summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-02-24LDAP: Only use paging control on requests for multiple entriesStephen Gallagher16-40/+100
The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
2012-02-23AUTOFS: Search all search bases for automounter map entriesJakub Hrozek1-18/+86
https://fedorahosted.org/sssd/ticket/1168
2012-02-23AUTOFS: Invoke implicit setautomntent if neededJakub Hrozek2-45/+156
https://fedorahosted.org/sssd/ticket/1167
2012-02-23libnl: fix the path to phy80211 subdirectoryJakub Hrozek1-4/+20
2012-02-23Move sudo_dom_ctx.user to local variablePavel Březina2-8/+8
2012-02-23Honor case_sensitive option in sudo responderPavel Březina4-21/+100
https://fedorahosted.org/sssd/ticket/1205
2012-02-23LDAP: Properly assign orig_dnStephen Gallagher1-0/+1
This was only used for properly identifying debug messages.
2012-02-23Save errno value before calling DEBUGJakub Hrozek1-2/+4
2012-02-23pam_sss: keep selinux optionalSimo Sorce3-4/+7
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2012-02-23nss_group: Cache the result from sssd when the glibc provided buffer is too ↵Simo Sorce1-8/+145
small.
2012-02-23IPA: Add ipa_parse_search_base()Stephen Gallagher3-19/+72
Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151
2012-02-22Add tool to convert debug levelsStephen Gallagher1-0/+100
Older versions of SSSD (1.5 and earlier) would take a debug_level value set in the [sssd] section as authoritative for all other sections where not explicitly overridden. We changed this so that all sections need to set it if they want debug logs set. This script can be run to make the new version continue to produce the same logs as the old versions did, by explicitly adding debug_level to all domains and services that did not have it set already. Bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=753763
2012-02-21Don't give memory context in confdb where not neededJan Zeleny17-55/+75
2012-02-21remove unused functionJakub Hrozek1-20/+0
2012-02-21End request if ldap_parse_result failsJakub Hrozek1-0/+3
2012-02-18Include the fd_limit configuration optionJakub Hrozek1-0/+1
2012-02-17RESPONDERS: Make the fd_limit setting configurableStephen Gallagher7-4/+63
This code will now attempt first to see if it has privilege to set the value as specified, and if not it will fall back to the previous behavior. So on systems with the CAP_SYS_RESOURCE capability granted to SSSD, it will be able to ignore the limits.conf hard limit. https://fedorahosted.org/sssd/ticket/1197
2012-02-17RESPONDERS: Allow increasing the file-descriptor limitStephen Gallagher4-0/+48
This patch will increase the file descriptor limit to 8k or the limits.conf maximum, whichever is lesser. https://fedorahosted.org/sssd/ticket/1197
2012-02-17Fix case insensitive service lookupsJakub Hrozek1-6/+6
2012-02-17LDAP: Ignore group member users that do not have name attributesStephen Gallagher1-2/+2
Instead of failing the group lookup, just skip them. This was impacting some users of ActiveDirectory where not all users had the appropriate attributes. https://fedorahosted.org/sssd/ticket/1169
2012-02-17NSS: Always return the same protocol that was requestedStephen Gallagher2-9/+26
https://fedorahosted.org/sssd/ticket/1160
2012-02-17Redesign purging of the sudo cachePavel Březina3-94/+370
https://fedorahosted.org/sssd/ticket/1173
2012-02-15Fix missing %endif in sssd.spec.inStephen Gallagher1-0/+1
2012-02-15Always include all manpage XML files in the distribution tarballStephen Gallagher1-2/+3
2012-02-15Move sss_ssh_* binaries to the main 'sssd' packageStephen Gallagher1-6/+7
The sssd-client subpackage is multilib, so it cannot contain conflicting /usr/bin executables.
2012-02-14Refactor sss_result into sss_sudo_resultPavel Březina5-36/+38
https://fedorahosted.org/sssd/ticket/1159
2012-02-14SSH: Build man pages conditionallyJan Cholasta2-4/+6
https://fedorahosted.org/sssd/ticket/1175
2012-02-14Fix memory hierarchy when processing nested group membershipsJakub Hrozek4-11/+14
https://fedorahosted.org/sssd/ticket/1186
2012-02-14Ensure NULL-termination in get_uid_from_pid()Stephen Gallagher1-0/+3
Coverity #12399
2012-02-13Fix uninitialized value error in proxy providerStephen Gallagher1-1/+1
Coverity #12467
2012-02-13Check for failure in sss_packet_grow()Stephen Gallagher1-5/+5
Coverity #12489
2012-02-13Fix bad failure handling in be_sudo_handler()Stephen Gallagher1-13/+13
If the dbus_message_get_args() failed, we would have been dereferencing a NULL be_req. Coverity #12490
2012-02-13Fix uninitialized in_transactionStephen Gallagher2-2/+2
Coverity #12521 and #12491
2012-02-13Add missing breaks to switch statementsStephen Gallagher2-0/+2
Coverity #12525 and #12524
2012-02-13Avoid uninitialized value comparisonStephen Gallagher1-0/+3
Coverity #12526
2012-02-13Fix missing NULL check after mallocStephen Gallagher1-0/+4
Coverity #12528
2012-02-13Remove dead codeStephen Gallagher1-9/+0
Coverity #12529
2012-02-13SSH: Verify that names received from client are valid UTF-8 in responderJan Cholasta2-0/+21
Also added a comment describing the wire format of client requests and responses. https://fedorahosted.org/sssd/ticket/1177
2012-02-13Allocate setent structure on state, not on the client contextJakub Hrozek4-9/+9
https://fedorahosted.org/sssd/ticket/1189
2012-02-13Remove setent structure when callback is calledJakub Hrozek5-22/+16
2012-02-10Only fetch SELinux string if the user is foundJakub Hrozek1-1/+2
2012-02-10Fixed issue with netgroup update in IPA providerJan Zeleny1-24/+34
This issue led to a netgroup with one triple (-,-,domain) when it contained no triples on the IPA server.
2012-02-10Use curly braces in pkgconfig metadata fileSumit Bose1-1/+1
2012-02-10SUDO responder: check if the input is a UTF-8 stringPavel Březina1-0/+7
https://fedorahosted.org/sssd/ticket/1171
2012-02-10Improve debug messages in sysdb_sudo_check_time()Pavel Březina1-4/+16
2012-02-10Fix group enumerationJakub Hrozek2-2/+9
Also adds some more debugging and fixes a code style issue. https://fedorahosted.org/sssd/ticket/1182
2012-02-10Add ssh service to sssd.api.confJan Cholasta2-2/+7
2012-02-10Add methods for activating and deactivating services to SSSDConfigJan Cholasta3-0/+268
2012-02-07fix typos in manualYuri Chornoivan2-2/+2
2012-02-07Updating translationsStephen Gallagher73-7264/+7993