summaryrefslogtreecommitdiffstats
path: root/src/providers
Commit message (Collapse)AuthorAgeFilesLines
* sdap_sudo.c: move _recv after _donePavel Březina2012-06-291-45/+45
|
* sudo ldap provider: modify highest USN in sdap_sudo_rules_refresh_done()Pavel Březina2012-06-291-3/+14
|
* sudo: clean upPavel Březina2012-06-292-9/+2
|
* sudo ldap provider: notify responder when an expired rule has been deletedPavel Březina2012-06-291-11/+76
| | | | | | | | | | | | | | | | When an expired rule is not present on the server server during specific rule refresh, the provider will notify the sudo responder that it has been deleted. Because there is a high probability that some other rules were deleted from the server as well, we want to remove them from sysdb as soon as possible. Once the responder is notified, it will schedule an out of band full refresh. This is issued by responder, because we already have a mechanism that prohibits creation of similar request (i.e. once the OOB full refresh is scheduled, there won't be another). The notification is done by returning: DP error = DP_ERR_OK, error = ENOENT
* sudo ldap provider: return number of downloaded rules in ↵Pavel Březina2012-06-293-6/+16
| | | | sdap_sudo_refresh_recv()
* sudo ldap provider: support periodical smart refreshPavel Březina2012-06-291-73/+177
| | | | | | | | | | | | When SSSD is started, then full refresh is scheduled. The smart refresh is scheduled after this full refresh, if USN (or modifyTimestamp) values are available. If full refresh interval <= smart refresh interval then full refresh will be disabled. If both refresh types are 0 then smart refresh interval is set to default value.
* sudo ldap provider: add periodical smart refresh APIPavel Březina2012-06-291-0/+63
|
* sudo provider: add ldap_sudo_smart_refresh_intervalPavel Březina2012-06-293-0/+3
|
* sudo ldap provider: when sysdb filter is NULL remove downloaded rulesPavel Březina2012-06-291-5/+61
|
* sudo ldap provider: add smart refresh APIPavel Březina2012-06-291-0/+128
|
* sudo ldap provider: remember highest usn after full refreshPavel Březina2012-06-291-1/+9
|
* sudo ldap provider: add sdap_sudo_set_usn()Pavel Březina2012-06-291-0/+22
|
* sudo ldap provider: find highest USNPavel Březina2012-06-295-22/+113
|
* ldap provider: add sudo usn valuePavel Březina2012-06-295-0/+11
|
* sudo ldap provider: support periodical full refreshPavel Březina2012-06-291-0/+129
|
* sudo ldap provider: add new timer APIPavel Březina2012-06-292-0/+194
|
* sudo provider: remove old timerPavel Březina2012-06-296-351/+0
|
* sudo provider: add ldap_sudo_full_refresh_intervalPavel Březina2012-06-293-0/+3
|
* sudo backend - add support for on demand refresh of specific rulesPavel Březina2012-06-291-7/+61
|
* sudo backend - support only on demand full refreshPavel Březina2012-06-291-28/+4
|
* sudo ldap provider: add support for on demand refresh of specific rulesPavel Březina2012-06-293-0/+11
|
* sudo ldap provider: provide API for refresh of specific rulesPavel Březina2012-06-291-0/+93
|
* sudo ldap provider: add support for on demand full refreshPavel Březina2012-06-292-16/+26
|
* sudo ldap provider: provide API for full refreshPavel Březina2012-06-292-1/+126
|
* sudo ldap provider: add expiration time to each rulePavel Březina2012-06-293-8/+30
|
* sudo ldap provider: add domain info in sdap_sudo_refresh_statePavel Březina2012-06-291-0/+2
|
* sudo ldap provider: add sysdb ctx in sdap_sudo_refresh_statePavel Březina2012-06-291-7/+7
|
* sudo ldap provider: give sdap_sudo_refresh_send() search and purge filtersPavel Březina2012-06-294-278/+93
|
* sudo ldap provider: move async routines to sdap_async_sudo.cPavel Březina2012-06-292-675/+710
|
* Add support for ID rangesSumit Bose2012-06-216-10/+197
|
* Move some debug lines to new debug log levelsStef Walter2012-06-207-15/+15
| | | | | | | * These are common lines of debug output when starting up sssd https://bugzilla.redhat.com/show_bug.cgi?id=811113
* Fix possible segfault in sdap_save_group()Jan Zeleny2012-06-201-2/+11
|
* KRB5: Avoid shadowing dirnameStephen Gallagher2012-06-151-20/+21
| | | | | The variable 'dirname' is a publicly declared variable in libgen.h on older systems such as RHEL 5
* KRB5: Auto-detect DIR cache support in configureStephen Gallagher2012-06-154-5/+33
| | | | | | We can't support the DIR cache features in systems with kerberos libraries older than 1.10. Make sure we don't build it on those systems.
