summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Update CIFS plugin for Well-Known SID supportSumit Bose2013-11-151-16/+0
|
* nss: check for Well-Known SIDs in SID based requestsSumit Bose2013-11-153-0/+361
|
* nss-srv-tests: check packet statusSumit Bose2013-11-151-14/+50
| | | | | | Besides checking the content of output packets it might also be useful to check the status. This is e.g. important if no results are expected and the status should be set to ENOENT and not to any other error code.
* Add utility to handle Well-Known SIDsSumit Bose2013-11-154-1/+430
|
* Add sss_tc_fqname2()Sumit Bose2013-11-152-0/+22
| | | | | sss_tc_fqname2() is similar to sss_tc_fqname() but expects domain and flat domain name as string arguments instead of a domain struct.
* nss: save global name configuration to the nss contextSumit Bose2013-11-152-0/+7
|
* sss_names_init: allow empty domain nameSumit Bose2013-11-152-15/+141
| | | | | If no domain name is specified the global name pattern and regular expression will be returned.
* Add sss_packet_get_status()Sumit Bose2013-11-152-0/+10
| | | | | sss_packet_get_status() will currently only used to test if packets have the right status set.
* SYSDB: Skip malformed netgroup attribute.Lukas Slebodnik2013-11-151-1/+5
| | | | | | | | | | It was not easy find out why netgroup could not be covert into result entries. Problem was that nisNetgroupTriple contained unexpected string "(,user01)" This patch will ignore only malformed attribute and processing of netgroup will not fail. Resolves: https://fedorahosted.org/sssd/ticket/2137
* SYSDB: Drop redundant sysdb_ctx parameter from sysdb.cMichal Zidek2013-11-1520-115/+89
|
* SYSDB: Drop the sysdb_ctx parameter - module sysdb_ops (part 2)Michal Zidek2013-11-1543-490/+372
|
* SYSDB: Drop the sysdb_ctx parameter from the sysdb_sudo.c moduleJakub Hrozek2013-11-157-74/+53
|
* SYSDB: Drop the sysdb_ctx parameter from the sysdb_idmap moduleJakub Hrozek2013-11-153-22/+16
|
* SYSDB: Drop the sysdb_ctx parameter - module sysdb_ops (part 1)Michal Zidek2013-11-1522-239/+159
|
* SYSDB: Drop the sysdb_ctx parameter from the sysdb_ssh moduleMichal Zidek2013-11-155-45/+28
|
* SYSDB: Drop the sysdb_ctx parameter from the sysdb_services moduleMichal Zidek2013-11-1511-97/+71
|
* SYSDB: Drop the sysdb_ctx parameter from the sysdb_search moduleMichal Zidek2013-11-1531-182/+99
|
* SYSDB: Drop the sysdb_ctx parameter from SELinux functionsJakub Hrozek2013-11-153-30/+21
|
* SYSDB: Drop the sysdb_ctx parameter from the autofs APIJakub Hrozek2013-11-158-92/+60
|
* Merge ipa_selinux_common.c and ipa_selinux.cJakub Hrozek2013-11-156-187/+50
| | | | | Moved unused functions and merged ipa_selinux_common.c into ipa_selinux.c
* monitor: return right error codeLukas Slebodnik2013-11-151-1/+1
| | | | If talloc_zero fails ENOMEM should be returned and no EIO
* PAC: Free config attribute when it's processedJakub Hrozek2013-11-141-0/+1
|
* LDAP: Prevent from using uninitialized sdap_optionsLukas Slebodnik2013-11-141-1/+1
| | | | | | | | ldap_get_options can fail in time of ldap back end initialisation and then sssd try to release uninitialised sdap_options. Resolves: https://fedorahosted.org/sssd/ticket/2147
* Remove unused variableJakub Hrozek2013-11-121-1/+0
|
* BUILD: Change error message if missing cifsimap.hLukas Slebodnik2013-11-121-1/+4
| | | | | | | | | | cifs-idmap plugin is enabled by default, but required header file cifsidmap.h needn't be available on other distributions. It was not clear that cifs-idmap plugin is optional feature of sssd. With this patch, configure will recommend to build sssd without cifs idmap plugin if cifsidmap.h is not available. Resolves: https://fedorahosted.org/sssd/ticket/2125
* Signals: Refactor termination of processesSimo Sorce2013-11-124-29/+13
| | | | | | | | sig_term() was never used as a real signal handler, but only called by tevent signal handlers in the kerberos and ldap children. Also the same code was duplicated with separate local guard variables in other functions. Unify orderly termination handling, between all these functions.
