summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-08-20Add m4 directory at rootStephen Gallagher1-0/+0
Needed for builds on RHEL5
2009-08-20Make the LOCAL provider always use MagicPrivateGroupsStephen Gallagher2-2/+9
Also updates the manpage for sssd.conf to denote this
2009-08-19enable usage of defaultBindDnSumit Bose6-9/+69
2009-08-19Eliminate the --with-tests configure flagStephen Gallagher3-32/+22
--with-tests was confusing. Since we now build our tests only with 'make check', it doesn't make sense for this to be a configure- time option. We will detect during configure whether the 'check' package is available and we will use them if so. Otherwise, we will only build and execute any test suites that do not rely on the 'check' framework. We will print warning during 'configure' if CHECK is not installed
2009-08-18added missing hash_create which was remove by a previous patchSumit Bose1-5/+14
2009-08-18fix return value of confdb_get_domainsSumit Bose1-0/+1
If the last configured domain is broken confdb_get_domains returns the return value of confdb_get_domain even if there are valid domains available.
2009-08-18Remove unneeded binary objects from the replace directoryStephen Gallagher3-0/+0
These were unintentionally committed binary files. They were used by the Samba project during cross-compilation, but they serve no purpose for us.
2009-08-18Ensure that only one local domain is configuredStephen Gallagher1-1/+32
2009-08-17Fix broken buildStephen Gallagher1-1/+0
Build broken in c0f3393d4ab923e2eedab0fad88a864e2aae9fc9
2009-08-17Fix reconnection codeSimo Sorce17-282/+141
Remove redundant reconnection code that was interfeering with the sbus reconnection code. Consolidate include files for sbus relates operations. Make pamsrv code similar to nsssrv code.
2009-08-17TRACE: Making sure trace is safe to output NULL stringsDmitri Pal2-99/+6
Patch adds checks for NULL to the trace macros. It also eliminates the unused trace.h in the collection directory.
2009-08-14Refactor responder_dp.cStephen Gallagher4-117/+117
Many of the functions in responder_dp.c were originally NSS- specific and were moved there from the NSS responder code. Since they are now generic to any responder, rename them to sss_dp_*
2009-08-14Don't go to the backend for identical cache entry requestsStephen Gallagher3-55/+303
Currently, if an additional request comes in for a cache entry while that same entry is already in the process of being refreshed, we start a duplicate cache update request. This patch adds allows the cache to maintain a hash table of all in-progress requests and queue up multiple callbacks for updates in progress. Once the data is returned, all of these callbacks will fire.
2009-08-13Make "files" a reserved word for legacy local domainJakub Hrozek4-4/+57
This patch introduces provider=files as a valid provider. Upon loading the backend, its properties in confdb are overwritten to those that represent legacy local domain. Also document this in sssd.conf(5) and example config
2009-08-13Tools ID range fixesJakub Hrozek3-4/+16
The tools did not take the special case where id_max = 0 (no limit) into account. Also disallow adding users when ID is specified outside any domain. Resolves trac tickets #86 and #89
2009-08-12ELAPI Next round of functionality - logging part of the interfaceDmitri Pal14-263/+1522
a) Added the main logging interface which allows creating dispatcher and logging messages or events. Can't actully log anything yet since the sinks are stubbed out. b) Made default template be a part of the default dispatcher. c) Updated UNIT test. d) Some of the calls are stubbed out but they are there to indicate where next round of work will be.
2009-08-12INI Simple fix to properly process multi value config parameters.Dmitri Pal2-2/+3
Also fixed a typo in the header file.
2009-08-12Eliminate unnecessary explicit timeout for DP account requestsStephen Gallagher1-33/+19
D-BUS handles timeouts itself and reports DBUS_ERROR_NO_REPLY if a timeout fires, so we can rely on this instead of having an explicit timeout ourselves. Furthermore, the two timeouts present a potential race condition.
2009-08-12Fix reversal of parent and member in groupmodSimo Sorce1-8/+8
ticket #101
2009-08-11Change the why DP clients identifySimo Sorce15-321/+340
Mirrors what we have done with the monitor.
2009-08-11Prevent races between dp startup and othersSimo Sorce1-16/+26
Simply delay anything other service by 1 second only at startup.
2009-08-11Change services identification mechanismSimo Sorce11-507/+421
Let services identify themselves voiluntarily as the first operation instead of polling from the monitor. Also consolidate some common functions and make them available as monitor helpers.
2009-08-11Minor fixesSimo Sorce2-7/+13
2009-08-11Fix monitor ping timeoutStephen Gallagher1-1/+4
Our configuration specifies the monitor config timeout as seconds, but we were passing it directly to dbus commands that require milliseconds. Fixing this in get_monitor_config(). Also, the default value of -1 for the timeout resulted in a timeout much too short to be useful, so I'm making it 10s instead. This fix solves the problem where a busy backend (for example, one that is enumerating a large number of LDAP entries) would fail to respond to the ping in time.
