summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* SUDO Integration - multiple search basessudo-with-pluginPavel Březina2011-11-211-27/+43
|
* SUDO integration - SUDO LDAP provider - store sudoers to sysdbPavel Březina2011-11-212-3/+104
|
* sudo sysdb interface: sysdb_sudo_dn()Pavel Březina2011-11-212-0/+13
|
* sudo sysdb interface: sudo rulesJakub Hrozek2011-11-214-6/+518
|
* sudo sysdb interface: sudo commandsJakub Hrozek2011-11-214-1/+403
|
* SUDO Integration - SUDO responder refactoredPavel Březina2011-11-217-222/+791
|
* SUDO Integration - SUDO responder - refresh SUDOersPavel Březina2011-11-211-0/+7
|
* SUDO integration - SUDO LDAP providerPavel Březina2011-11-215-0/+296
|
* SUDO Integration - LDAP configuration optionsPavel Březina2011-11-213-1/+25
| | | | - ldap_sudo_search_base
* SUDO integration - Responder <-> Data provider communication functionsPavel Březina2011-11-213-0/+79
|
* SUDO integration - Data provider backend handlerPavel Březina2011-11-214-0/+115
|
* SUDO integration - configure and makefile updatedPavel Březina2011-11-153-0/+38
|
* SUDO integration - SUDO responderPavel Březina2011-11-156-1/+520
|
* SUDO integration - SUDO pluginPavel Březina2011-11-154-0/+596
|
* SUDO integration - client common interfacePavel Březina2011-11-082-0/+24
|
* Fixed empty loginShell in proxy providerJan Zeleny2011-11-071-4/+32
| | | | https://fedorahosted.org/sssd/ticket/892
* Fixed possible resource leak in create_mail_spool()Jan Zeleny2011-11-071-9/+9
| | | | https://fedorahosted.org/sssd/ticket/1071
* Fixed possible resource leak in get_uid_from_pid()Jan Zeleny2011-11-071-4/+10
| | | | https://fedorahosted.org/sssd/ticket/1069
* Use correct state struct in sdap_initgr_rfc2307bis_next_baseJakub Hrozek2011-11-071-2/+3
|
* Fix segfault in sdap_get_initgr_userJakub Hrozek2011-11-071-1/+2
|
* Periodic translation file updateStephen Gallagher2011-11-0274-13664/+33273
|
* SYSDB: add index for nameAliasStephen Gallagher2011-11-023-1/+97
|
* Handle group renaming correctlyJan Zeleny2011-11-021-2/+7
| | | | https://fedorahosted.org/sssd/ticket/1040
* Support to request canonicalization in LDAP/IPA providerJan Zeleny2011-11-0210-1/+45
| | | | https://fedorahosted.org/sssd/ticket/957
* Add support to request canonicalization on krb AS requestsJan Zeleny2011-11-0210-6/+68
| | | | https://fedorahosted.org/sssd/ticket/957
* Add wrapper for krb5_get_init_creds_opt_set_canonicalizeJan Zeleny2011-11-023-0/+14
|
* Fixes debug-tests.c coverity issues: NEGATIVE_RETURNS, FORWARD_NULLPavel Březina2011-11-021-49/+140
| | | | https://fedorahosted.org/sssd/ticket/1046
* RESPONDER: Fix segfault in sss_packet_send()Stephen Gallagher2011-11-021-0/+5
| | | | | | | | | There are several places (all error-handling) where sss_cmd_done() is called with no response packet created. As a short-term solution, we need to check whether the packet is NULL and simply return EINVAL. client_send() (the consumer) will then forcibly disconnect the client (which will return PAM_SYSTEM_ERR to the client).
* LDAP: Add support for multiple search bases for group enumerationStephen Gallagher2011-11-024-24/+101
|
* LDAP: Add support for multiple search bases for user enumerationStephen Gallagher2011-11-024-8/+49
|
* LDAP: Convert ldap_*_search_filterStephen Gallagher2011-11-023-59/+23
| | | | | | Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter.
* LDAP: Update manpages with multiple search base informationStephen Gallagher2011-11-021-1/+56
|
* LDAP: Add multiple search bases for initgroups (RFC2307bis groups)Stephen Gallagher2011-11-021-77/+225
|
* LDAP: Add multiple search bases for initgroups (RFC2307 groups)Stephen Gallagher2011-11-021-17/+99
|
* LDAP: Add multiple search bases for initgroups (users)Stephen Gallagher2011-11-021-30/+72
|
* LDAP: Support multiple group search bases (non-enumeration, RFC2307)Stephen Gallagher2011-11-024-16/+74
|
* LDAP: Support multiple netgroup search basesStephen Gallagher2011-11-023-14/+65
|
* LDAP: Support multiple user search bases (non-enumeration)Stephen Gallagher2011-11-024-14/+70
|
* LDAP: Add parser for multiple search basesStephen Gallagher2011-11-025-26/+380
|
* Make sdap_get_id_specific_filter() more strictStephen Gallagher2011-11-022-4/+4
|
* Fix size return for split_on_separator()Stephen Gallagher2011-11-022-6/+6
| | | | | | | It was returning the size of the array, rather than the number of elements. (The array was NULL-terminated). This argument was only used in one place that was actually working around this odd return value.
* Remove unused sdap_options attributesStephen Gallagher2011-11-021-3/+0
| | | | These DNs were never assigned or referenced anywhere.
* Cleanup of unused function in ldap access providerJan Zeleny2011-11-021-2/+0
|
* Remove confusing do-while loopJakub Hrozek2011-11-021-35/+36
| | | | | The deref processing would return a single control back. The do-while loop was harmless but confusing.
* Use LDAPDerefSpec properlyJakub Hrozek2011-11-021-4/+6
| | | | | | | | ldap_create_deref_control_value expects an array of LDAPDerefSpec structures with LDAPDerefSpec.derefAttr == NULL as a sentinel. We were passing a single instance of a LDAPDerefSpec structure. https://fedorahosted.org/sssd/ticket/1050
* Steal result onto mem_ctx in sdap_initgr_nested_get_direct_parentsJakub Hrozek2011-10-311-2/+1
|
* RFC2307bis initgroups: fix nested groups processingJakub Hrozek2011-10-311-20/+33
| | | | | Due to incorrectly written loop, SSSD would go into infitite loop if it processed the same group on two different levels of membership.
* resolver: Free the whole hostent structureJakub Hrozek2011-10-311-1/+1
| | | | | We would only free the hostent structure itself, not its contents. Use a wrapper provided by c-ares to do so.
* Do not leak hash table iterator during proxy authJakub Hrozek2011-10-311-0/+1
|
* Plug memory leaks in sysdb_opsJakub Hrozek2011-10-311-20/+54
| | | | https://fedorahosted.org/sssd/ticket/1051