summaryrefslogtreecommitdiffstats
path: root/src/responder/sudo/sudosrv_cmd.c
Commit message (Collapse)AuthorAgeFilesLines
* Responders: Make the client context more genericSimo Sorce2016-06-291-8/+15
| | | | | | | | | | | | | | | This is useufl to allow reusing the responder code with other protocols. Store protocol data and responder state data behind opaque pointers and use tallog_get_type to check they are of the right type. This also allows to store per responder state_ctx so that, for example, the autofs responder does not have to carry useless variables used only by the nss responder. Resolves: https://fedorahosted.org/sssd/ticket/2918 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
* sudo: convert get_sudorules to teventPavel Březina2016-04-191-32/+14
| | | | | | | | | | There was a lot of confusion with different error codes and where to call sudosrv_cmd_done to finish the client request. Converting it whole to tevent makes it much more simpler to read and follow the request logic. Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
* sudo: do not use tevent when parsing queryPavel Březina2016-04-191-10/+20
| | | | | Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
* sudo: use cache_req for initgroupsPavel Březina2016-04-191-27/+2
| | | | | | | | | | | This is just blind code change, the next patch will improve it so for example we don't do initgroups during query-parsing phase. Resolves: https://fedorahosted.org/sssd/ticket/1126 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
* Option filter_users had no effect for retrieving sudo rulesAdam Tkac2015-04-141-0/+12
| | | | | | | | | Previously sssd_sudo always obtained sudo rules for user from LDAP even when user was enlisted in filter_users. Resolves https://fedorahosted.org/sssd/ticket/2625 Reviewed-by: Pavel Březina <pbrezina@redhat.com>
* Make DEBUG macro invocations variadicNikolai Kondrashov2014-02-121-25/+25
| | | | | | | | | | | | | | | | | | | | | | | | Use a script to update DEBUG macro invocations to use it as a variadic macro, supplying format string and its arguments directly, instead of wrapping them in parens. This script was used to update the code: grep -rwl --include '*.[hc]' DEBUG . | while read f; do mv "$f"{,.orig} perl -e \ 'use strict; use File::Slurp; my $text=read_file(\*STDIN); $text=~s#(\bDEBUG\s*\([^(]+)\((.*?)\)\s*\)\s*;#$1$2);#gs; print $text;' < "$f.orig" > "$f" rm "$f.orig" done Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Stephen Gallagher <sgallagh@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* sudo: improve time restrictions debug messagesPavel Březina2013-10-011-0/+7
|
* sudo responder: change num_rules type from size_t to uint32_tPavel Březina2013-01-221-1/+1
| | | | | | | | https://fedorahosted.org/sssd/ticket/1779 2^32 should be enough to store sudo rules. size_t type was causing troubles on big endian architectures, because it wasn't used correctly in combination with D-Bus.
* sudo: print message if old protocol is usedPavel Březina2012-12-021-3/+15
|
* sudo: do not send domain name with usernamePavel Březina2012-11-141-2/+2
| | | | | | | | This caused troubles with subdomain users and it is not really necessary. This patch does not change the protocol itself, that should be done on the earliest possible occasion. Part of https://fedorahosted.org/sssd/ticket/1616
* sudo: support users from subdomainsPavel Březina2012-11-141-8/+33
| | | | https://fedorahosted.org/sssd/ticket/1616
* sudo: do not hardcode protocol versionPavel Březina2012-10-301-1/+2
|
* sudo responder: new request enum typePavel Březina2012-06-291-5/+5
| | | | | | | | | sss_sudo_type represents query type that comes to the responder sss_dp_sudo_type represents query type to DP that is issued by the responder I'm leaving current values of sss_dp_sudo_type untouched so the compilation is not broken. Hovewer, they will be changed to new DP types once the DP interface is updated.
* sudo responder: change protocol version to 1Pavel Březina2012-06-291-0/+9
|
* sudo api: send uid, username and domainnamePavel Březina2012-06-291-87/+46
| | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1239 Test client was changed accordingly. The new usage is: sss_sudo_cli username [uid] If uid is not set, getpwnam(username) is called. It will retrieve both default options and rules.
* sudo responder: get rid of dctx where possiblePavel Březina2012-06-291-30/+31
|
* sudo responder: remove code duplication in commandsPavel Březina2012-06-291-124/+86
|
* Make re_expression and full_name_format per domain optionsStef Walter2012-06-121-2/+2
| | | | | | | | | | | * Allows different user/domain qualified names for different domains. For example Domain\User or user@domain. * The global re_expression and full_name_format options remain as defaults for the domains. * Subdomains get the re_expression and full_name_format of their parent domain. https://bugzilla.redhat.com/show_bug.cgi?id=811663
* Modified responder_get_domain()Jan Zeleny2012-04-241-1/+1
| | | | Now it checks for subdomains as well as for the domain itself
* Potential NULL-dereference in sudosrv_cmd_get_sudorulesPavel Březina2012-03-091-14/+12
| | | | https://fedorahosted.org/sssd/ticket/1236
* Honor case_sensitive option in sudo responderPavel Březina2012-02-231-0/+4
| | | | https://fedorahosted.org/sssd/ticket/1205
* SUDO responder: check if the input is a UTF-8 stringPavel Březina2012-02-101-0/+7
| | | | https://fedorahosted.org/sssd/ticket/1171
* SUDO Integration - responder 'sudo_timed' optionPavel Březina2012-02-041-1/+20
| | | | https://fedorahosted.org/sssd/ticket/1116
* SUDO Integration - in-memory cache in responderPavel Březina2012-02-041-4/+42
| | | | | | New sudo responder option: cache_timeout https://fedorahosted.org/sssd/ticket/1111
* SUDO Integration - responder command for cn=defaultsPavel Březina2012-01-271-0/+47
| | | | https://fedorahosted.org/sssd/ticket/1143
* SUDO Integration - responderPavel Březina2011-12-161-0/+227
generated by cgit (git 2.34.1) at 2025-09-02 23:14:53 +0000