Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-10-13 | Add infrastructure to LDAP provider for netgroup support | Sumit Bose | 8 | -4/+199 | |
2010-10-13 | Also return member groups to the client | Sumit Bose | 5 | -159/+212 | |
2010-10-13 | Add sysdb_netgroup_base_dn() | Sumit Bose | 2 | -0/+8 | |
2010-10-13 | Do not fail if netgroup exists just update the attributes | Sumit Bose | 1 | -1/+1 | |
2010-10-13 | Add handling of nested netgroups to nss client | Sumit Bose | 3 | -69/+113 | |
2010-10-13 | Return NSS_STATUS_RETURN instead of NSS_STATUS_NOTFOUND | Sumit Bose | 1 | -1/+1 | |
NSS_STATUS_RETURN needs to be returned to glibc otherwise nested groups are not resolved by glibc. | |||||
2010-10-13 | Add missing tevent_req_done() | Sumit Bose | 1 | -0/+1 | |
2010-10-13 | Add netgroup support to the NSS responder | Stephen Gallagher | 9 | -2/+926 | |
2010-10-13 | Split out some helper functions for the NSS responder | Stephen Gallagher | 2 | -83/+147 | |
Create a new private header and make some functions available for other object files. | |||||
2010-10-13 | Add negative cache features for netgroups | Stephen Gallagher | 2 | -0/+39 | |
2010-10-13 | Add support for netgroups to NSS sss_client | Stephen Gallagher | 5 | -6/+367 | |
2010-10-13 | Rename group.c and passwd.c for clarity | Stephen Gallagher | 4 | -4/+4 | |
Prefixing group.c and passwd.c with "nss_" similar to the way the PAM client sources are prefixed with "pam_" | |||||
2010-10-13 | netgroup tests | Stephen Gallagher | 1 | -0/+516 | |
2010-10-13 | Netgroups sysdb API | Stephen Gallagher | 4 | -2/+802 | |
2010-10-13 | Require explicit setting of callback context for check_cache | Stephen Gallagher | 1 | -7/+13 | |
Previously, it was implicitly using the nss_dom_ctx, but there are situations where we would want to send a different private context | |||||
2010-10-13 | Store entry_cache_timeout in sss_domain_info object | Stephen Gallagher | 2 | -0/+9 | |
This is useful so that the NSS responder can identify an domain's entry timeout for expiring the memory cache for a lookup such as with netgroups. | |||||
2010-10-13 | Add utility function sss_strnlen() | Stephen Gallagher | 2 | -0/+34 | |
This is useful for guaranteeing the size of an input buffer. | |||||
2010-10-13 | Initialize kerberos service for GSSAPI | Jakub Hrozek | 10 | -5/+303 | |
2010-10-13 | Make ldap_child report kerberos return code to parent | Jakub Hrozek | 4 | -13/+31 | |
2010-10-13 | Report Kerberos error code from ldap_child_get_tgt_sync | Jakub Hrozek | 1 | -23/+16 | |
2010-10-13 | Add KDC to the list of LDAP options | Jakub Hrozek | 5 | -1/+22 | |
2010-10-13 | Raise the required version of libdhash | Sumit Bose | 1 | -1/+1 | |
libdhash version 0.4.2 is required because older versions cannot update hash entries. | |||||
2010-10-13 | Remove unused defines | Sumit Bose | 1 | -2/+0 | |
2010-10-13 | Distribute XML sources instead of man-pages | Sumit Bose | 1 | -2/+3 | |
2010-10-13 | Return all group members from getgr(nam|gid) | Ralf Haferkamp | 1 | -12/+374 | |
getgrnam()/getgrgid() should return all group members instead of only those which have already been cached (in sysdb). To achieve this every member that is currently not in the cache is looked up via LDAP and saved to the cache. | |||||
2010-10-13 | Shortcut for save_group() to accept sysdb DNs as member attributes | Ralf Haferkamp | 1 | -4/+19 | |
Addtional parameter "populate_members" for save_group() and save_groups() to indicate that the "member" attribute of the groups is populated with sysdb DNs of the members (instead of LDAP DNs). | |||||
2010-10-13 | Rename index to idx | Sumit Bose | 1 | -4/+4 | |
This patch suppresses a 'shadows a global declaration' warning. | |||||
2010-10-13 | Add a missing include file | Sumit Bose | 1 | -0/+1 | |
strcasecmp() is defined in strings.h which might not be included under certain conditions. | |||||
