summaryrefslogtreecommitdiffstats
path: root/server
Commit message (Collapse)AuthorAgeFilesLines
...
* Unify code to use the generic search interfaceSimo Sorce2009-11-061-593/+473
| | | | | | | This code removes redundancies in the code. both users and groups enumeration code use the same search generic search function now. Also the code to save users and groups have been unified across all callers.
* Fix and enhance initgroups callSimo Sorce2009-11-061-170/+637
| | | | | | | | This call was failing and was defective because it didn't properly handle the various different schemas we support. Now the function does 2 things: - Updates the user entry to make sure it is still valid - Retrieves every group the user is member of
* Unify parse routines, use maps in generic searchesSimo Sorce2009-11-064-130/+77
| | | | | This remove redundant code and also allows the generic search to be used to use maps to convert attributes.
* Store the original memberof attributes if anySimo Sorce2009-11-061-7/+30
| | | | | Also change the interface of sdap_save_user_send() so that it can be more easily reused like it was done for sdap_save_group_send().
* Make useful function more broadly available.Simo Sorce2009-11-063-30/+30
|
* Make available method to quickly retrive stringSimo Sorce2009-11-062-3/+35
| | | | | sysdb_attrs has a lot of methods to add them but very little to get information out. Start adding a way to retrieve a single valued attribute as a string.
* Build files.c only for toolsStephen Gallagher2009-11-054-13/+14
| | | | Move files.c into tools directory
* Increase the sbus dispatch DEBUG level to 9Stephen Gallagher2009-11-051-2/+2
| | | | | This is heavy noise and low-usefulness for debugging normal operating issues.
* Update midpoint refresh logic to be relative to cache timeoutStephen Gallagher2009-11-056-15/+49
|
* Add configure check for sasl.hStephen Gallagher2009-11-051-0/+2
|
* add replacements for missing Kerberos callsSumit Bose2009-11-057-48/+160
|
* Do not delete users, groups outside domain rangeJakub Hrozek2009-11-042-11/+35
| | | | Fixes: 240
* Simplify debug_fn()Stephen Gallagher2009-11-041-12/+2
| | | | | | We don't need to be allocating an output string here. This was also causing a runtime bug when the output string contained characters that would be interpreted by fprintf as specifiers.
* Fix for a seg fault during recursive deleteSumit Bose2009-11-041-1/+7
|
* Add sysdb_attrs_replace_name to sysdb API.Sumit Bose2009-11-043-0/+80
|
* Free the PCRE regexp with destructorJakub Hrozek2009-11-041-0/+10
|
* Rename sdap_id_map to sdap_attr_mapSimo Sorce2009-11-037-21/+75
| | | | | | Also start adding some infrastructure to use the USN counter when available. In particular add a place to add generic attrs mapping, ie attributes that are neither user nor group specific.
* Add complete pydoc for SSSDConfig APIStephen Gallagher2009-11-031-1/+534
|
* Localize SSSDConfig stringsStephen Gallagher2009-11-034-3/+919
|
* Add support for option descriptions to SSSDConfig APIStephen Gallagher2009-11-032-14/+148
| | | | | Addresses https://fedorahosted.org/sssd/ticket/242 related to authconfig integration
* Remove magic_private_groups from SSSDConfig API schemaStephen Gallagher2009-11-032-3/+0
|
* Make config_file_version a hidden setting in SSSDConfig APIStephen Gallagher2009-11-035-17/+134
| | | | | | | | The config_file_version should never be changed by the API, so we will hide the option inside the SSSDConfig API and remove it from the schema. Guarantee that the config file is of the correct version
* add sysdb_delete_recursive request to sysdb APISumit Bose2009-11-024-4/+282
|
* Make debug message less irritating.Sumit Bose2009-11-021-2/+2
| | | | | | The 'Unable to load' debug message is now only shown when the backend target is given explicitly in the config file. I the other case we let the caller decided how to handle this error condition.
