summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Added and modified options for IPA netgroupsJan Zeleny2011-11-236-31/+199
|
* Modified sdap_parse_search_base()Jan Zeleny2011-11-234-16/+14
|
* Renamed some LDAP routinesJan Zeleny2011-11-236-41/+49
| | | | | These were renamed just ot make sure they are not mistook for IPA netgroup functions.
* Set more strict permissions on keyringSimo Sorce2011-11-223-1/+29
| | | | | We want to confine access to the keyring to the current process and not let root easily peek into the keyring contents.
* Fixed unchecked value of setenv() in check_and_export_options()Jan Zeleny2011-11-221-2/+5
| | | | https://fedorahosted.org/sssd/ticket/1080
* Cleanup: Remove unused parametersJakub Hrozek2011-11-2236-185/+84
|
* SYSDB: Make ENOENT log messages less threateningStephen Gallagher2011-11-221-16/+54
| | | | | Previously, they were reported with the prefix "Error:" which caused confusion among end-users while debugging.
* Fix FTBFS related to -Werror=format-securityKrzysztof Klimonda2011-11-212-2/+2
|
* RESPONDER: Ensure that all input strings are valid UTF-8Stephen Gallagher2011-11-187-2/+53
|
* Prevent printing NULL in several places of LDAP providerJakub Hrozek2011-11-182-5/+9
|
* Use one transaction instead of two during RFC2307bis group processingJakub Hrozek2011-11-111-31/+55
| | | | https://fedorahosted.org/sssd/ticket/1054
* Squash transactions in sdap_initgr_common_storeJakub Hrozek2011-11-111-6/+25
| | | | https://fedorahosted.org/sssd/ticket/1053
* configAPI: Fix removing in old domain when saving a new domainJakub Hrozek2011-11-101-2/+2
|
* Typo fixesMarko Myllynen2011-11-102-2/+2
| | | | Fix few trivial types reported by Yuri.
* SBUS: Fix DEBUG log matchingStephen Gallagher2011-11-101-7/+8
| | | | | | This log message should only be displayed at the most verbose of log levels. Since it didn't match, it was resulting in a Coverity error warning of the printing of an uninitialized value (fd).
* Fix typos in manual pagesYuri Chornoivan2011-11-104-4/+4
|
* Fixed translation bugThorsten Scherf2011-11-081-1/+1
|
* LDAP: Remove redundant groups from the lookup listStephen Gallagher2011-11-081-23/+0
|
* Fixed empty loginShell in proxy providerJan Zeleny2011-11-071-4/+32
| | | | https://fedorahosted.org/sssd/ticket/892
* Fixed possible resource leak in create_mail_spool()Jan Zeleny2011-11-071-9/+9
| | | | https://fedorahosted.org/sssd/ticket/1071
* Fixed possible resource leak in get_uid_from_pid()Jan Zeleny2011-11-071-4/+10
| | | | https://fedorahosted.org/sssd/ticket/1069
* Use correct state struct in sdap_initgr_rfc2307bis_next_baseJakub Hrozek2011-11-071-2/+3
|
* Fix segfault in sdap_get_initgr_userJakub Hrozek2011-11-071-1/+2
|
* Periodic translation file updateStephen Gallagher2011-11-0274-13664/+33273
|
* SYSDB: add index for nameAliasStephen Gallagher2011-11-023-1/+97
|
* Handle group renaming correctlyJan Zeleny2011-11-021-2/+7
| | | | https://fedorahosted.org/sssd/ticket/1040
* Support to request canonicalization in LDAP/IPA providerJan Zeleny2011-11-0210-1/+45
| | | | https://fedorahosted.org/sssd/ticket/957
* Add support to request canonicalization on krb AS requestsJan Zeleny2011-11-0210-6/+68
| | | | https://fedorahosted.org/sssd/ticket/957
* Add wrapper for krb5_get_init_creds_opt_set_canonicalizeJan Zeleny2011-11-023-0/+14
|
* Fixes debug-tests.c coverity issues: NEGATIVE_RETURNS, FORWARD_NULLPavel Březina2011-11-021-49/+140
| | | | https://fedorahosted.org/sssd/ticket/1046
* RESPONDER: Fix segfault in sss_packet_send()Stephen Gallagher2011-11-021-0/+5
| | | | | | | | | There are several places (all error-handling) where sss_cmd_done() is called with no response packet created. As a short-term solution, we need to check whether the packet is NULL and simply return EINVAL. client_send() (the consumer) will then forcibly disconnect the client (which will return PAM_SYSTEM_ERR to the client).
* LDAP: Add support for multiple search bases for group enumerationStephen Gallagher2011-11-024-24/+101
|
* LDAP: Add support for multiple search bases for user enumerationStephen Gallagher2011-11-024-8/+49
|
* LDAP: Convert ldap_*_search_filterStephen Gallagher2011-11-023-59/+23
| | | | | | Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter.
* LDAP: Update manpages with multiple search base informationStephen Gallagher2011-11-021-1/+56
|
* LDAP: Add multiple search bases for initgroups (RFC2307bis groups)Stephen Gallagher2011-11-021-77/+225
|
* LDAP: Add multiple search bases for initgroups (RFC2307 groups)Stephen Gallagher2011-11-021-17/+99
|
* LDAP: Add multiple search bases for initgroups (users)Stephen Gallagher2011-11-021-30/+72
|
* LDAP: Support multiple group search bases (non-enumeration, RFC2307)Stephen Gallagher2011-11-024-16/+74
|
* LDAP: Support multiple netgroup search basesStephen Gallagher2011-11-023-14/+65
|
* LDAP: Support multiple user search bases (non-enumeration)Stephen Gallagher2011-11-024-14/+70
|
* LDAP: Add parser for multiple search basesStephen Gallagher2011-11-025-26/+380
|
* Make sdap_get_id_specific_filter() more strictStephen Gallagher2011-11-022-4/+4
|
* Fix size return for split_on_separator()Stephen Gallagher2011-11-022-6/+6
| | | | | | | It was returning the size of the array, rather than the number of elements. (The array was NULL-terminated). This argument was only used in one place that was actually working around this odd return value.
* Remove unused sdap_options attributesStephen Gallagher2011-11-021-3/+0
| | | | These DNs were never assigned or referenced anywhere.
* Cleanup of unused function in ldap access providerJan Zeleny2011-11-021-2/+0
|
* Remove confusing do-while loopJakub Hrozek2011-11-021-35/+36
| | | | | The deref processing would return a single control back. The do-while loop was harmless but confusing.
* Use LDAPDerefSpec properlyJakub Hrozek2011-11-021-4/+6
| | | | | | | | ldap_create_deref_control_value expects an array of LDAPDerefSpec structures with LDAPDerefSpec.derefAttr == NULL as a sentinel. We were passing a single instance of a LDAPDerefSpec structure. https://fedorahosted.org/sssd/ticket/1050
* Steal result onto mem_ctx in sdap_initgr_nested_get_direct_parentsJakub Hrozek2011-10-311-2/+1
|
* RFC2307bis initgroups: fix nested groups processingJakub Hrozek2011-10-311-20/+33
| | | | | Due to incorrectly written loop, SSSD would go into infitite loop if it processed the same group on two different levels of membership.