summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-09-08ELAPI sinks and providersDmitri Pal9-143/+1016
This patch drills down to the next level of ELAPI functionality. I adds the creation and loading of the sinks. It also implements a skeleton for the first low level provider which will be capable of writing to a file. The configuration ini file is extended to define new configuration parameters and their meanings.
2009-09-08Remove shadow-utils support from toolsJakub Hrozek8-763/+73
Removes the ability to proxy to shadow-utils. Also remove all the supporting functions for getting domain type, domain by id etc.
2009-09-08Tools are allowed to touch only the 'local' domainSimo Sorce8-76/+35
2009-09-08Split database in multiple filesSimo Sorce26-335/+1184
The special persistent local database retains the original name. All other backends now have their own cache-NAME.ldb file.
2009-09-08Fix two possible uninitialized valuesSimo Sorce2-4/+5
Make counter for used messages explicit.
2009-09-08initialize sockaddr_in structureSumit Bose1-0/+10
2009-09-08fix libdbus configure checkSumit Bose2-1/+2
- remove unneeded CFLAGS component - do not leak LDFLAGS used by configure check to final Makefile
2009-09-03configure cleanupsSumit Bose15-22/+31
- replaced mailing list address - let sssd base components read version from VERSION
2009-09-03Avoid crash when timestamp is NULLRalf Haferkamp1-1/+3
Check if the timestamp argument of sdap_save_group_recv is NULL before using it.
2009-09-03Fix initgroups search filter when using rfc2307bisRalf Haferkamp1-2/+2
sdap_get_initgr_process() was using the wrong sdap_id_map struct when creating the searchfilter for the initgroups() call.
2009-09-03Fix proxy enumerationSimo Sorce1-86/+123
New tevent library finally outlawed nested loops.
2009-09-02Move RPM specfiles into contrib/Stephen Gallagher3-7/+17
Support RHEL 5 in the spec file
2009-09-02Honor enumerate option in ldap_idSimo Sorce1-6/+9
If enumerations are disabled for this domain, then do not start the enumeration task.
2009-09-02remove the concept of a backend nameSumit Bose4-31/+41
The data provider backends stored a name value besides the domain name to identify themselves to the data provider. This was the name of the id provider. Currently the backends can have different providers for id, authentication etc. So the name may be missleading. Also when there are more domains with the same id provider the name is not enough to identify the backend but the domain name is. As a consequence the backend name is removed completely and only the domain name is used for identification.
2009-09-01check if libpcre version is above or below 7Sumit Bose3-2/+27
PCRE_DUPNAMES is a new feature of libpcre 7. It is used in sssd to make the splitting of fully qualified user names more flexible.
2009-09-01stop processing a domain if no provider is givenSumit Bose1-0/+1
2009-08-31Turn enumeration into a boolean valueSimo Sorce4-13/+22
2009-08-31Correctly handle DbusWatch behavior.Simo Sorce2-37/+124
It seems like DBUS always adds 2 watches for the same fd. One is for reading and the other is for writing. DBUS then keeps disabling one and enabling the other, depending on whether it is interested in reading or writing from/to the file descriptor.
2009-08-28check if gid attribute is emptySumit Bose1-0/+6
2009-08-28send SSSD_REALM and SSSD_KDCIP environment to the clientSumit Bose1-2/+31
Currently the kerberos locator plugin needs these two variables to be set to find a KDC which is configured in sssd but not in /etc/krb5.conf.
2009-08-28add configure check for errno_tSumit Bose4-0/+14
2009-08-28fix internal order of ldap user mapping optionsSumit Bose1-4/+4
2009-08-28Speed-up enumerations.Simo Sorce2-2/+167
This patch reduces the time needed to enumerate groups of a midsized domain from 12 seconds to 4.4 Optimizes enumerations by doing only 2 ldb searches and some ordering instead of a number of searches proportional to the number of groups
2009-08-27Make enumeration an independent taskSimo Sorce5-68/+693
Always immediately return to DP, and update users/groups in the background. Also implements an optimization to retrieve only changed/new users/groups by filtering using the modifyTimestamp after the first query.
2009-08-27Remove redunant function and always pass attrs.Simo Sorce4-54/+30
2009-08-27Upgrade database to 0.2Simo Sorce2-5/+172
Provides also an upgrade function.
