Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | monitor: use-after-free bugfix | Pavel Reichl | 2013-12-09 | 1 | -4/+6 | |
| | | | | | | *monitor_kill_service* may create timed event which operates on *svc* and therefore *svc* should not be freed right after call of *monitor_kill_sercice*. *svc* is supposed to be freed by *mt_svc_restart*. | |||||
* | sysv/gentoo: Send debug output to a file instead of stderr | Markos Chandras | 2013-12-04 | 1 | -1/+1 | |
| | | | | | | | Output from init scripts should go to a file (ideally in /var/log directory) instead of stderr. Signed-off-by: Markos Chandras <hwoarang@gentoo.org> | |||||
* | sysv/gentoo: Use xdm if possible | Markos Chandras | 2013-12-04 | 1 | -1/+1 | |
| | | | | | | | Allow sssd to use the xdm wrapper so login managers can use sssd to authenticate users. Signed-off-by: Markos Chandras <hwoarang@gentoo.org> | |||||
* | MAN: Remove unused experimental file | Jakub Hrozek | 2013-12-04 | 2 | -36/+0 | |
| | ||||||
* | MAN: Add a link explaining different LDAP scopes | Jakub Hrozek | 2013-12-04 | 1 | -2/+6 | |
| | ||||||
* | responder: Use SAFEALIGN macro when checking pam data validity. | Michal Zidek | 2013-12-03 | 1 | -11/+23 | |
| | | | | | resolves: https://fedorahosted.org/sssd/ticket/1359 | |||||
* | sss_client: Use SAFEALIGN_COPY_<type> macros where appropriate. | Michal Zidek | 2013-12-03 | 8 | -27/+80 | |
| | | | | | resolves: https://fedorahosted.org/sssd/ticket/1359 | |||||
* | SSSD: Unit test - sss_ldap_dn_in_search_bases | Pavel Reichl | 2013-11-29 | 2 | -1/+217 | |
| | | | | | | | Unit test testing detection of the right domain when processing group with members from several domains Resolves: https://fedorahosted.org/sssd/ticket/2132 | |||||
* | SSSD: Improved domain detection | Pavel Reichl | 2013-11-29 | 3 | -16/+57 | |
| | | | | | | | A bit more elegant way of detection of what domain the group member belongs to Resolves: https://fedorahosted.org/sssd/ticket/2132 | |||||
* | KRB5: Go offline in case of clock skew | Jakub Hrozek | 2013-11-29 | 1 | -0/+1 | |
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1096 In case the KDC has skewed time, we can retry with the next one and eventually go offline if no KDC has time in sync with the client. Previously, authentication with wrong time resulted in System Error. | |||||
* | SYSDB: Sanitize filter before removing ghost attrs | Lukas Slebodnik | 2013-11-28 | 2 | -1/+25 | |
| | | | | | | | | | | | sysdb_add_user fails with EIO if enumeration is disabled and user contains backslashes. We try to remove ghost attributes from groups with disabled enumeration, but unsanitized filter is used to find ghost attributes "(|(ghost=usr\\\\002)" and ldb cannot parse this filter. Resolves: https://fedorahosted.org/sssd/ticket/2163 | |||||
* | SYSDB: Sanitize filter before sysdb_search_groups | Lukas Slebodnik | 2013-11-28 | 2 | -1/+12 | |
| | | | | | | | | | | sysdb_delete_user fails with EIO if user does not exist and contains backslashes. ldb could not parse filter (&(objectclass=group)(ghost=usr\\\\001)), because ghost value was not sanitized Resolves: https://fedorahosted.org/sssd/ticket/2163 | |||||
* | AUTOMAKE: Don't build libsss_test_common every time | Lukas Slebodnik | 2013-11-28 | 1 | -2/+2 | |
| | | | | | | | | Although static library libsss_test_common was used only in tests, it was also built with command "make all" Resolves: https://fedorahosted.org/sssd/ticket/2097 | |||||
* | Remove unused parameter from group_show_trim_memberof | Lukas Slebodnik | 2013-11-27 | 1 | -3/+1 | |
| | ||||||
* | Remove unused parameter from group_show_mpg | Lukas Slebodnik | 2013-11-27 | 1 | -3/+1 | |
| | ||||||
* | Remove unused parameter from ipa_save_netgroup | Lukas Slebodnik | 2013-11-27 | 1 | -2/+1 | |
| | ||||||
* | Remove unused memory context in proxy | Lukas Slebodnik | 2013-11-27 | 1 | -9/+6 | |
| | ||||||
* | Remove unused parameter from save_netgroup | Lukas Slebodnik | 2013-11-27 | 3 | -6/+3 | |
| | ||||||
* | Remove unused parameter from save_user | Lukas Slebodnik | 2013-11-27 | 1 | -10/+8 | |
| | ||||||
* | Remove unused parameter from delete_user | Lukas Slebodnik | 2013-11-27 | 1 | -9/+7 | |
| | ||||||
* | Remove unused parameter from sudosrv_get_sudorules_query_cache | Lukas Slebodnik | 2013-11-27 | 1 | -4/+2 | |
| | ||||||
* | Remove unused parameter from seed_domain_user_info | Lukas Slebodnik | 2013-11-27 | 1 | -2/+1 | |