* KRB5: Update DEBUG macros for create_ccache_dir and find_ccdir_parent_dataStephen Gallagher2012-06-151-17/+30
|
* LDAP: Fix missing variable in debug messageStephen Gallagher2012-06-151-1/+1
|
* Fixed debug message in sdap_save_group()Jan Zeleny2012-06-151-1/+1
|
* Make krb5_ccname_template and krb5_ccachedir configurableJakub Hrozek2012-06-142-4/+4
|
* Use Kerberos context in KRB5_DEBUGJakub Hrozek2012-06-142-55/+61
| | | | | Passing Kerberos context to sss_krb5_get_error_message will allow us to get better error messages.
* Add support for storing credential caches in the DIR: back endJakub Hrozek2012-06-145-70/+510
| | | | https://fedorahosted.org/sssd/ticket/974
* Add a credential cache back end structureJakub Hrozek2012-06-147-148/+382
| | | | | | To be able to add support for new credential cache types easily, this patch creates a new structure sss_krb5_cc_be that defines common operations with a credential cache, such as create, check if used or remove.
* Handle trailing slash in the ccname templateJakub Hrozek2012-06-141-8/+14
| | | | | | With the DIR cache support, it's perfectly legal to specify a ccname directory that ends with a slash. The create_dir function did not handle that situation correctly.
* Split parse_krb5_child_response so it can be reusedJakub Hrozek2012-06-143-119/+170
| | | | | krb5-child-test will be another consumer. It also makes the code more readable by splitting a huge function.
* Allow redefining the KRB5_CHILD pathJakub Hrozek2012-06-141-3/+7
| | | | | The krb5-child-test will want to run the child from the current directory.
* Provide more debugging in krb5_child and ldap_childJakub Hrozek2012-06-142-14/+73
| | | | https://fedorahosted.org/sssd/ticket/1225
* Two small krb5_child fixesJakub Hrozek2012-06-141-3/+10
| | | | | * Allocation check was missing * a DEBUG statement overwrote errno
* Fix an issue in ghost usersJan Zeleny2012-06-131-75/+47
| | | | | | | | | | | | | | | | | There was an issue with ghost members in nested groups. Consider a scenario with two groups A and B, B being member of A and having some ghost members. In such case SSSD stored both groups, then added membership between them and then added ghost members to the group B. The problem was that adding ghost members to group B didn't propagate these ghost members to group A. This functionality could have been solved by memberof plugin but the logic is far more complicated that changes this patch introduces. The change is simple: add ghost members at the same time as the group is created, even if groups are supposed to be stored in two passes. That way ghost members will be present at the time A -> B membership is created and they will be propagated as expected.
* LDAP: Auto-detect support for the ldap match ruleStephen Gallagher2012-06-136-5/+107
| | | | | | | | This patch extends the RootDSE lookup so that we will perform a second request to test whether the match rule syntax can be used. If both groups and initgroups are disabled in the configuration, this lookup request can be skipped.
* LDAP: Add support for AD chain matching extension in initgroupsStephen Gallagher2012-06-133-9/+325
|
* LDAP: Add support for AD chain matching extension in group lookupsStephen Gallagher2012-06-133-9/+417
|
generated by cgit (git 2.34.1) at 2024-06-23 18:56:22 +0000