sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-01-05	Return an error for an unknown PAM request	Sumit Bose	4	-12/+41

2009-12-21	Allow debug_timestamps setting on a per-domain basis	Stephen Gallagher	2	-0/+3
	This was missing from the SSSDConfig API, though it was supported by the daemon.
2009-12-18	Release SSSD 1.0	Stephen Gallagher	1	-1/+1

2009-12-18	Fix broken password changes for local users	Stephen Gallagher	1	-1/+6

2009-12-18	Do not blindly accept zero-length passwords	Stephen Gallagher	2	-8/+17

2009-12-18	Fix ldap child memory hierarchy and other issues	Simo Sorce	8	-306/+482
	The timeout handler was not a child of the request so it could fire even though the request was already freed. The code wouldn't use async writes to the children so it could incur in a short write with no way to detect or recover from it. Also fixed style of some helper functions to pass explicit paramters instead of a general structure. Add common code to do async writes to pipes. Fixed async write issue for the krb5_child as well. Fix also sdap_kinit_done(), a return statement was missing and we were mixing SDAP_AUTH and errno return codes in state->result Remove usless helper function that just replicates talloc_strndup()
2009-12-18	Fix for #344	Sumit Bose	1	-13/+11
	Do not handle a missing ccache file as inactive by default, check if there are still active processes of the user.
2009-12-18	Do not overwrite valid TGTs when offline	Sumit Bose	5	-43/+185

2009-12-18	Handle chauthtok with PAM_PRELIM_CHECK separately	Sumit Bose	8	-23/+77
	If pam_sm_chauthtok is called with the flag PAM_PRELIM_CHECK set we generate a separate call to the sssd to validate the old password before asking for a new password and sending the change password request.
2009-12-17	disable password migration code	Sumit Bose	1	-2/+2

2009-12-17	Clarify access_provider manpage entry	Stephen Gallagher	1	-1/+3
	We support installed access providers as well as permit and deny
2009-12-17	Add DEBUG messages to getpwnam_callback and getpwuid_callback	Stephen Gallagher	1	-0/+4
	This matches the DEBUG logging available for groups.
2009-12-17	Updating ES translation	Stephen Gallagher	1	-20/+36

2009-12-17	Properly handle EINTR from poll()	Stephen Gallagher	1	-10/+40

2009-12-17	Fix tight-loop in monitor part 2	Stephen Gallagher	1	-0/+5
	The first fix only fixed tight loops caused by setting 'timeout=0' in services. This patch also fixes it for domains.
2009-12-17	Change default for enumeration to TRUE	Stephen Gallagher	2	-2/+2

2009-12-17	Raise DEBUG level of sdap_get_generic_done()	Stephen Gallagher	1	-1/+1
	The DEBUG level of the result should not be lower than the DEBUG level of the request. It generates too much noise when enumerate is enabled or initgroups deals with groups with large numbers of users.
2009-12-15	Update SV translation	Göran Uddeborg	1	-26/+35

2009-12-15	Fix warning in server.c	Stephen Gallagher	1	-1/+1
	Function definition was missing "void" to denote that it took no arguments.
2009-12-15	Don't set explicit default for "timeout" in domains	Stephen Gallagher	1	-1/+1

2009-12-15	Fix tight loop in monitor	Stephen Gallagher	2	-4/+9
	If the domain heartbeat time was explicitly set in the configuration to 0, we would enter a tight loop in the heartbeat check and never answer requests from the child processes.
2009-12-15	Cleanup db files after test run	Sumit Bose	2	-2/+21

2009-12-15	Fix upgrade bug #323	Simo Sorce	1	-180/+186
	Move the upgrade function first and check explicitly for the old ldb name. Perform upgrades up to v02 first if necessary. Then proceed as normal letting the normal init functions perform further upgrades if necessary. This now works also if there is no "local" provider in the current configuration.
2009-12-15	sssd.spec for SLES	Sergei V. Kovylov	1	-0/+238

