLukas Slebodnik2015-10-122-16/+8
| | | | | | | | | | | | | | We need to use different names for python{2,3} modules if we want to build them in the same time with automake (prefix _py2 and _py3). But resulting name need to correspond with name of module because it is used in C import function. We used symbolic links for that purpose but it breaks debian python tools which rename the real modules making symbolic links to point nowhere Resolves: https://fedorahosted.org/sssd/ticket/2814 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit bf0002fa68e9c06f0569cf75b1b8ef85bb1c2697)
* intg: Do not use non-existent pre-incrementNikolai Kondrashov2015-10-121-2/+4
| | | | | | | | | | | Do not try to use the pre-increment operator which doesn't exist in Python (and is in fact two "identity" operators - opposites of "negation" operators). Use addition and assignment instead. This fixes infinite loops on failed slapd starting and stopping. Reviewed-by: Michal Židek <mzidek@redhat.com> (cherry picked from commit c4d2fc3c12656faeb3fb7ca20c922ca62edf13a0)
* LDAP: Inform about small range sizeStephen Gallagher2015-10-091-0/+7
| | | | | | | | | | | When a returned RID has a higher value than the ldap_idmap_range_size, it means that the administrator did not plan appropriately for the size of their network. We need to alert the admin at a severe notification level that their configuration will fail on entries with a high RID and point them at the explanation in the manual. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit a47102e74050d8ab14a9ea835ab2640c9aa65856)
* intg: Fix RFC2307bis group member creationNikolai Kondrashov2015-10-091-14/+7
| | | | | | | | Fix creation of mixed user/group "member" attribute for RFC2307bis group entries in ldap_ent.py. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit c65de71bc38753320b9fd6f6fe1386244a2ff54a)
* intg: Reduce sssd.conf duplication in test_ldap.pyNikolai Kondrashov2015-10-091-95/+45
| | | | | | | | Use a function to generate basic sssd.conf in test_ldap.py to reduce code duplication. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 472800eda2ef4dfa3a738806d7adbc52be3fbe9c)
* intg: Split LDAP test fixtures for flexibilityNikolai Kondrashov2015-10-091-30/+83
| | | | | | | | Split ldap_test.py fixtures into several functions to allow for partial fixtures and direct use within tests. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 19c2d951059498703c28aea2ce2d9c3db71a8820)
* intg: Add support for specifying all user attrsNikolai Kondrashov2015-10-091-12/+39
| | | | | | | | Support passing all user attributes to ldap_ent.py's user-creation functions, in integration tests. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit c423ad75a56b199083463a2714c8fbfd6e8edcc8)
* intg: Get base DN from LDAP connection objectNikolai Kondrashov2015-10-092-5/+5
| | | | | | | | | Don't use the global LDAP_BASE_DN in integration tests and fixtures, but instead take it from the LDAP connection object (ldap_conn) passed to them explicitly. This makes the tests and fixtures a bit more modular. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit a190e39ea4f2c084091be1cd37a3c6e3b603540e)
* tests: Fix compilation warningJakub Hrozek2015-10-091-8/+8
| | | | | Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 6c2e507bd1571f9c7e26c5c9d60753b29fb75578)
* sss_override: steal msgs string to objsPavel Březina2015-10-081-0/+9
| | | | | | | | | | | Since msgs is attached to tmp_ctx then all the strings are freed with tmp_ctx. Now steal the strings to objs. Resolves: https://fedorahosted.org/sssd/ticket/2826 Reviewed-by: Pavel Reichl <preichl@redhat.com> (cherry picked from commit 3119225929463aecfbb1a7fc953263736955271e)
* sss_override: explicitly set ret = EOKPavel Březina2015-10-081-0/+2
| | | | | Reviewed-by: Pavel Reichl <preichl@redhat.com> (cherry picked from commit 220a4cbb7fcf30d954b2b4fecd62887373aa8764)
* sss_override: fix comment describing formatPavel Březina2015-10-081-1/+1
| | | | | Reviewed-by: Pavel Reichl <preichl@redhat.com> (cherry picked from commit 1bf0ada00f59c153fe00853394508021d0ff9b24)
* nss: fix UPN lookups for sub-domain usersSumit Bose2015-10-082-3/+11
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 8ded8b2f4a57d1833fd230307218d8b07a571785)
* fix upn cache_req for sub-domain usersSumit Bose2015-10-081-2/+7
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 374268c5eda35e8bbc2fef30752299199439cffe)
* fix ldb_search usageSumit Bose2015-10-081-8/+1
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 391b81f2a78a812a87530e0c50c70d59150f49eb)
* cache_req: remove raw_name and do not touch orig_namePavel Březina2015-10-081-23/+29
| | | | | | | | Parsed name or UPN is now stored in input->name instead of touching orig_name and storing the original name in raw_name. Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 2fce47f2dadd10d2a2c8bf9f03ab7094bc6c6b3a)
* cache_req tests: reduce code duplicationPavel Březina2015-10-081-1230/+394
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 3688374991afb34bbaf2b7843683fc13dd77879d)
* cache_req: add support for UPNPavel Březina2015-10-089-42/+674
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 28ebfa4373d1e7ce45b5d70a3619df1c074a661e)