2010-10-13 | Use POPT_TABLEEND to close option table | Sumit Bose | 7 | -8/+8 | |
2010-10-13 | Man pages should mention supported providers | Jan Zeleny | 4 | -13/+28 | |
Each back end can support id, auth or access provider, but each back end supports different subset of these. Man pages should describe which providers are supported by each back end. Ticket: #615 | |||||
2010-10-08 | Add common hash table setup | Stephen Gallagher | 3 | -1/+60 | |
sss_hash_create() produces a dhash table living in the talloc hierarchy. | |||||
2010-10-08 | Disable events on ldap fd when offline. | Jan Zeleny | 1 | -2/+4 | |
Erase events on LDAP socket when backend is offline and an event appears on the socket. Normally this would lead to infinite loop, because event is present on the fd, but instead of being processed, an error log is written and the program continues to wait for the event. Ticket: #599 | |||||
2010-10-04 | Return offline instead of error | Stephen Gallagher | 1 | -1/+2 | |
When the failover code returns that there are no available servers while we are marked offline, we were returning an error to the PAM authentication code. Instead, we should return success with a result value of SDAP_UNAVAIL so that the PAM responder will mark the domain offline and attempt offline authentication. | |||||
2010-09-28 | Suppress some 'unchecked return value' warnings | Sumit Bose | 1 | -6/+13 | |
2010-09-28 | Suppress some 'may be used uninitialized' warnings | Sumit Bose | 4 | -9/+15 | |
Additionally the handling of errno and the errno_t return value of functions is fixed in krb5_common.c. | |||||
2010-09-23 | Use new MIT krb5 API for better password expiration warnings | Sumit Bose | 4 | -3/+79 | |
2010-09-23 | Save all data to sysdb in one transaction | Sumit Bose | 1 | -222/+131 | |
2010-09-23 | Handle host objects like other objects | Sumit Bose | 2 | -129/+183 | |
2010-09-22 | Initialize debug_level to zero in crypto tests | Stephen Gallagher | 1 | -1/+1 | |
2010-09-22 | Fix assorted specfile issues | Stephen Gallagher | 1 | -8/+6 | |
1) Pam modules should be explicitly built for /lib64/security 2) The krb5 locator plugin is always built; remove the conditional 3) The krb5 locator plugin belongs in the sssd-client package 4) The sss_obfuscate manpage was not packaged | |||||
2010-09-22 | Request the correct attribute name | Jakub Hrozek | 1 | -1/+1 | |
2010-09-22 | Fix sysdb_attrs_to_list | Jakub Hrozek | 1 | -2/+2 | |
2010-09-22 | Fix sysdb_group_dn_name | Jakub Hrozek | 2 | -1/+43 | |
2010-09-22 | Initgroups on a non-cached user should go to the data provider | Stephen Gallagher | 2 | -2/+13 | |
We were accidentally returning an error when sysdb_getpwnam() returned zero results internally in sysdb_initgroups(). The correct behavior here is to return EOK and a result object with zero entries. | |||||
2010-09-22 | Fix missing variable substitution in DEBUG message | Stephen Gallagher | 1 | -2/+2 | |
2010-09-22 | Request all group attributes during initgroups processing | Stephen Gallagher | 2 | -5/+7 | |
We tried to be too clever and only requested the name of the group, but we require the objectClass to validate the results. https://fedorahosted.org/sssd/ticket/622 | |||||
2010-09-15 | Check if control is supported before using it. | Simo Sorce | 4 | -14/+39 | |
2010-09-15 | Add parameter to skip cleanup in sysdb test | Jakub Hrozek | 1 | -1/+4 | |
This might be useful for examining the test database manually with LDB tools | |||||
2010-09-15 | Use a different min_id for local domain | Jakub Hrozek | 2 | -1/+17 | |
When we changed the default min_id to be 1, we forgot about the local domain. It makes sense to keep the minimum id larger there. | |||||
2010-09-15 | Define objectclass with a constant | Jakub Hrozek | 2 | -3/+4 | |
Use a #define instead of hardcoded string |