2009-12-15	Properly close STDERR when daemonizing	Stephen Gallagher	1	-9/+3
	This is necessary so that any process managing our startup and shutdown (e.g. authconfig) does not block and stall waiting for stderr to terminate. Fixes bug https://fedorahosted.org/sssd/ticket/324
2009-12-15	Update IT translation	Marina Latini	3	-4/+648

2009-12-15	Update SV translation	Göran Uddeborg	1	-86/+101

2009-12-15	Use --with-ldb-lib-dir while running make distcheck	Sumit Bose	1	-0/+2

2009-12-15	Build python modules in builddir	Sumit Bose	2	-4/+13
	This requires increasing the required autoconf version to 2.59 for use of $(abs_builddir). Fix uninstallation of python files as well
2009-12-15	Check for minimal version of check	Sumit Bose	1	-1/+1
	Test loops and _i are only available since 0.9.5.
2009-12-15	Add elapi_ut.conf to the list of dist files	Sumit Bose	2	-3/+4
	Some newlines are added, too.
2009-12-15	Use sys.exit instead of exit	Sumit Bose	1	-1/+2

2009-12-15	fail over: Change the first server pick logic	Martin Nagy	1	-5/+26
	The logic of selecting the server to fail over to was changed so that we start from the server next to the one that didn't work the last time. This is because the status of a server that failed last time might get reset before we try another one. This can cause that we try to use the nonworking server repeatedly, not giving a chance to other servers. Fixes: #321
2009-12-15	Don't consider one address with different port numbers as the same	Martin Nagy	6	-21/+38
	There were two problems with the code. We were using fo_set_server_status() instead of fo_set_port_status() when we failed to connect to a service. This is a problem because if two services use the same server, or we want to use one server with two different ports, marking the whole server as bad is incorrect. The other problem was that be_resolve_server_done() was comparing the hostent structures -- these are, however, equal across multiple server:port pairs with the same server addresses. Fixes: #321
2009-12-11	Updating version to 0.99.1	Stephen Gallagher	1	-1/+1

2009-12-10	Fix stupid copy-paste error	Stephen Gallagher	1	-1/+0

2009-12-10	INI Correcting build warnings.	Dmitri Pal	2	-8/+7
	The previous patch included "config.h" into the public header which caused all sorts of redefinitions and warnings.
2009-12-10	Fix DEBUG message for sysdb_init	Sumit Bose	1	-2/+2

2009-12-10	Fix for #322, update from old database versions.	Simo Sorce	1	-1/+14

2009-12-10	Run SSSDConfig tests during 'make check'	Stephen Gallagher	2	-89/+108

2009-12-10	Remove default for ldap_use_start_tls in IPA providers	Stephen Gallagher	1	-1/+1

2009-12-10	Add 'permit' and 'deny' access providers to SSSDConfig API	Stephen Gallagher	2	-5/+16

2009-12-10	Consolidate code for splitting strings by separator	Jakub Hrozek	6	-163/+107
	There were two functions for parsing strings by a separator. This patch consolidates on the one previously used in confdb. This also allows stripping the tokens of whitespace. Fixes: #319
2009-12-10	Fix for #316	Simo Sorce	1	-3/+3
	We were never filling the group attrs because of an inverse return check. Plus fix a crash bug for using a pointer that is not a memory context.
2009-12-10	Add Swedish translation for SSSD server	Göran Uddeborg	2	-0/+628

2009-12-10	Fix processing of Boolean values in SSSDConfig	Stephen Gallagher	4	-23/+169
	Previously, we were just casting the strings to bool, but this meant that all boolean values were "True". This patch solves the problem and adds regression tests for it.
2009-12-10	Add missing SSSDConfig file for IPA for make install	Stephen Gallagher	2	-0/+2
	Update tests to include IPA options
2009-12-10	Document the failover feature in manpages	Jakub Hrozek	4	-4/+61
	Fixes: #309
2009-12-10	Add Swedish translation for sss_client	Göran Uddeborg	2	-0/+37

2009-12-10	Handle the special 02 upgrade case for 04->05	Simo Sorce	1	-0/+7