| | ||||||
* | Remove unused parameter from search_autofsmaps | Lukas Slebodnik | 2013-11-27 | 1 | -11/+8 | |
| | ||||||
* | Remove unused parameter from invalidate_entry | Lukas Slebodnik | 2013-11-27 | 1 | -3/+3 | |
| | ||||||
* | Remove unused parameter from groupadd | Lukas Slebodnik | 2013-11-27 | 4 | -6/+4 | |
| | ||||||
* | Remove unused parameter from useradd | Lukas Slebodnik | 2013-11-27 | 4 | -4/+2 | |
| | ||||||
* | Remove unused parameter from groupmod | Lukas Slebodnik | 2013-11-27 | 4 | -4/+2 | |
| | ||||||
* | Remove unused parameter from usermod | Lukas Slebodnik | 2013-11-27 | 5 | -5/+3 | |
| | ||||||
* | Remove unused parameter from mod_groups_member | Lukas Slebodnik | 2013-11-27 | 1 | -11/+10 | |
| | ||||||
* | Remove unused parameter from krb5_auth_store_creds | Lukas Slebodnik | 2013-11-27 | 1 | -3/+2 | |
| | ||||||
* | Remove unused parameter from krb5_auth_cache_creds | Lukas Slebodnik | 2013-11-27 | 1 | -3/+0 | |
| | ||||||
* | Remove unused parameter from sdap_save_netgroup | Lukas Slebodnik | 2013-11-27 | 1 | -4/+1 | |
| | ||||||
* | Remove unused parameter from sdap_process_missing_member_2307 | Lukas Slebodnik | 2013-11-27 | 1 | -4/+2 | |
| | ||||||
* | Remove unused parameter from sdap_add_group_member_2307 | Lukas Slebodnik | 2013-11-27 | 1 | -4/+3 | |
| | ||||||
* | Remove unused parameter from sdap_store_group_with_gid | Lukas Slebodnik | 2013-11-27 | 1 | -7/+3 | |
| | ||||||
* | Remove unused parameter from sdap_get_members_with_primary_gid | Lukas Slebodnik | 2013-11-27 | 1 | -4/+4 | |
| | ||||||
* | Remove unused parameter from sdap_save_user | Lukas Slebodnik | 2013-11-27 | 4 | -9/+3 | |
| | ||||||
* | Remove unused parameter from get_user_dn | Lukas Slebodnik | 2013-11-27 | 1 | -2/+1 | |
| | ||||||
* | Remove unused parameter from sss_selinux_extract_user | Lukas Slebodnik | 2013-11-27 | 3 | -3/+1 | |
| | ||||||
* | Fix parameter name. | Michal Zidek | 2013-11-27 | 2 | -9/+9 | |
| | | | | | | | We use '_' as prefix for output parameters. In function sysdb_get_rdn we wrongly used this prefix for input parameter, which caused some confusion when reading the code. | |||||
* | AD: Fix a typo in the man page | Jakub Hrozek | 2013-11-27 | 1 | -1/+1 | |
| | | | | https://fedorahosted.org/sssd/ticket/2154 | |||||
* | Missing parameter name in declaration. | Michal Zidek | 2013-11-27 | 1 | -2/+2 | |
| | ||||||
* | monitor: Specific error message for missing sssd.conf | Pavel Reichl | 2013-11-27 | 4 | -3/+16 | |
| | | | | | | | | Specific error message is logged for missing sssd.conf file. New sssd specific error value is introduced for this case. Resolves: https://fedorahosted.org/sssd/ticket/2156 | |||||
* | pac: fix potential memory leaks | Pavel Březina | 2013-11-22 | 1 | -5/+5 | |
| | ||||||
* | pac: fix double free | Pavel Březina | 2013-11-22 | 1 | -8/+6 | |
| | ||||||
* | LDAP: Search for original DN during auth if it's missing | Jakub Hrozek | 2013-11-20 | 1 | -16/+194 | |
| | | | | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2077 If during the LDAP authentication we find out that the originalDN to bind as is missing (because the ID module is not LDAP based), we can try to look up the user from LDAP without saving him just in order to receive the originalDN. | |||||
* | LDAP: Split out a request to search for a user w/o saving | Jakub Hrozek | 2013-11-20 | 2 | -33/+147 | |
| | | | | | | | | | | Related: https://fedorahosted.org/sssd/ticket/2077 Certain situations require that a user entry is downloaded for further inpection, but not saved to the sysdb right away. This patch splits the previously monolithic request into one that just downloads the data and one that uses the new one to download and save the user. | |||||
* | LDAP: Initialize user count for AD matching rule | Jakub Hrozek | 2013-11-18 | 1 | -1/+1 | |
| | | | | | | | https://fedorahosted.org/sssd/ticket/2157 If AD matching rule was selected, but the group was empty, the SSSD accessed random data. Initializing count to zero prevents that. | |||||
* | do not use default_domain_suffix with autofs | Aron Parsons | 2013-11-18 | 1 | -1/+1 | |
| | ||||||
* | TESTS: Remove test dir after successful tests | Lukas Slebodnik | 2013-11-18 | 1 | -1/+6 | |
| | | | | | test_utils removed files from test_dir before test execution, but files wasn't clean up after successful test execution. |