summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Update translation files for releasesssd-1_6_3Stephen Gallagher2011-11-0227-25/+15486
|
* Fix bad backport of group rename patchStephen Gallagher2011-11-021-1/+1
|
* SYSDB: add index for nameAliasStephen Gallagher2011-11-022-1/+106
|
* Handle group renaming correctlyJan Zeleny2011-11-021-2/+7
| | | | https://fedorahosted.org/sssd/ticket/1040
* Use LDAPDerefSpec properlyJakub Hrozek2011-11-021-4/+6
| | | | | | | | ldap_create_deref_control_value expects an array of LDAPDerefSpec structures with LDAPDerefSpec.derefAttr == NULL as a sentinel. We were passing a single instance of a LDAPDerefSpec structure. https://fedorahosted.org/sssd/ticket/1050
* Steal result onto mem_ctx in sdap_initgr_nested_get_direct_parentsJakub Hrozek2011-10-311-2/+1
|
* RFC2307bis initgroups: fix nested groups processingJakub Hrozek2011-10-311-20/+33
| | | | | Due to incorrectly written loop, SSSD would go into infitite loop if it processed the same group on two different levels of membership.
* RESPONDER: Fix segfault in sss_packet_send()Stephen Gallagher2011-10-251-0/+5
| | | | | | | | | There are several places (all error-handling) where sss_cmd_done() is called with no response packet created. As a short-term solution, we need to check whether the packet is NULL and simply return EINVAL. client_send() (the consumer) will then forcibly disconnect the client (which will return PAM_SYSTEM_ERR to the client).
* Plug memory leaks in LDAP providerJakub Hrozek2011-10-251-0/+3
|
* Bumping version to 1.6.3Stephen Gallagher2011-10-181-1/+1
|
* Updating translation files for string freezesssd-1_6_2Stephen Gallagher2011-10-1872-3808/+175233
|
* Use fewer transactions during IPA initgroupsJakub Hrozek2011-10-171-171/+286
|
* Use fewer transactions during RFC2307bis initgroupsJakub Hrozek2011-10-171-368/+397
|
* Utility functions for LDAP nested schema initgroupsJakub Hrozek2011-10-171-0/+119
|
* MONITOR: fix timeout conversionStephen Gallagher2011-10-171-1/+1
|
* gitignore additionsJakub Hrozek2011-10-171-1/+20
|
* Sanitize DN in sysdb_get_direct_parentsJakub Hrozek2011-10-171-1/+7
|
* Add a missing breakJakub Hrozek2011-10-171-0/+1
|
* Update sssd-example.confMarko Myllynen2011-10-141-3/+6
| | | | | | Mention cache_credentials and tweak the AD example to match the wiki page. https://fedorahosted.org/sssd/wiki/Configuring%20sssd%20to%20authenticate%20with%20a%20Windows%202008%20Domain%20Server
* Report on errno, not return code in create_socket_symlinkJakub Hrozek2011-10-141-0/+2
| | | | https://fedorahosted.org/sssd/ticket/1044
* Fix off-by-one error in remove_socket_symlink()Jakub Hrozek2011-10-141-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1043
* Fixed timeout handling in respondersJan Zeleny2011-10-141-72/+72
|
* BUILDSYS: Fix --without-manpagesStephen Gallagher2011-10-142-1/+8
| | | | | | | | | We weren't honoring the --without-manpages option, and this was causing builds to break. Note: 'make dist[check]' will not work if you have configured with --without-manpages because it will not be able to pre-generate the translation files necessary for tarball release.
* HBAC: Use originalMember for identifying hostgroupsStephen Gallagher2011-10-143-45/+165
|
* HBAC: Use originalMember for identifying servicegroupsStephen Gallagher2011-10-143-41/+169
|
* HBAC: Do not save member/memberOf linksStephen Gallagher2011-10-141-120/+0
| | | | We can just trust the values from the FreeIPA server
* Check if dp_requests hash table exists before using itJakub Hrozek2011-10-131-0/+5
|
* Do not delete requests inside hash_iterate loopJakub Hrozek2011-10-131-10/+12
|
* Streamline the example configJakub Hrozek2011-10-131-72/+28
| | | | https://fedorahosted.org/sssd/ticket/1014
* man page fix (lists are comma-separated)Jan Zeleny2011-10-133-4/+4
| | | | https://fedorahosted.org/sssd/ticket/1024
* Append PID to sbus server socket name, let clients use a symlinkJakub Hrozek2011-10-137-21/+175
| | | | https://fedorahosted.org/sssd/ticket/1034
* Add option to follow symlinks to check_file()Jakub Hrozek2011-10-136-7/+35
|
* Fix small bug where TALLOC_CTX could end up unfreed.Pavel Zuna2011-10-061-3/+3
|
* Fix typo in sysdb_get_direct_parentsJakub Hrozek2011-10-061-1/+1
|
* Use explicit base 10 for converting strings to integersJakub Hrozek2011-10-035-8/+8
| | | | https://fedorahosted.org/sssd/ticket/1013
* Return users and groups based on aliasJakub Hrozek2011-10-033-8/+10
|
* Store name aliases for users, groupsJakub Hrozek2011-10-033-37/+219
|
* Add a sysdb_get_direct_parents functionJakub Hrozek2011-10-033-57/+113
|
* Add sysdb interface to get name aliasesJakub Hrozek2011-10-032-1/+64
|
* HBAC: fix typos preventing proper hostgroup evaluationStephen Gallagher2011-09-281-3/+3
|
* IPA access: hostname comparison should be case-insensitiveJakub Hrozek2011-09-281-1/+1
|
* Unbreak ./configureMarko Myllynen2011-09-281-1/+1
| | | | | | | | | | | | ./configure at least from 1.5.13 is failing on Ubuntu Oneiric. The node ``Conditionals'' of automake manual states: Note that you must arrange for _every_ `AM_CONDITIONAL' to be invoked every time `configure' is run. If `AM_CONDITIONAL' is run conditionally (e.g., in a shell `if' statement), then the result will confuse `automake'. So the trick is to run AM_CONDITIONAL unconditionally.
* Enable the midpoint cache update by defaultStephen Gallagher2011-09-222-2/+2
| | | | https://fedorahosted.org/sssd/ticket/918
* Added quiet option to pam_sssPavel Březina2011-09-202-5/+36
| | | | https://fedorahosted.org/sssd/ticket/894
* Fix uninitialized pointer read in sdap_gssapi_get_default_realm()Jakub Hrozek2011-09-201-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1003
* Add missing options to sssd.api.confMarko Myllynen2011-09-203-3/+26
|
* MAN: Add more information about internal credential storageStephen Gallagher2011-09-202-1/+8
|
* Fix typo in specfileStephen Gallagher2011-09-151-2/+2
|
* Do not build documentation on RHEL 5Stephen Gallagher2011-09-151-1/+17
| | | | | RHEL 5 has a very old version of doxygen that does not search the correct locations for documentation.
* MONITOR: Correctly detect lack of response from servicesStephen Gallagher2011-09-151-21/+26
| | | | | | | | | | We were incorrectly using DBUS_ERROR_TIMEOUT here. The correct behaviour is to check for DBUS_ERROR_NO_REPLY. This way we will properly handle the three-tries in the tasks_check_handler(). Additionally, we weren't properly handling failure counts correctly, meaning we weren't restarting stuck services in a timely manner.