* Signals: Remove empty sig_hupSimo Sorce2013-11-121-8/+0
| | | | | SIGHUP handling is implemented later using a tevent handler so sig_hup() is useless.
* Signals: Remove unused functionsSimo Sorce2013-11-122-59/+0
| | | | Cleanup unused signal functions
* Add ldap_autofs_map_master_name optionCove Schneider2013-11-1211-9/+34
|
* BUILD: Use OPENLDAP_CFLAGS instead of LDAP_CFLAGSBenjamin Franzke2013-11-111-3/+3
| | | | | | | | LDAP_CFLAGS is never defined. OPENLDAP_CFLAGS is set by src/external/ldap.m4. This patch does: sed -i 's/$(LDAP_CFLAGS)/$(OPENLDAP_CFLAGS)/' Makefile.am
* BUILD: Explicitly link libsss_ad.so with sasl libsLukas Slebodnik2013-11-113-2/+20
| | | | | | If openldap is not built with sasl support libsss_ad.so will not be linked with libsasl2 although sasl_client_init is called by function ad_sasl_initialize.
* Replace prog_DEPENDENCIES with EXTRA_prog_DEPENDENCIESSumit Bose2013-11-111-6/+4
| | | | | | | Automake computes build dependencies of a program automatically but not if prog_DEPENDENCIES is set. In this case only the dependencies given by prog_DEPENDENCIES are used. If the automatically calculated dependencies should be augmented EXTRA_prog_DEPENDENCIES should be used.
* Initialize sid_str to NULL to avoid freeing random dataJakub Hrozek2013-11-082-2/+2
| | | | | If any function before failed, sss_idmap_free_sid() might have been called with random data.
* UTIL: Free log message when using journaldJakub Hrozek2013-11-071-0/+2
|
* confdb: Make offline timeout configurableMichal Zidek2013-11-075-2/+32
| | | | | | | Added and documented option offline_timeout. Resolves: https://fedorahosted.org/sssd/ticket/1718
* responder: Access packet header using SAFEALIGN macros.Michal Zidek2013-11-071-37/+68
| | | | | resolves: https://fedorahosted.org/sssd/ticket/1359
* NSS: Set packet length for initgroupsLukas Slebodnik2013-11-071-0/+7
| | | | | | | | | | Some groups could be skipped, but packet length was not trimmed. This is a reason why valgrind reported access to uninitialised bytes. Actually, it isn't a problem, because the first uint32 in body is number of sended gids. Resolves: https://fedorahosted.org/sssd/ticket/2138
* free idmapped binary SIDs correctlyPavel Březina2013-11-073-7/+7
| | | | | Resolves: https://fedorahosted.org/sssd/ticket/2133
* free idmapped smb SIDs correctlyPavel Březina2013-11-071-3/+3
| | | | | Resolves: https://fedorahosted.org/sssd/ticket/2133
* free idmapped dom SIDs correctlyPavel Březina2013-11-071-6/+6
| | | | | Resolves: https://fedorahosted.org/sssd/ticket/2133
* free idmapped SIDs correctlyPavel Březina2013-11-078-13/+20
| | | | | Resolves: https://fedorahosted.org/sssd/ticket/2133
* idmap: add API to free allocated SIDsPavel Březina2013-11-072-0/+84
|
* Enhance/add unit tests for find_subdomain_by_sid/nameSumit Bose2013-11-042-0/+267
|
* build: fix ordering of linker flagsJan Engelhardt2013-11-041-33/+36
| | | | | | Libraries MUST be specified in LDADD/LIBADD, not LDFLAGS, because LDFLAGS appear earlier in the command line and library order is significant.
* Include ext headers with #include <foo.h> - contPavel Reichl2013-11-049-9/+10
| | | | Changing style of including header files from outside of sssd tree - from "header.h" to <header.h>
* AD: Fix ad_access_filter parsing with empty filterJakub Hrozek2013-10-302-0/+24
|
* NSS: Fix parenthesisJakub Hrozek2013-10-301-1/+1
|
* LDAP: Check all search bases during nested group processingJakub Hrozek2013-10-301-13/+42
|
* nested groups: pick correct domain for cache lookupsPavel Březina2013-10-301-4/+12
| | | | | | | | | Groups may contain members from different domains. We need to make sure that we always choose correct domain for subdomain users when looking up in sysdb. Resolves: https://fedorahosted.org/sssd/ticket/2064
* sdap_fill_memberships: pick correct domain for every memberPavel Březina2013-10-301-4/+19
| | | | | | | | | Groups may contain members from different domains. We need to make sure that we always choose correct domain for subdomain users when looking up in sysdb. Resolves: https://fedorahosted.org/sssd/ticket/2064