summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-05-19Enable automake builds for libreplaceStephen Gallagher4-73/+57
2009-05-19Enable parallel builds for the common librariesStephen Gallagher5-8/+103
2009-05-19call tevent_add_fd only onceSumit Bose1-27/+11
2009-05-19added prototype for sysdb_set_cached_passwordSumit Bose1-0/+6
2009-05-18Implement approximate offline detection in proxySimo Sorce1-5/+98
This will blackout any request to the backend for 15 seconds, then will allow again to retry.
2009-05-18Move actual password caching into sysdbSimo Sorce12-156/+286
Convert auth modules to do the caching themselves
2009-05-18Split ldap backend into auth and identity filesSimo Sorce3-20/+800
2009-05-18Move ldap_be.c into ldap/ldap_auth.cSimo Sorce1-0/+0
2009-05-18Prevent accepting blank passwordsSimo Sorce1-0/+7
2009-05-18Fix crypt functions to not use static buffers.Simo Sorce4-338/+334
Also fix style, clarify, and simplify some logic.
2009-05-17Build fixesSimo Sorce2-0/+22
Comment out unused function in pam_sss Add missing configure.ac to common/ini
2009-05-15Treat the local provider as a special caseStephen Gallagher2-1/+17
The local provider needs no backend, so we'll create a special provider entry for it called "local" that will not attempt to retrieve provider configuration but will remain in the service list so it can be updated when the config file changes.
2009-05-15added new pam client protocolSumit Bose3-4/+282
2009-05-15added more flexible handling of client protocolSumit Bose6-7/+83
- allow different protocol versions for PAM and NSS - support more than one protocol version in the responder
2009-05-14Manpage generationJakub Hrozek8-3/+243
Provides a set of make rules for generating UNIX manual pages from DocBook 4.5 source as well as sample manpage for sss_useradd. Automatic generation of manual pages during "make" process is tunable with config parameter "--with-manpages". To rebuild the man pages separately, use the "make doc" target. Before building, the manpages are validated using a DTD schema.
2009-05-14Enable building a single libsssd_utils.so from commonStephen Gallagher3-6/+38
2009-05-14Enable modular build of common SSSD librariesStephen Gallagher14-10/+55
Allow configuration and build of individual SSSD utility libraries from their own subdirectories. Building all utilities is still possible recursively from the common root.
2009-05-14Update configure rules for LDB and POPTStephen Gallagher2-4/+9
We need to ensure that configure fails with an error if the popt development libraries are not present or if ldb module support is not available.
2009-05-14More useful error message when adding user/group that already existsJakub Hrozek2-2/+18
Fixes: RHBZ #498462
2009-05-14Check for valid ID range, domains overlapJakub Hrozek1-0/+36
2009-05-14added check for NULL valuesSumit Bose3-9/+8
- allow unspecified value in struct pam_data to be NULL - check if domain structure is initialized in pam_reply
2009-05-12Fix warnings in monitor.c and confdb.cStephen Gallagher2-7/+13
2009-05-11Separate confdb API from confdb setupStephen Gallagher8-374/+458
Refactoring the confdb so that the setup code can be linked separately from the access API. This is being done so that our plugins do not need to link against the collection and ini_config libraries.
2009-05-08added syslog support to pam_sssSumit Bose1-5/+40
2009-05-08cleanup and fixes for pam_sssSumit Bose1-190/+352
- if PAM_USER==root return PAM_USER_UNKNOWN - pam_sss now can handle to following options: - use_first_pass: forces the module to use a previous stacked modules password and will never prompt the user - use_authtok: when password changing enforce the module to set the new password to the one provided by a previously stacked password module - forward_pass: store the passwords collected by the module as pam items for modules called later in the stack
2009-05-08Chdir to / when daemonizingJakub Hrozek1-0/+11
2009-05-08Use tevent for shutdown signals, remove old pidfile, make sssd single-instance.Jakub Hrozek2-1/+79
Use tevent signal handling facilities for handlong SIGTERM and SIGINT in the monitor. Remove pidfile on SIGTERM and SIGINT. Make sssd single-instance by checking if we suceeded in signaling the process in the pidfile.
2009-05-08redirect stderr to /dev/null in initscriptJakub Hrozek1-1/+1
2009-05-06Fix some more return paths using uninitalized retSimo Sorce1-3/+3
2009-05-04Fixes for porting SSSD to Debian-based platformsStephen Gallagher5-5/+7
2009-04-29Fix configuration corruption issueStephen Gallagher1-2/+20
In the event that the configuration was corrupt the first time the SSSD is started, it would write in the special data for attributes and indexes, but it would fail before writing the version. Subsequent reloads (even with correct configuration files) would fail, since they would try again to write the attributes and indexes and fail since they were already present.
2009-04-29Fix IndentationSimo Sorce1-88/+89
2009-04-29reuse authtok which is already in the pam stackSumit Bose1-2/+22
2009-04-29Fix use of uninitialized return variableSimo Sorce1-5/+5
2009-04-28Add debug param to the tools, fix lock/unlock in sss_usermodJakub Hrozek6-3/+31
2009-04-28Invoke shadow-utils in sss_ toolsJakub Hrozek11-48/+643
Make shadow-utils base path configurable Use default values for params, allow configuring them
2009-04-28handle other pam calls when offlineSumit Bose1-0/+10
2009-04-28Use different attribute for cached passwords change timeSumit Bose1-2/+2
2009-04-28enable offline handling for native LDAP backendSumit Bose1-4/+48
2009-04-28change PAM timeout the match NSS timeSumit Bose2-3/+1
2009-04-27Use different attribute for cached passwordsSimo Sorce2-3/+5
This fixes a bug with legacy backends where the cached password would be cleared on a user update. Using a different attribute we make sure a userPassword coming from the remote backend does not interfere with a cachedPassword (and vice versa).
2009-04-27Update sss_client configure.ac tooSimo Sorce1-1/+1
2009-04-27Release version 0.3.3Stephen Gallagher3-3/+3
2009-04-27Eliminate segfault on NSS and PAM responder startup.Stephen Gallagher1-0/+4
If the data provider is not yet available when NSS and PAM start, they will generate a segmentation fault when trying to configure their automatic reconnection to the Data Provider. I've now added code in sss_dp_init() to detect whether the dp_ctx is NULL and return EIO.
2009-04-27Stress testJakub Hrozek3-1/+333
2009-04-27enable uid/gid generation againSumit Bose1-3/+6
2009-04-27handle pam acct_mgmt, setcred and open/close_session before user bind in ↵Sumit Bose1-0/+17
ldap backend
2009-04-27fix for pam proxy chauthtokSumit Bose4-9/+22
When a user from a domain served by the proxy backend changes his password with passwd the passwd command asks for the old password, but it is not validated by the pam_chauthtok call in the proxy backend, because it is running as root. If the request is coming the unpriviledged socket we now call pam_authenticate explicitly before pam_chauthtok.
2009-04-23removed length of unused element from packet size calculationSumit Bose1-1/+1
The domain name is no longer send as an element on its own, but if set as a member of the response array. If the user was not found pd->domain is NULL and strlen will seg-fault.
2009-04-23fixes for user and group creation in LOCAL domainSumit Bose2-1/+20
- added range check for supplied UIDs and GIDs - initialize pc_gid to 0 to trigger gid generation
generated by cgit (git 2.34.1) at 2025-01-01 20:47:49 +0000