summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* krb5: More correct approach to public dir expansionccnameSimo Sorce2013-09-196-186/+282
| | | | | | | | | | | | | | | | | Commit 29752834fbf3a19e4e117668abfce4e4c7c48ee4 (Add expandable sequences to krb5_ccachedir) introduce a new behavior that tried to take in account the fact that parent directories may need to be created as accessible to anyone by setting them to 01777 permissions. However the test that determines whether the path shuld be public or not is flawed and bleeds into pure file templates with undeiserable consequences. Theis patch corrects thi behavior by clearly returning a specific path if it need to be made public and preserves any subdir in the template with user private ownership. Resolves: https://fedorahosted.org/sssd/ticket/2071
* krb5: Improve ccache name checksSimo Sorce2013-09-191-58/+59
| | | | | | | | | Consolidate all the code that decides what the ccache name will be in one function. Conditionalize checking for the old ccache only on the fact that the new and old name (if any) are actually the same. Resolves: https://fedorahosted.org/sssd/ticket/2053
* krb5: Be more lenient on failures for old ccacheSimo Sorce2013-09-192-2/+2
| | | | | | | | | | | Fix a check for an error return code that can be returned when the ccache is not found. Even in case of other errors still do not fail authentication but allow it to proceed using a new ccache file if necessary. Related: https://fedorahosted.org/sssd/ticket/2053
* AD: Download master domain info when enumeratingJakub Hrozek2013-09-185-7/+211
| | | | | | | | | | https://fedorahosted.org/sssd/ticket/2068 With the current design, downloading master domain data was tied to subdomains refresh, triggered by responders. But because enumeration is a background task that can't be triggered on its own, we can't rely on responders to download the master domain data and we need to check the master domain on each enumeration request.
* LDAP: sdap_id_setup_tasks accepts a custom enum requestJakub Hrozek2013-09-184-18/+29
| | | | AD provider will override the default with its own.
* AD: async request to retrieve master domain infoJakub Hrozek2013-09-185-214/+417
| | | | Adds a reusable async request to download the master domain info.
* BE: Log domain name to journald if availableJakub Hrozek2013-09-184-0/+16
| | | | | | | | If the SSSD is compiled with journald support, then all sss_log() statements will include a new field called "SSSD_DOMAIN" that includes the domain name. Filtering only messages from the single domain is then as easy as: # journalctl SSSD_DOMAIN=foo.example.com
* Add journald supportJakub Hrozek2013-09-185-0/+80
|
* KRB5: Call umask before mkstemp in the krb5 child codeJakub Hrozek2013-09-171-0/+3
|
* Do not set HAVE_SYSTEMD_LOGIN if libsystemd-login is not availableSumit Bose2013-09-171-1/+1
| | | | | Even if HAVE_SYSTEMD_LOGIN is set to 0 #ifdef will still see it as defined.
* nss: Wrong debug message.Michal Zidek2013-09-171-1/+2
|
* simple provider: obey case sensitivity for subdomain users and groupsPavel Březina2013-09-171-7/+43
| | | | | | | | When comparing username and his groups to access list, we will obey case sensitivity of object from access list. Resolves: https://fedorahosted.org/sssd/ticket/2034
* simple access test: initialize be_ctx for all testsPavel Březina2013-09-171-15/+16
| | | | | | | | | Recent simple access provider patches started using be_ctx during access check. This caused segfault in unit tests, since be_ctx wasn't initialized. Resolves: https://fedorahosted.org/sssd/ticket/2034
* simple provider: support subdomain groupsPavel Březina2013-09-171-23/+64
| | | | | Resolves: https://fedorahosted.org/sssd/ticket/2034
* util: add find_subdomain_by_object_name()Pavel Březina2013-09-172-0/+39
| | | | | | | | This function will parse object name into name and domain name part and return appropriate sss domain. Resolves: https://fedorahosted.org/sssd/ticket/2034
* util: add find_subdomain_by_sid()Pavel Březina2013-09-172-0/+35
| | | | | | | | | | | | | | This function takes domain SID (doesn't have the last component) or object SID (have all components) and returns subdomain. The subdomain is found by comparing domain->domainid with the SID. E.g. domain SID: S-1-5-21-3940105347-3434501867-2690409756 object SID: S-1-5-21-3940105347-3434501867-2690409756-513 Resolves: https://fedorahosted.org/sssd/ticket/2034
* simple provider: support subdomain usersPavel Březina2013-09-171-5/+10
| | | | | Resolves: https://fedorahosted.org/sssd/ticket/2034
* simple access tests: fix typosPavel Březina2013-09-171-5/+5
|
* util: add sss_idmap_talloc[_free]Pavel Březina2013-09-178-62/+76
| | | | Remove code duplication.
