| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2009-12-07 | Try to renew Kerberos credentials | Sumit Bose | 5 | -2/+189 | |
| When using GSSAPI we need a valid service ticket to talk to the LDAP server. If the ticket is expired the LDAP client returns with 'Can't contact LDAP server'. Currently we set the backend offline if this error occurs although the server is still available. This patch checks if the TGT is expired and tries to renew the credentials before going offline. | |||||
| 2009-12-07 | Make packaging of *.egg-info files more flexible | Sumit Bose | 1 | -1/+4 | |
| 2009-12-07 | Add basic OS detection | Sumit Bose | 4 | -2/+40 | |
| Detect if the OS is Fedora, RHEL or SUSE and install the SUSE start-script on SUSE systems. | |||||
| 2009-12-07 | Fix nested group memberships | Simo Sorce | 6 | -221/+299 | |
| Search the local db to find the local DN using the original DN as search key. This way we do not have to rely on weak and faulty heuristicts based on DN names. Add a few helper functions in the process and change the way we pass members to sysdb_store_group_send(), instead of passing users and groups list, just add member DNs to the other sysdb attrs. | |||||
| 2009-12-07 | Make strdn build functions more available | Simo Sorce | 3 | -42/+58 | |
| 2009-12-07 | Resolve nested groups also when rfc2307bis is used | Simo Sorce | 1 | -68/+2 | |
| 2009-12-07 | Do not treat missing proc files as errors. | Sumit Bose | 1 | -0/+10 | |
| 2009-12-07 | Add sysdb_search_custom request | Sumit Bose | 3 | -74/+206 | |
| 2009-12-03 | Raise debug log level for LDB_DEBUG_WARNING | Stephen Gallagher | 1 | -1/+1 | |
| Level 3 was far too low for mostly-useless messages | |||||
| 2009-12-03 | Make debug log timestamps human-readable | Stephen Gallagher | 2 | -4/+13 | |
| 2009-12-03 | Use the custom password field in groups too. | Simo Sorce | 1 | -3/+5 | |
| Groups also need to honor the settable password field and use * by default. | |||||
| 2009-12-03 | Use memberuid and not member in group enumerations | Simo Sorce | 2 | -54/+9 | |
| This allows for correctly reporting nested group members, while at the same time not paying a too high price for caluclating nested groups at runtime e very time a search is made. | |||||
| 2009-12-03 | Compute and save memberuid in cache as well | Simo Sorce | 1 | -108/+690 | |
| This patch adds a new generated attribute to every group that has direct or indirect members. This attribute is called memberuid and contains the name of the users that are directo or indirect members of this group. This is done to greatly speed up group enumerations when NSS reads groups off the cache. | |||||
| 2009-12-03 | Fix memberof plugin | Simo Sorce | 1 | -12/+15 | |
| A loop was badly built and was skipping entries. This left some memberof attributes in place that should have been removed. | |||||
| 2009-12-03 | Check LDAP structure before calling ldap_unbind_ext() | Sumit Bose | 1 | -1/+3 | |
| 2009-12-03 | Check the services started against a list of known services | Jakub Hrozek | 1 | -0/+29 | |
| Fixes: #241 | |||||
| 2009-12-03 | Setup ldap child logging from IPA backend | Jakub Hrozek | 4 | -45/+54 | |
| Fixes: #296 | |||||
| 2009-12-03 | Copy-edit sssd-ipa man page | David O'Brien | 1 | -18/+17 | |
| Mainly typo fixes and grammar updates. Application of RH doc styles where appropriate. | |||||
| 2009-12-01 | Revert "Remove ELAPI from build and tarball" | Stephen Gallagher | 1 | -2/+3 | |
| This reverts commit 9a446ad6d6445ed22f0d5132a241a3c8be5e1008. | |||||
| 2009-12-01 | Revert "Stop configuring ELAPI" | Stephen Gallagher | 1 | -1/+1 | |
| This reverts commit a7360aa07780133b77c7fa0ab629b5e660e1e49a. | |||||
| 2009-12-01 | Stop configuring ELAPI | Stephen Gallagher | 1 | -1/+1 | |
| 2009-12-01 | Remove ELAPI from build and tarball | Stephen Gallagher | 1 | -3/+2 | |
| Until such time as ELAPI is in a usable state, it makes no sense to be building and distributing it in the tarball. This patch will disable it from building and inclusion in the tarball. | |||||