2009-08-11Make child processes exit when parent diesJakub Hrozek7-1/+70
The child processes call prctl() and when their parent process is killed, they are sent SIGTERM using prctl. This is currently Linux-specific, for non-Linuxes, a similar effect is achieved by catching a set of common termination signals and sending SIGTERM to the process group.
2009-08-11Make socket paths a compile-time optionStephen Gallagher10-16/+37
Previously, we had hardcoded the paths for the NSS, PAM and private PAM sockets to /var/lib/sss/pipes. With this patch, we will specify the sockets with --with-pipe-path.
2009-08-10Do not fail enumerations because of range checksSimo Sorce2-6/+18
2009-08-10Revert build-breaking libsss_util_la change.Stephen Gallagher1-9/+20
Moving the common utility sources into a libtool convenience library caused problems with symbols when loading the plugin libraries.
2009-08-10Add configure checks for docbook XSL templates and XML toolsJakub Hrozek2-3/+40
Changes the configure process so that configure errors out if lacks the tools necessary to build manual pages (like xsltproc). Also adds a check for required URI of the docbook XSL templates using the xmlcatalog tool.
2009-08-10Build and run tests with 'make check'Stephen Gallagher2-27/+11
When --enable-tests is set by configure, the sysdb, stress and resolver tests will be built by 'make check', which will also then run the sysdb and resolver tests automatically. This patch also updates the server Makefile to create a libtool convenience library of the common source files to spare them being built separately for every library/executable that has different CFLAGS.
2009-08-10Simplify interfaces initializationSimo Sorce24-417/+267
Make as much as possible static, and remove use of talloc_reference and allocation/deallocation of memory when not necessary. Fix also responder use of rctx->conn, was mistakenly used for both monitor and dp connections.
2009-08-10merge server and connection structuresSimo Sorce12-286/+228
This reduce code duplication as it allows to use one set of watch and timeout functions, and at the same time also allow not to use a secondary structure just to unify these functions.
2009-08-10Cosmetic changesSimo Sorce16-375/+375
Rationalize and rename connection names in preparatoin for merging of server and connection structures.
2009-08-10Remove redundant memory contextsSimo Sorce14-134/+114
Simplify code by removing stuff that is never used or redundant.
2009-08-10Refactor some code around watches and timeoutsSimo Sorce4-355/+324
Watches and Timeouts are now unified under one implementation that covers both dbus server and connections. In watches do not keep removing and adding file events simply toggle the appropriate flags. Also streamline some memory management within both timeout and watch related functions, checking allocations and freeing the whole context not just the events.
2009-08-10CleanupsSimo Sorce2-189/+199
Minor style cleanups, and some name consistency cleanups that make some names a bit more meaningful and/or shorter.
2009-08-05Fix broken ifndefsSimo Sorce1-9/+0
ifndef doesn't work for those functions that aren't already macro definitions in tevent.h like tevent_req_data. However if tevent_req_data is defined in tevent.h, all other functions are available as well. So just check for tevent_req_data and define all of them if it is not available. This should fix compiling on distros with the latsest tevent.
2009-08-05Parse fully qualified names in toolsJakub Hrozek8-88/+289
Allow adding users into different domains not only by specifying ID directly but also by specifying fully qualified name. Exit when both specifications are used in conflict.
2009-08-05Move parsing of names and domains into util/Jakub Hrozek4-120/+135
2009-08-05Fix adding to groups on user creationJakub Hrozek1-1/+1
2009-08-05Consolidate tevent helpersJakub Hrozek6-84/+25
2009-08-04Fix race condition in sdap codeSimo Sorce2-83/+172
Retrieving ldap results and storing users could sometimes results in race conditions where the final ldap result was retrieved before the store operations where finished resulting in the operations to be aborted before termination. Implement a serialization mechanism per operation.
2009-08-03Fix search replies getting ignoredSimo Sorce1-14/+12
2009-07-31Correct check for local domain in toolsJakub Hrozek2-14/+2
When looking for the local domain in the tools, do so by looking on provider value, not domain name. Also removes one redundant lookup of local domain.
2009-07-31Notify user when deleting nonexistent user or groupJakub Hrozek2-5/+20
Fixes: RHBZ #513247, RHBZ #513250
2009-07-31Use correct return codesJakub Hrozek4-4/+4
Some code paths that should exit with an error used potentionally incorrect return code.
2009-07-31Add ignore_not_found parameter to sysdb delete functionsJakub Hrozek4-21/+182
Also add tests
2009-07-31Improve error messagesJakub Hrozek4-5/+32
Fixes: * RHBZ 513282 - Error Message Incorrect when Trying to add Group with GID already in use * RHBZ 513284 - Error Message Incorrect when Trying to add User with UID already in use * RHBZ 513242 - Better error Message when modifying a user that doesn't exist * RHBZ 513244 - Better error Message when adding a user to a group that doesn't exist
2009-07-29Address CVE-2009-2410Stephen Gallagher1-1/+1
Fix incorrect error code return in local_handler_callback
2009-07-24Add async resolver testsJakub Hrozek2-1/+455
Add some basic unit tests of the async resolver module. One of the tests resolves a name on the Internet, therefore it is off by default and is turned on with the -n switch.