* Add missing new line in DEBUG messageLukas Slebodnik2013-09-161-2/+3
|
* util: Use systemd-login to check user sessionsSimo Sorce2013-09-164-5/+51
| | | | | | | | | | | | | Use systemd-lgin in preference to check if the user is logged in or not. Fall back to the old method if no systemd-login support is available at compile time or if it returns a fatal error, and can't determine the status of the user on its own. This will allow to consider a user really active (in order to reuse or refresh crdentials) only if it really is logged into the system, and not just if one of the user's processes is stuck around. Resolves: https://fedorahosted.org/sssd/ticket/2084
* man sssd: Add note about SSS_NSS_USE_MEMCACHEMichal Zidek2013-09-131-0/+8
|
* Rename _SSS_MC_SPECIALMichal Zidek2013-09-131-2/+2
| | | | | | If the environment variable _SSS_MC_SPECIAL is set to "NO", the mmap cache is skipped in the client code. The name is not very descriptive. This patch renames the variable to SSS_NSS_USE_MEMCACHE.
* IPA: Deprecate ipa_hbac_support_srchost optionOndrej Kos2013-09-133-23/+11
| | | | | | | | | This option got already deprecated on the ipa server side. Option is undocumented and warning is printed both to the sssd log files and syslog. Resolves: https://fedorahosted.org/sssd/ticket/1918
* MAN: Remove IPA specific LDAP settingsOndrej Kos2013-09-131-218/+0
| | | | | Resolves: https://fedorahosted.org/sssd/ticket/1187
* Bump version to track 1.12 developmentJakub Hrozek2013-09-131-1/+1
|
* KRB: Remove unused function parametersLukas Slebodnik2013-09-121-4/+2
| | | | | Parameter "int *dp_err" and parameter "int *pam_status" were unused in static function krb5_auth_prepare_ccache_name.
* KRB: Remove unused memory contextLukas Slebodnik2013-09-123-3/+3
| | | | mem_ctx was unused in function get_domain_or_subdomain
* TESTS: Remove unused variableJakub Hrozek2013-09-121-4/+0
| | | | | | The tmpl variable was only ever used to default to FILE backend in case absolute patch w/o ccache type was selected. Since backends are no longer there, we can remove the variable, too.
* Remove unused codeJakub Hrozek2013-09-122-69/+0
|
* Enable printf format string checkingLukas Slebodnik2013-09-112-2/+26
| | | | https://fedorahosted.org/sssd/ticket/1945
* Fix formating of variables with type: gid_tLukas Slebodnik2013-09-117-25/+27
|
* Fix formating of variables with type: uid_tLukas Slebodnik2013-09-119-18/+27
|
* Fix formating of variables with type: id_tLukas Slebodnik2013-09-115-7/+38
|
* Use right formating to print stringLukas Slebodnik2013-09-111-1/+1
| | | | format specifies type 'int' but the argument has type 'const char *'
* Fix warning: data argument not used by format stringLukas Slebodnik2013-09-111-2/+5
|
* Fix formating of variables with ber_ typeLukas Slebodnik2013-09-112-3/+4
|
* Fix formating of variables with type: time_tLukas Slebodnik2013-09-117-9/+10
|
* Fix formating of variables with type defined in stdint.hLukas Slebodnik2013-09-114-11/+14
|
* Fix formating of variables with type: rlim_tLukas Slebodnik2013-09-112-5/+12
|
* Fix formating of variables with type: key_serial_tLukas Slebodnik2013-09-112-1/+5
|
* Adding new header for printf formating macrosLukas Slebodnik2013-09-113-0/+34
|
* Fix formating of variables with type: size_tLukas Slebodnik2013-09-1133-69/+82
|
* Fix formating of variables with type: ssize_tLukas Slebodnik2013-09-117-10/+11
|
* Use the same variable type like in struct ldb_message_elementLukas Slebodnik2013-09-111-1/+1
| | | | | struct ldb_message_element.num_values is unsigned This patch indirectly fixes printf format string warning.
* Fix pointer formattingLukas Slebodnik2013-09-111-5/+5
|
* Fix formating of variables with type: intLukas Slebodnik2013-09-113-5/+7
|
* Fix formating of variables with type: unsigned longLukas Slebodnik2013-09-112-2/+2
|
* Fix formating of variables with type: longLukas Slebodnik2013-09-117-13/+16
|
* LDAP: Store cleanup timestamp after initial cleanupJakub Hrozek2013-09-113-10/+10
| | | | | | When the SSSD changes serves (and hence lastUSN) we perform a cleanup as well. However, after recent changes, we didn't set the cleanup timestamp correctly, which made the lastUSN logic fail.
generated by cgit (git 2.34.1) at 2024-05-24 07:22:31 +0000