Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | SUDO Integration - multiple search basessudo-with-plugin | Pavel Březina | 2011-11-21 | 1 | -27/+43 |
| | |||||
* | SUDO integration - SUDO LDAP provider - store sudoers to sysdb | Pavel Březina | 2011-11-21 | 2 | -3/+104 |
| | |||||
* | sudo sysdb interface: sysdb_sudo_dn() | Pavel Březina | 2011-11-21 | 2 | -0/+13 |
| | |||||
* | sudo sysdb interface: sudo rules | Jakub Hrozek | 2011-11-21 | 4 | -6/+518 |
| | |||||
* | sudo sysdb interface: sudo commands | Jakub Hrozek | 2011-11-21 | 4 | -1/+403 |
| | |||||
* | SUDO Integration - SUDO responder refactored | Pavel Březina | 2011-11-21 | 7 | -222/+791 |
| | |||||
* | SUDO Integration - SUDO responder - refresh SUDOers | Pavel Březina | 2011-11-21 | 1 | -0/+7 |
| | |||||
* | SUDO integration - SUDO LDAP provider | Pavel Březina | 2011-11-21 | 5 | -0/+296 |
| | |||||
* | SUDO Integration - LDAP configuration options | Pavel Březina | 2011-11-21 | 3 | -1/+25 |
| | | | | - ldap_sudo_search_base | ||||
* | SUDO integration - Responder <-> Data provider communication functions | Pavel Březina | 2011-11-21 | 3 | -0/+79 |
| | |||||
* | SUDO integration - Data provider backend handler | Pavel Březina | 2011-11-21 | 4 | -0/+115 |
| | |||||
* | SUDO integration - configure and makefile updated | Pavel Březina | 2011-11-15 | 3 | -0/+38 |
| | |||||
* | SUDO integration - SUDO responder | Pavel Březina | 2011-11-15 | 6 | -1/+520 |
| | |||||
* | SUDO integration - SUDO plugin | Pavel Březina | 2011-11-15 | 4 | -0/+596 |
| | |||||
* | SUDO integration - client common interface | Pavel Březina | 2011-11-08 | 2 | -0/+24 |
| | |||||
* | Fixed empty loginShell in proxy provider | Jan Zeleny | 2011-11-07 | 1 | -4/+32 |
| | | | | https://fedorahosted.org/sssd/ticket/892 | ||||
* | Fixed possible resource leak in create_mail_spool() | Jan Zeleny | 2011-11-07 | 1 | -9/+9 |
| | | | | https://fedorahosted.org/sssd/ticket/1071 | ||||
* | Fixed possible resource leak in get_uid_from_pid() | Jan Zeleny | 2011-11-07 | 1 | -4/+10 |
| | | | | https://fedorahosted.org/sssd/ticket/1069 | ||||
* | Use correct state struct in sdap_initgr_rfc2307bis_next_base | Jakub Hrozek | 2011-11-07 | 1 | -2/+3 |
| | |||||
* | Fix segfault in sdap_get_initgr_user | Jakub Hrozek | 2011-11-07 | 1 | -1/+2 |
| | |||||
* | Periodic translation file update | Stephen Gallagher | 2011-11-02 | 74 | -13664/+33273 |
| | |||||
* | SYSDB: add index for nameAlias | Stephen Gallagher | 2011-11-02 | 3 | -1/+97 |
| | |||||
* | Handle group renaming correctly | Jan Zeleny | 2011-11-02 | 1 | -2/+7 |
| | | | | https://fedorahosted.org/sssd/ticket/1040 | ||||
* | Support to request canonicalization in LDAP/IPA provider | Jan Zeleny | 2011-11-02 | 10 | -1/+45 |
| | | | | https://fedorahosted.org/sssd/ticket/957 | ||||
* | Add support to request canonicalization on krb AS requests | Jan Zeleny | 2011-11-02 | 10 | -6/+68 |
| | | | | https://fedorahosted.org/sssd/ticket/957 | ||||
* | Add wrapper for krb5_get_init_creds_opt_set_canonicalize | Jan Zeleny | 2011-11-02 | 3 | -0/+14 |
| | |||||
* | Fixes debug-tests.c coverity issues: NEGATIVE_RETURNS, FORWARD_NULL | Pavel Březina | 2011-11-02 | 1 | -49/+140 |
| | | | | https://fedorahosted.org/sssd/ticket/1046 | ||||
* | RESPONDER: Fix segfault in sss_packet_send() | Stephen Gallagher | 2011-11-02 | 1 | -0/+5 |
| | | | | | | | | | There are several places (all error-handling) where sss_cmd_done() is called with no response packet created. As a short-term solution, we need to check whether the packet is NULL and simply return EINVAL. client_send() (the consumer) will then forcibly disconnect the client (which will return PAM_SYSTEM_ERR to the client). | ||||
