summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* SSH: Remove unused --file option of sss_ssh_knownhostsproxyJan Cholasta2012-02-271-5/+0
|
* SSH: Replace blocking getaddrinfo call in the responder with asynchronous ↵Jan Cholasta2012-02-273-26/+56
| | | | resolver code
* SSH: Use fchmod instead of chmod on known_hosts fileJan Cholasta2012-02-271-8/+4
|
* SSH: Add missing break statements to sss_ssh_format_pubkeyJan Cholasta2012-02-271-0/+2
|
* SSH: Add more debugging messagesJan Cholasta2012-02-275-8/+38
|
* SSH: Don't abort known_hosts update when host search failsJan Cholasta2012-02-271-1/+1
|
* AUTOFS: speed up the client by requesting multiple entries at onceJakub Hrozek2012-02-273-78/+239
| | | | https://fedorahosted.org/sssd/ticket/1166
* Eliminate build-time requirement for nscdStephen Gallagher2012-02-272-11/+12
| | | | | | We will now use the autodetected location if available, or else fall back to a value provided by --with-nscd in configure and finally resort to a hard-coded default of /usr/sbin/nscd.
* LDAP: Remove unnecessary filter sanitizeStephen Gallagher2012-02-261-11/+5
| | | | | | The orig_dn here isn't being passed to a filter and therefore must not be santized, as the sanitization process would break DNs that contain (among other things) parentheses.
* SSH: Manage global known_hosts file in the responderJan Cholasta2012-02-263-78/+136
| | | | https://fedorahosted.org/sssd/ticket/1193
* SSH: Continue connecting to SSH server even when SSSD is not running in ↵Jan Cholasta2012-02-261-112/+85
| | | | | | | | | | sss_ssh_knownhostsproxy Additionally, don't drop the connection when the sss_ssh_knownhostsproxy process receives a signal. https://fedorahosted.org/sssd/ticket/1179 https://fedorahosted.org/sssd/ticket/1184
* UTIL: Add function for atomic I/OJan Cholasta2012-02-262-0/+44
|
* SSH: Refactor responder and client common codeJan Cholasta2012-02-266-166/+294
|
* SSH: Save SSH host name aliasesJan Cholasta2012-02-266-42/+120
|
* Modifications to simplify list_missing_attrsJan Zeleny2012-02-248-44/+21
|
* Delete missing attributes from netgroups to be storedJan Zeleny2012-02-246-4/+45
| | | | https://fedorahosted.org/sssd/ticket/1136
* SELinux related attributes added to config APIJan Zeleny2012-02-242-1/+11
|
* IPA hosts refactoringJan Zeleny2012-02-2418-154/+156
|
* LDAP: Only use paging control on requests for multiple entriesStephen Gallagher2012-02-2416-40/+100
| | | | | | | | | | The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
* AUTOFS: Search all search bases for automounter map entriesJakub Hrozek2012-02-231-18/+86
| | | | https://fedorahosted.org/sssd/ticket/1168
* AUTOFS: Invoke implicit setautomntent if neededJakub Hrozek2012-02-232-45/+156
| | | | https://fedorahosted.org/sssd/ticket/1167
* libnl: fix the path to phy80211 subdirectoryJakub Hrozek2012-02-231-4/+20
|
* Move sudo_dom_ctx.user to local variablePavel Březina2012-02-232-8/+8
|
* Honor case_sensitive option in sudo responderPavel Březina2012-02-234-21/+100
| | | | https://fedorahosted.org/sssd/ticket/1205
* LDAP: Properly assign orig_dnStephen Gallagher2012-02-231-0/+1
| | | | This was only used for properly identifying debug messages.
* Save errno value before calling DEBUGJakub Hrozek2012-02-231-2/+4
|
* pam_sss: keep selinux optionalSimo Sorce2012-02-232-3/+6
| | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
* nss_group: Cache the result from sssd when the glibc provided buffer is too ↵Simo Sorce2012-02-231-8/+145
| | | | small.
* IPA: Add ipa_parse_search_base()Stephen Gallagher2012-02-233-19/+72
| | | | | | | | | | Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151
* Don't give memory context in confdb where not neededJan Zeleny2012-02-2117-55/+75
|
* remove unused functionJakub Hrozek2012-02-211-20/+0
|
* End request if ldap_parse_result failsJakub Hrozek2012-02-211-0/+3
|
* Include the fd_limit configuration optionJakub Hrozek2012-02-181-0/+1
|
* RESPONDERS: Make the fd_limit setting configurableStephen Gallagher2012-02-177-4/+63
| | | | | | | | | | This code will now attempt first to see if it has privilege to set the value as specified, and if not it will fall back to the previous behavior. So on systems with the CAP_SYS_RESOURCE capability granted to SSSD, it will be able to ignore the limits.conf hard limit. https://fedorahosted.org/sssd/ticket/1197
* RESPONDERS: Allow increasing the file-descriptor limitStephen Gallagher2012-02-174-0/+48
| | | | | | | This patch will increase the file descriptor limit to 8k or the limits.conf maximum, whichever is lesser. https://fedorahosted.org/sssd/ticket/1197
* Fix case insensitive service lookupsJakub Hrozek2012-02-171-6/+6
|
* LDAP: Ignore group member users that do not have name attributesStephen Gallagher2012-02-171-2/+2
| | | | | | | | Instead of failing the group lookup, just skip them. This was impacting some users of ActiveDirectory where not all users had the appropriate attributes. https://fedorahosted.org/sssd/ticket/1169
* NSS: Always return the same protocol that was requestedStephen Gallagher2012-02-172-9/+26
| | | | https://fedorahosted.org/sssd/ticket/1160
* Redesign purging of the sudo cachePavel Březina2012-02-173-94/+370
| | | | https://fedorahosted.org/sssd/ticket/1173
* Always include all manpage XML files in the distribution tarballStephen Gallagher2012-02-151-2/+3
|
* Refactor sss_result into sss_sudo_resultPavel Březina2012-02-145-36/+38
| | | | https://fedorahosted.org/sssd/ticket/1159
* SSH: Build man pages conditionallyJan Cholasta2012-02-141-3/+5
| | | | https://fedorahosted.org/sssd/ticket/1175
* Fix memory hierarchy when processing nested group membershipsJakub Hrozek2012-02-144-11/+14
| | | | https://fedorahosted.org/sssd/ticket/1186
* Ensure NULL-termination in get_uid_from_pid()Stephen Gallagher2012-02-141-0/+3
| | | | Coverity #12399
* Fix uninitialized value error in proxy providerStephen Gallagher2012-02-131-1/+1
| | | | Coverity #12467
* Check for failure in sss_packet_grow()Stephen Gallagher2012-02-131-5/+5
| | | | Coverity #12489
* Fix bad failure handling in be_sudo_handler()Stephen Gallagher2012-02-131-13/+13
| | | | | | | If the dbus_message_get_args() failed, we would have been dereferencing a NULL be_req. Coverity #12490
* Fix uninitialized in_transactionStephen Gallagher2012-02-132-2/+2
| | | | Coverity #12521 and #12491
* Add missing breaks to switch statementsStephen Gallagher2012-02-132-0/+2
| | | | Coverity #12525 and #12524
* Avoid uninitialized value comparisonStephen Gallagher2012-02-131-0/+3
| | | | Coverity #12526