summaryrefslogtreecommitdiffstats
path: root/src/sss_client/ssh
Commit message (Collapse)AuthorAgeFilesLines
* SSH: Do not print an error message if sss_ssh_authorizedkeys is asked for a ↵Jakub Hrozek2016-07-011-1/+6
| | | | | | | | | | | | | | | | | | | | local user If an IPA client uses the SSH integration and a local user logs in with SSH, the sss_ssh_authorizedkeys looks up their keys in the SSH responder, which doesn't find the user and returns ENOENT. The sss_ssh_authorizedkeys reports a failure on any error, including ENOENT which produced a confusing error message in the logs. This patch adds a new error code that handles users that are not found by SSSD but exist on the system and also special cases root with the same error code. Therefore, logging in as a local user no longer prints an error message. Resolves: https://fedorahosted.org/sssd/ticket/3003 Reviewed-by: Pavel Březina <pbrezina@redhat.com>
* util: Continue if setlocale failsMichal Židek2015-11-041-1/+3
| | | | | | | | | | | | | setlocale needs some environment variables to be set in order to work. These variables are not present in some special cases. We should not fail completely in these cases but continue with the compatible C locale. Resolves: https://fedorahosted.org/sssd/ticket/2785 Reviewed-by: Michal Židek <mzidek@redhat.com>
* Remove trailing whitespacePavel Reichl2015-09-031-3/+3
| | | | | Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> Reviewed-by: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com>
* sssd: incorrect checks on length values during packet decodingMichal Židek2015-08-311-3/+3
| | | | | | | | | | https://fedorahosted.org/sssd/ticket/1697 It is safer to isolate the checked (unknown/untrusted) value on the left hand side in the conditions to avoid overflows/underflows. Reviewed-by: Petr Cech <pcech@redhat.com>
* Make DEBUG macro invocations variadicNikolai Kondrashov2014-02-122-27/+27
| | | | | | | | | | | | | | | | | | | | | | | | Use a script to update DEBUG macro invocations to use it as a variadic macro, supplying format string and its arguments directly, instead of wrapping them in parens. This script was used to update the code: grep -rwl --include '*.[hc]' DEBUG . | while read f; do mv "$f"{,.orig} perl -e \ 'use strict; use File::Slurp; my $text=read_file(\*STDIN); $text=~s#(\bDEBUG\s*\([^(]+)\((.*?)\)\s*\)\s*;#$1$2);#gs; print $text;' < "$f.orig" > "$f" rm "$f.orig" done Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Stephen Gallagher <sgallagh@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Fix warnings: uninitialized variableLukas Slebodnik2013-07-221-1/+1
|
* SSH: Use separate field for domain name in client requestsJan Cholasta2013-05-074-37/+29
| | | | | Instead of appending @domain to names when the --domain option of sss_ssh_* is used, put domain name in a separate field in client requests.
* Include talloc log in our debug facilityMichal Zidek2012-10-292-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1495
* SSH: Simplify public key formatting functionJan Cholasta2012-09-041-2/+1
|
* SSH: Return error code in SSH utility functionsJan Cholasta2012-09-041-6/+7
|
* SSH: Don't abort connection in sss_ssh_knownhostsproxy when DNS records are ↵Jan Cholasta2012-05-311-36/+49
| | | | | | missing https://fedorahosted.org/sssd/ticket/1356
* SSH: Supress error message output in sss_ssh_knownhostsproxyJan Cholasta2012-05-312-15/+8
|
* SSH: Add support for hashed known_hostsJan Cholasta2012-04-241-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1203
* Convert read and write operations to sss_atomic_readJakub Hrozek2012-04-201-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1209
* SSH: Fix infinite loop in sss_ssh_knownhostsproxyJan Cholasta2012-03-201-6/+9
| | | | https://fedorahosted.org/sssd/ticket/1268
* SSH: Canonicalize host name and do reverse DNS lookup in sss_ssh_knownhostsproxyJan Cholasta2012-03-151-26/+38
| | | | https://fedorahosted.org/sssd/ticket/1245
* SSH: Allow clients to explicitly specify host aliasJan Cholasta2012-03-154-6/+25
| | | | | This change removes the need to canonicalize host names on the responder side - the relevant code was removed.
* Fixed resource leak in ssh client codeJan Zeleny2012-03-091-0/+1
|
* Fixed uninitialized pointer in SSH authorized keys clientJan Zeleny2012-03-091-1/+1
|
* Fixed uninitialized pointer in SSH known host proxyJan Zeleny2012-03-091-1/+1
|
* SSH: Remove unused --file option of sss_ssh_knownhostsproxyJan Cholasta2012-02-271-5/+0
|
* SSH: Add more debugging messagesJan Cholasta2012-02-272-4/+18
|
* SSH: Manage global known_hosts file in the responderJan Cholasta2012-02-261-78/+2
| | | | https://fedorahosted.org/sssd/ticket/1193
* SSH: Continue connecting to SSH server even when SSSD is not running in ↵Jan Cholasta2012-02-261-112/+85
| | | | | | | | | | sss_ssh_knownhostsproxy Additionally, don't drop the connection when the sss_ssh_knownhostsproxy process receives a signal. https://fedorahosted.org/sssd/ticket/1179 https://fedorahosted.org/sssd/ticket/1184
* SSH: Refactor responder and client common codeJan Cholasta2012-02-264-177/+72
|
* SSH: Verify that names received from client are valid UTF-8 in responderJan Cholasta2012-02-131-0/+17
| | | | | | | Also added a comment describing the wire format of client requests and responses. https://fedorahosted.org/sssd/ticket/1177
* Fix SSH compilation on RHEL5Jakub Hrozek2012-02-071-1/+3
|
* SSH: OpenSSH known_hosts clientJan Cholasta2012-02-071-0/+401
|
* SSH: OpenSSH authorized_keys clientJan Cholasta2012-02-071-0/+130
|
* SSH: Common client codeJan Cholasta2012-02-072-0/+347
generated by cgit (git 2.34.1) at 2026-02-01 13:52:49 +0000