* set ipa_hostname if not given in config fileSumit Bose2009-11-021-0/+20
|
* Fix segfault when SASL is not used at allSimo Sorce2009-10-302-2/+4
|
* remove old sysdb file before starting testsSumit Bose2009-10-301-0/+8
|
* Fix compiler warnings in krb5_utils-tests.Sumit Bose2009-10-301-21/+21
|
* Add AM_CFLAGS to unit testsSumit Bose2009-10-301-8/+12
|
* Add support to get rootDSE from the LDAP server.Simo Sorce2009-10-296-121/+398
| | | | | | | | | | | | Also fic sdap_get_generic_send() to be a bit more "generic" :-) Also figs bugs within it. This patch allow us 2 good things. A) we check that the server effectively supports GSSAPI auth before we try to use it. B) against IPA it substantially cuts delays when the server is offline because it uses a 5 second async timeout on the connection and doesn't try to do a slow synchronous kinit+sasl_bind if the server is not even available.
* Tidy up ipa optionsSimo Sorce2009-10-299-223/+239
| | | | | | | | | | | | | | Do not replicate every and each option we may want to set in ipa. Just read out ldap and krb provider options (added reference in the manual too, and removed mention of ipa specific timeout values, use ldap options for that) Avoid calling auth module initialization twice, just pass the auth context to the chpass module too. Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be used for both users and groups. the user and group search bases can still be set separately if necessary but they are now optional and set to be identical to SDAP_SEARCH_BASE if not explicitly specified in the configuration.
* Allow sysdb_search_entry request to return more than one resultSumit Bose2009-10-293-27/+178
|
* added a ASQ search API for sysdbSumit Bose2009-10-293-0/+356
|
* Kill the ldap connection when we go offlineSimo Sorce2009-10-281-5/+16
| | | | | | This patch uses a wrapper to kill the ldap connection when we are marked offline. This also makes sure we do not try to reuse a bad connection handler after a fatal error.
* Fix sssd.api.conf with correct entry_cache_timeoutStephen Gallagher2009-10-282-2/+5
| | | | | Changeset 3a21103f61bf9b60256cc2d0da54b757b634319f moved the wrong option to the domain list, and also didn't update the unit tests.
* Do not migrate Data ProviderJakub Hrozek2009-10-271-22/+57
| | | | | | Add a way to make changes to the most recent format of config files. Use it to remove all traces of Data Provider from the config file which is being migrated.
* Move responsibility for entry expiration timeoutSimo Sorce2009-10-2717-75/+109
| | | | | The providers are now responsible for determining how long a cached entry is considered valid. The default is the same as before (600s)
* Add proper support for IPA/AD schemasSimo Sorce2009-10-274-202/+574
| | | | | | Nested groups weren't properly handled. Add 2 pass strategy to update groups memberships Stuff work as expected when enumeration is enabled now.
* Fix segfaultSimo Sorce2009-10-271-1/+1
| | | | | | Fix copy/paste error that picked up the wrong request structure to pass down. This was causing the talloc code that checks for the right signature to fail and abort as the 2 request structures have different state structures attacched.
* Remove [dp] section from example configStephen Gallagher2009-10-272-13/+3
| | | | | Also remove references to the DP service from the sssd.conf manpages.
* store original DN with cached group objects if availableSumit Bose2009-10-271-0/+16
|
* Updating polish translation for 0.7.0Piotr Drąg2009-10-271-34/+31
| | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
* Remove DP from example configurationStephen Gallagher2009-10-261-1/+1
|
* Use standard coding practice to set last loginSimo Sorce2009-10-261-90/+128
| | | | | | | | | This rewrite should also fix a segfault in the code that may happen when exiting in case of error conditions. The previous code was attaching the transaction handle to llreq structure and then calling prepare_reply() from within the request handlers which could ultimately free the preq and llreq and handle before the transaction request was actually completed by tevent.
* Zero pointers on freeSimo Sorce2009-10-261-4/+4
| | | | | If the pointer stays around, zero it when it is freed, so we do not risk access to released memory in case of bugs.
* Add IPA conf templateSimo Sorce2009-10-261-0/+9
|
* Read the right buffer, avoids potential segfaultsSimo Sorce2009-10-261-5/+5
| | | | Also fix some debug message levels
* Copy option overrides.Simo Sorce2009-10-261-0/+26
| | | | | We were not copying IPA named options to the ldap id options list. So the ldap_id provider was always using just the default settings.
* Fix migration script for pre-0.5 local domainsJakub Hrozek2009-10-261-2/+11
| | | | | | | Configuration files before 0.5.0 did not enforce provider= in local domains it did special-case by domain name (LOCAL). Our script was relying on provider= value, this patch adds the special-casing in case the domain was called LOCAL.
* Update version to 0.7.0Stephen Gallagher2009-10-233-222/+481
| | | | Update gettext strings