* | LDAP: Add support for multiple search bases for group enumeration | Stephen Gallagher | 2011-11-02 | 4 | -24/+101 |
| | |||||
* | LDAP: Add support for multiple search bases for user enumeration | Stephen Gallagher | 2011-11-02 | 4 | -8/+49 |
| | |||||
* | LDAP: Convert ldap_*_search_filter | Stephen Gallagher | 2011-11-02 | 3 | -59/+23 |
| | | | | | | Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter. | ||||
* | LDAP: Update manpages with multiple search base information | Stephen Gallagher | 2011-11-02 | 1 | -1/+56 |
| | |||||
* | LDAP: Add multiple search bases for initgroups (RFC2307bis groups) | Stephen Gallagher | 2011-11-02 | 1 | -77/+225 |
| | |||||
* | LDAP: Add multiple search bases for initgroups (RFC2307 groups) | Stephen Gallagher | 2011-11-02 | 1 | -17/+99 |
| | |||||
* | LDAP: Add multiple search bases for initgroups (users) | Stephen Gallagher | 2011-11-02 | 1 | -30/+72 |
| | |||||
* | LDAP: Support multiple group search bases (non-enumeration, RFC2307) | Stephen Gallagher | 2011-11-02 | 4 | -16/+74 |
| | |||||
* | LDAP: Support multiple netgroup search bases | Stephen Gallagher | 2011-11-02 | 3 | -14/+65 |
| | |||||
* | LDAP: Support multiple user search bases (non-enumeration) | Stephen Gallagher | 2011-11-02 | 4 | -14/+70 |
| | |||||
* | LDAP: Add parser for multiple search bases | Stephen Gallagher | 2011-11-02 | 5 | -26/+380 |
| | |||||
* | Make sdap_get_id_specific_filter() more strict | Stephen Gallagher | 2011-11-02 | 2 | -4/+4 |
| | |||||
* | Fix size return for split_on_separator() | Stephen Gallagher | 2011-11-02 | 2 | -6/+6 |
| | | | | | | | It was returning the size of the array, rather than the number of elements. (The array was NULL-terminated). This argument was only used in one place that was actually working around this odd return value. | ||||
* | Remove unused sdap_options attributes | Stephen Gallagher | 2011-11-02 | 1 | -3/+0 |
| | | | | These DNs were never assigned or referenced anywhere. | ||||
* | Cleanup of unused function in ldap access provider | Jan Zeleny | 2011-11-02 | 1 | -2/+0 |
| | |||||
* | Remove confusing do-while loop | Jakub Hrozek | 2011-11-02 | 1 | -35/+36 |
| | | | | | The deref processing would return a single control back. The do-while loop was harmless but confusing. | ||||
* | Use LDAPDerefSpec properly | Jakub Hrozek | 2011-11-02 | 1 | -4/+6 |
| | | | | | | | | ldap_create_deref_control_value expects an array of LDAPDerefSpec structures with LDAPDerefSpec.derefAttr == NULL as a sentinel. We were passing a single instance of a LDAPDerefSpec structure. https://fedorahosted.org/sssd/ticket/1050 | ||||
* | Steal result onto mem_ctx in sdap_initgr_nested_get_direct_parents | Jakub Hrozek | 2011-10-31 | 1 | -2/+1 |
| | |||||
* | RFC2307bis initgroups: fix nested groups processing | Jakub Hrozek | 2011-10-31 | 1 | -20/+33 |
| | | | | | Due to incorrectly written loop, SSSD would go into infitite loop if it processed the same group on two different levels of membership. | ||||
* | resolver: Free the whole hostent structure | Jakub Hrozek | 2011-10-31 | 1 | -1/+1 |
| | | | | | We would only free the hostent structure itself, not its contents. Use a wrapper provided by c-ares to do so. | ||||
* | Do not leak hash table iterator during proxy auth | Jakub Hrozek | 2011-10-31 | 1 | -0/+1 |
| | |||||
* | Plug memory leaks in sysdb_ops | Jakub Hrozek | 2011-10-31 | 1 | -20/+54 |
| | | | | https://fedorahosted.org/sssd/ticket/1051 |