summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-01-17Raise the debug level of two very noisy statementsStephen Gallagher2-4/+6
2012-01-17NSS: Improve DEBUG messages for netgroup cacheStephen Gallagher1-2/+2
2012-01-14Support multiple search bases in HBACJan Zeleny5-39/+176
2012-01-14Add info about ipa_host_search_base to man pageJan Zeleny1-0/+29
Also add comment that setting ipa_hbac_support_srchost to False disables search filters given in ipa_host_search_base
2012-01-14NSS: Validate input string lengthsStephen Gallagher4-9/+32
Also fixes a return value bug where we were returning errno error codes instead of nss_status codes. Fixes https://fedorahosted.org/sssd/ticket/1135
2012-01-14LDAP: Copy URI instead of pointing at failover service recordStephen Gallagher1-2/+8
In a heavy load environment, sometimes the failover service record would be updated and free the URI value. We need to guarantee that this URI string remains valid throughout the entire request. https://fedorahosted.org/sssd/ticket/1139
2012-01-14Log fixes for sdap_call_conn_cbStephen Gallagher2-2/+4
2012-01-09util: Fix murmurhash3 on machines with old glibcSimo Sorce1-0/+10
2012-01-09Add a random + identity test for murmurhash3Simo Sorce1-0/+29
This test always generate a random string so each time the test is run we will test the hash function with a new value. It also hashes the same string twice and compares the result so that we have a chance of catching if uninitialized variables are getting mixed into the value calculation and end up generating different results for the same input.
2012-01-09util: add murmurhash3 hash functionSimo Sorce4-1/+147
2012-01-09nsssrv: use sized_string in fill_grentSimo Sorce1-35/+48
2012-01-09nsssrv: use sized_string in fill_pwentSimo Sorce1-41/+56
2012-01-09nsssrv: add string manipulation helperSimo Sorce2-0/+19
the sized_string structure makes it easier to keep track of string lengths and makes passing around data more compat and readable.
2012-01-06IPA netgroups: Do not reuse loop iterator variableJakub Hrozek1-3/+3
2012-01-06Do not call krb5_child when changing passwords and provider went offlineJakub Hrozek1-1/+11
https://fedorahosted.org/sssd/ticket/1131
2012-01-06HBAC: create empty groups with one NULL elementJakub Hrozek1-16/+15
https://fedorahosted.org/sssd/ticket/1130
2012-01-04nsssrv: remove unused macroSimo Sorce1-2/+0
2012-01-04tests: fix test group of utf8 testsSimo Sorce1-5/+5
2012-01-04make dist fixesSimo Sorce1-1/+1
Use pax format for tar as it is the only one that will succeed (albeit spitting warnings) to create a tar file if user UID values are above ~2M
2011-12-22Importing new translations for 1.7.0 releaseStephen Gallagher73-4219/+2919
2011-12-22Add compatibility layer for Heimdal Kerberos implementationStephen Gallagher6-21/+99
2011-12-21Honor case sensitive flag when creating the ccname templateJakub Hrozek4-12/+56
2011-12-21Return user and group names lowercased in case insensitive domainsJakub Hrozek1-12/+32
2011-12-21sss_get_cased_name utility functionJakub Hrozek5-11/+24
2011-12-20Bump version to 1.8.0Stephen Gallagher1-1/+1
2011-12-20Save original memberof, not memberofJakub Hrozek1-4/+16
2011-12-20Failover: Introduce a per-service timeoutJakub Hrozek4-5/+67
https://fedorahosted.org/sssd/ticket/976
2011-12-20Do not touch resolve_service_state in fo_resolve_service_doneJakub Hrozek1-14/+11
2011-12-20Resolver: Introduce a per-request timeoutJakub Hrozek1-30/+199
2011-12-20PAM: make initgroups timeout work across multiple clientsStephen Gallagher7-6/+243
Instead of timing out the initgroups lookup on a per-cctx basis, we will maintain a hash table of recently-seen users and use this instead. This will allow SSSD to handle user's logging into multiple services simultaneously more graciously, as well as playing nicer with SSH (which makes calls to PAM both before and after a fork). https://fedorahosted.org/sssd/ticket/1063
2011-12-20Error out if local domain is case insensitiveJakub Hrozek1-0/+7
https://fedorahosted.org/sssd/ticket/1104
2011-12-20SUDO Integration - fixed memory leak in sdap_sudo_handler()Pavel Březina1-0/+1
2011-12-20SUDO Integration - be_sudo_req removed from sudo_ctxPavel Březina2-2/+0
2011-12-20MONITOR: use sigchld handler for monitoring SSSD servicesStephen Gallagher1-177/+159
2011-12-19Update translations for string freezeStephen Gallagher73-14615/+23041
2011-12-19Pass sdap_id_ctx to online check from IPA providerJakub Hrozek5-18/+56
2011-12-19Securely set umask when using mkstempStephen Gallagher4-0/+18
Coverity 12394, 12395, 12396, 12397 and 12398
2011-12-19Reorder pidfile() function to guarantee NULL-terminationStephen Gallagher1-3/+3
Coverity 12400
2011-12-19Deleted declaration of nss_get_dom()Jan Zeleny1-4/+0
This function has been renamed to responder_get_domain() but this declaration hasn't been deleted.
2011-12-19Move child_common routines to utilStephen Gallagher15-20/+20
2011-12-19Add common SIGCHLD handling for providers.Pavel Zuna5-8/+269
2011-12-19Pass client context to sss_dp_get_account_sendJakub Hrozek1-1/+1
2011-12-16Use of uninitialized value in sss_ldap_dn_in_search_basesPavel Březina1-3/+3
https://fedorahosted.org/sssd/ticket/1112
2011-12-16DP: Remove processed callbacksJakub Hrozek1-3/+5
2011-12-16Logically dead code in sdap_nested_group_lookup_groupPavel Březina1-1/+1
https://fedorahosted.org/sssd/ticket/1113
2011-12-16SUDO Integration - pseudo client for testingPavel Březina2-0/+182
2011-12-16SUDO Integration - API for sudoPavel Březina4-0/+553
2011-12-16SUDO Integration - responder - get sudo rules logicJakub Hrozek1-2/+444
2011-12-16SUDO Integration - responderPavel Březina10-1/+1065
2011-12-16SUDO integration - LDAP providerPavel Březina5-1/+660