* cache_req: provide extra flag for oob requestPavel Březina2015-10-081-5/+6
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit d8125f0e0d38c6939887a0849a44859d6c498c57)
* BUILD: Remove unused variable TEST_MOCK_OBJLukas Slebodnik2015-10-081-2/+0
| | | | | Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit a4ed6c3a56b68f0deb27f291df510c3ba735f836)
* BUILD: Link crypto_tests with existing libraryLukas Slebodnik2015-10-081-5/+4
| | | | | | | | It's not necessary to bundle libsss_crypto to crypto_tests. We can link it directly. Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit 8f61739e0de45ce2ee3be436fc91ef12a1a1c4f3)
* BUILD: Link just libsss_crypto with crypto librariesLukas Slebodnik2015-10-081-3/+5
| | | | | | | | | It should prevent such failures as in commit 73ec8fdfddb2d4bf99977f758eec80e1b1ee8542 BUILD: Link test_data_provider_be with -ldl Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit 69b46c32357ccf1aab9c0bd6d1afa33a8724ad77)
* AD: Consolidate connection list construction on ad_common.cJakub Hrozek2015-10-074-17/+71
| | | | | Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit afb21fd06690a0bec288a7970abf74ed2ea7dfdc)
* AD: Provide common connection list construction functionsJakub Hrozek2015-10-075-34/+80
| | | | | | | | | | | https://fedorahosted.org/sssd/ticket/2810 Provides a new AD common function ad_ldap_conn_list() that creates a list of AD connection to use along with properties to avoid mistakes when manually constructing these lists. Reviewed-by: Sumit Bose <sbose@redhat.com> (cherry picked from commit 309aa83d16b5919f727af04850bcd0799ba0962f)
* CI: Exclude whitespace_test from Valgrind checksNikolai Kondrashov2015-10-051-1/+4
| | | | | | | | Exclude whitespace_test from Valgrind checks in contrib/ci/run to prevent it from failing the tests due to Bash bugs. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 8dff4a773dd9525ec587cd31646a9f67252122c1)
* sbus codegen tests: free ctxPavel Březina2015-10-051-0/+2
| | | | | | | | | | | Memory context was not freed therefore we got stuck in tevent loop that mocks D-Bus. Resolves: https://fedorahosted.org/sssd/ticket/2759 Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit e51143e3e67c70b86dd9a67cb7e802dd96f989e1)
* SDAP: Relax POSIX checkPavel Reichl2015-10-021-4/+6
| | | | | | | | | | | | | | Relax the check on UID or GID just to check if at least one of them is present but do not require them to be positive numbers. Add requirement on objectclass attributes to be user or group to make check more reliable. Resolves: https://fedorahosted.org/sssd/ticket/2800 (cherry picked from commit 6735c0451d4e80d7cd4b480a8c1f7dafb2b536ea) Reviewed-by: Pavel Březina <pbrezina@redhat.com>
* sss tools: improve option handlingPavel Březina2015-10-022-20/+30
| | | | | | | | | | | | | The crash describe by ticket #2802 is caused by providing NULL options in popt and yet trying to iterate over them. Instead of simply testing for NULL this patch creates a new option table table merges several option tables together, thus improving and simplifying usage string. Resolves: https://fedorahosted.org/sssd/ticket/2802 Reviewed-by: Pavel Reichl <preichl@redhat.com> (cherry picked from commit bda8039465a0084fb380e878c8f9ea3e900505ea)
* PAM: only allow missing user name for certificate authenticationSumit Bose2015-10-022-3/+47
| | | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2811 Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> (cherry picked from commit 2e76b32e74abedb23665808bacc73cafd1097c37)
* CI: Update reason blocking move to DNFNikolai Kondrashov2015-10-011-1/+1
| | | | Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
* CI: Run integration tests on debian testingLukas Slebodnik2015-09-301-1/+8
| | | | Reviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>
* CI: Add missing dependency for debianLukas Slebodnik2015-09-301-0/+1
| | | | | | | | | | All test failed due to missing /usr/bin/libtool e.g. /home/build/sssd/build/test-driver: line 107: libtool: command not found FAIL test-io (exit status: 127) Reviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>
* CI: Don't depend on user input with apt-getLukas Slebodnik2015-09-302-1/+7
| | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2433 Reviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>
* confdb: warn if memcache_timeout > than entry_cachePavel Reichl2015-09-301-0/+25
| | | | | | | | | | Only group and user records are cached in memory cache so only timeouts for those are checked. Resolves: https://fedorahosted.org/sssd/ticket/2176 Reviewed-by: Pavel Březina <pbrezina@redhat.com>
* AD: add debug messages for netlogon get infoPavel Reichl2015-09-301-1/+4
| | | | Reviewed-by: Petr Cech <pcech@redhat.com>
* CI: Fix configure script arguments for CentOSLukas Slebodnik2015-09-301-2/+4
| | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2807 Reviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>
* Bump the version for the 1.13.2 developmentJakub Hrozek2015-09-301-1/+1
|
* Updating translations for the 1.13.1 releasesssd-1_13_1Jakub Hrozek2015-09-3038-14451/+20577
|
* AD: inicialize root_domain_attrs fieldPavel Reichl2015-09-301-1/+2
| | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2805 Reviewed-by: Pavel Březina <pbrezina@redhat.com>