| 2009-12-01 | Better error message when there is no local domain configured | Jakub Hrozek | 7 | -7/+31 | |
| Fixes: #235 | |||||
| 2009-12-01 | Warn visibly about permission problems with the config file | Jakub Hrozek | 1 | -1/+8 | |
| Fixes: #268 | |||||
| 2009-12-01 | Immediately return a krb5 change password request when offline | Sumit Bose | 1 | -0/+7 | |
| 2009-12-01 | Do not include libsss_ipa.la in rpm package | Sumit Bose | 1 | -0/+1 | |
| 2009-12-01 | Fix tabs | Simo Sorce | 1 | -21/+21 | |
| 2009-11-30 | Update version to 0.99.0 | Stephen Gallagher | 1 | -1/+1 | |
| 2009-11-25 | Remove unneeded debugging code | Sumit Bose | 1 | -9/+0 | |
| 2009-11-25 | Fix an internal error when cache_credentials=FALSE | Sumit Bose | 1 | -1/+4 | |
| 2009-11-25 | Fix bug with bad ldb pkg-config files | Stephen Gallagher | 1 | -1/+1 | |
| 2009-11-25 | Update PL translation | raven | 1 | -7/+6 | |
| 2009-11-25 | Get TGT in a child process. | Jakub Hrozek | 10 | -165/+1081 | |
| To avoid blocking in a synchronous call, the TGT is saved in a separate process Fixes: #277 | |||||
| 2009-11-25 | Split helpers for child processes | Jakub Hrozek | 8 | -174/+267 | |
| Moves several functions out of providers/krb5 hierarchy into a separate module so it can be shared by the ldap child. | |||||
| 2009-11-25 | In IPA, the realm is always the domain uppercased. | Simo Sorce | 1 | -2/+7 | |
| 2009-11-25 | Make ldb lib dir configurable | Sumit Bose | 2 | -1/+19 | |
| 2009-11-25 | Use ldb modules from build root for tests | Sumit Bose | 2 | -0/+5 | |
| 2009-11-25 | Fix internal options numbers test | Simo Sorce | 1 | -12/+24 | |
| Unfortunately since we changed the defines to an enum the preprocessor test stopped working. Turn tests into runtime tests that will abort the process. | |||||
| 2009-11-23 | Really check return value from pam_set_item | Sumit Bose | 1 | -3/+3 | |
| 2009-11-23 | Fix ticket #289 | Simo Sorce | 1 | -0/+18 | |
| When I converted fill_grent to speed up enumerations I left out this check by mistake. | |||||
| 2009-11-23 | Update translation strings for string freeze | Stephen Gallagher | 6 | -383/+463 | |
| 2009-11-23 | Read KDC info from file instead from environment | Sumit Bose | 13 | -74/+477 | |
| Then name or IP adress of the KDC is written into the pubconf directory into a file named kdcinfo.REALM. The locator plugin will then read this file and pass the data to the kerberos libraries. | |||||
| 2009-11-23 | Speed up user requests while offline | Stephen Gallagher | 6 | -52/+102 | |
| This adds a new boolean option to sss_dp_send_acct_req() called fast_reply. If we make a request to the backends and we are currently offline, this option will determine whether we should immediately return from the cache (acceptable for NSS requests) or potentially wait for an online check to complete (required for PAM requests). | |||||
| 2009-11-23 | Make backend request type a bitfield | Stephen Gallagher | 3 | -5/+5 | |
| 2009-11-23 | Update NL translation | Stephen Gallagher | 1 | -6/+6 | |
| 2009-11-23 | Update PL translation | Stephen Gallagher | 1 | -79/+80 | |
| 2009-11-23 | Add ldap_pwd_policy option | Sumit Bose | 7 | -45/+129 | |
| 2009-11-20 | Add initial failover support for ldap and ipa | Simo Sorce | 22 | -69/+938 | |
| The retun values are still not directly used with ldap libraries that still do their own name resolution, but this patch introduces a very basic framework to have a multiple providers in one domain use and share a single failover service if they want to. | |||||
| 2009-11-20 | Raise some timeouts | Simo Sorce | 2 | -3/+3 | |
| When using high debug levels or valgrind the code maybe slow enough that these timeouts were too strict. | |||||
| 2009-11-20 | Filter by id range before actually storing entries. | Simo Sorce | 4 | -31/+89 | |
| This way we do not need to check for id ranges on every search. | |||||
 |
index : sssd | |
| System Security Services Daemon | ben |
| summaryrefslogtreecommitdiff |