2009-08-27Fix group replies when using member/memberofSimo Sorce3-197/+180
Also remove legacy memberuid support
2009-08-27Always save using member/memberOfSimo Sorce5-216/+151
First pass to remove the legacy option and make it just a property of the provider
2009-08-27Initial support for multiple schema typesSimo Sorce1-7/+39
2009-08-27do not show server messages to userSumit Bose1-5/+0
2009-08-27removed unused header fileSumit Bose1-18/+0
2009-08-27Use the correct structure.Simo Sorce1-2/+2
2009-08-24Update version to 0.5.0Stephen Gallagher5-13/+507
Update gettext strings
2009-08-24Do not fail enumerations if a single store failsSimo Sorce1-40/+45
Try as hard as possible to store as much data as we can.
2009-08-24Relax memberof constraints a bitSimo Sorce1-85/+226
Allow to try to set members that do not actually exist. In that case simply remove them when we find out they are not real entries.
2009-08-24Add debug statements to sysdb_opsSimo Sorce1-10/+111
2009-08-24Catch possible bad input passed in by glibcSimo Sorce2-0/+20
Seen in tests and was leading to a segfault
2009-08-24some UPN handling fixesSumit Bose7-28/+79
- making the realm part upper case is now optional and done in the LDAP backend - using a username@realm UPN is now optional
2009-08-21Fix accidentally forcing MPGs on for all domainsStephen Gallagher1-1/+1
2009-08-21extended the documentation of LDAP backendSumit Bose2-4/+211
Added man pages sections about user and group attribute mapping. Added an example configuration to access an AD server.
2009-08-21store additional LDAP attributesSumit Bose3-5/+80
If available the original DN and the user principle will be stored in sysdb.
2009-08-21fix handling of filtersUsers in groupsSumit Bose4-31/+56
- with the boolean option filterUsersInGroups it can be controlled wether filtered users appear in groups or not. - fixed an error which prevented the display of groups with filtered members - removed some tab indents
2009-08-21Fix sysdb testsJakub Hrozek1-17/+62
2009-08-21Disallow all operations outside domains, fix deleting cache for filesJakub Hrozek4-11/+41
One of the previous patches disallowed adding users and groups outside known domains but it was missing disallowing modifying, deleting, etc. Also don't error if there's no sysdb cache to delete after deleting legacy user/domain. Fixes: tickets #113,#114
2009-08-21use stored upn if availableSumit Bose1-20/+101
If a user principle name (upn) can be found in sysdb the krb5 backend will use this otherwise is build as username@realm. It is checked that the realm is upper case only.
2009-08-21ELAPI Shortening namesDmitri Pal4-154/+152
Per ticket #118 shortened naimes of some functions and structs I added into ELAPI during last big functional patch . There is no plan to do a global shortening of all names but miving forward I will try to make them shorter than I used to.
2009-08-20COMMON Fixes to return values, errno, leaksDmitri Pal7-62/+69
Started looking at the ticket #107 related to traverse functions. Realized that the return values are not consistent. That ovelapped with the work that I wanted to do for ticket #103 - errno cleanup. So I (across collection, INI and ELAPI): * Made the return codes consistent (where found) * Removed errno where it is not needed While was testing used valgrind and found a nasty problem when the value was added to collection with overwriting duplicates the count was decreased improperly. Fixing collection.c to not decrease count made valgrind happy. While I was debugging this I also spotted several build warnings in trace statements when the " exp ? v1 : v2 " was used. Fixed those. In ini_config.c there was a trace stament that used variable after it was freed. Removed trace stament.
2009-08-20ELAPI: Adding concept of targetsDmitri Pal15-162/+899
The targets are the destinations which caller wants to send the events to. The sinks are now on the second level under targets and constitute a so called fail over chain for a target. Such approach eliminates the need for complex routing function. The dispatcher keeps the list of targets in a collection. The element in the collection is the target context. Also gispatcher keeps the list of the sinks in a separate collection. Each target context has a list of the sinks associated with this target. But those are just pointers (at least for now) to the sinks form the list kept by dispatcher. I had to add some internal debug callbacks to be able to see that all the internals of the dispatcher are actually in order. See the conttent of config file for more comments. Also see information posted on SSSD wiki. https://fedorahosted.org/sssd/wiki/WikiPage/ELAPIInterface
2009-08-20Ensure nextID doesn't reuse an existing local UID or GIDStephen Gallagher1-9/+21
If there was no maxID set for a domain, the search filter to check whether the UID was available would always return empty (because no UIDs can be <= 0) This patch changes the search filter if the maxID is unset so that it has no upper limit
2009-08-20Support Docbook 4.4Stephen Gallagher10-20/+20
RHEL5 did not support Docbook 4.5, and we are not using any 4.5 features.
generated by cgit (git 2.34.1) at 2024-12-20 01:42:44 +0000