sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2009-12-03	Use the custom password field in groups too.	Simo Sorce	1	-3/+5
	Groups also need to honor the settable password field and use * by default.
2009-12-03	Use memberuid and not member in group enumerations	Simo Sorce	2	-54/+9
	This allows for correctly reporting nested group members, while at the same time not paying a too high price for caluclating nested groups at runtime e very time a search is made.
2009-12-03	Compute and save memberuid in cache as well	Simo Sorce	1	-108/+690
	This patch adds a new generated attribute to every group that has direct or indirect members. This attribute is called memberuid and contains the name of the users that are directo or indirect members of this group. This is done to greatly speed up group enumerations when NSS reads groups off the cache.
2009-12-03	Fix memberof plugin	Simo Sorce	1	-12/+15
	A loop was badly built and was skipping entries. This left some memberof attributes in place that should have been removed.
2009-12-03	Check LDAP structure before calling ldap_unbind_ext()	Sumit Bose	1	-1/+3

2009-12-03	Check the services started against a list of known services	Jakub Hrozek	1	-0/+29
	Fixes: #241
2009-12-03	Setup ldap child logging from IPA backend	Jakub Hrozek	4	-45/+54
	Fixes: #296
2009-12-03	Copy-edit sssd-ipa man page	David O'Brien	1	-18/+17
	Mainly typo fixes and grammar updates. Application of RH doc styles where appropriate.
2009-12-01	Revert "Remove ELAPI from build and tarball"	Stephen Gallagher	1	-2/+3
	This reverts commit 9a446ad6d6445ed22f0d5132a241a3c8be5e1008.
2009-12-01	Revert "Stop configuring ELAPI"	Stephen Gallagher	1	-1/+1
	This reverts commit a7360aa07780133b77c7fa0ab629b5e660e1e49a.
2009-12-01	Stop configuring ELAPI	Stephen Gallagher	1	-1/+1

2009-12-01	Remove ELAPI from build and tarball	Stephen Gallagher	1	-3/+2
	Until such time as ELAPI is in a usable state, it makes no sense to be building and distributing it in the tarball. This patch will disable it from building and inclusion in the tarball.
2009-12-01	Better error message when there is no local domain configured	Jakub Hrozek	7	-7/+31
	Fixes: #235
2009-12-01	Warn visibly about permission problems with the config file	Jakub Hrozek	1	-1/+8
	Fixes: #268
2009-12-01	Immediately return a krb5 change password request when offline	Sumit Bose	1	-0/+7

2009-12-01	Do not include libsss_ipa.la in rpm package	Sumit Bose	1	-0/+1

2009-12-01	Fix tabs	Simo Sorce	1	-21/+21

2009-11-30	Update version to 0.99.0	Stephen Gallagher	1	-1/+1

2009-11-25	Remove unneeded debugging code	Sumit Bose	1	-9/+0

2009-11-25	Fix an internal error when cache_credentials=FALSE	Sumit Bose	1	-1/+4

2009-11-25	Fix bug with bad ldb pkg-config files	Stephen Gallagher	1	-1/+1

2009-11-25	Update PL translation	raven	1	-7/+6

2009-11-25	Get TGT in a child process.	Jakub Hrozek	10	-165/+1081
	To avoid blocking in a synchronous call, the TGT is saved in a separate process Fixes: #277
2009-11-25	Split helpers for child processes	Jakub Hrozek	8	-174/+267
	Moves several functions out of providers/krb5 hierarchy into a separate module so it can be shared by the ldap child.
2009-11-25	In IPA, the realm is always the domain uppercased.	Simo Sorce	1	-2/+7

2009-11-25	Make ldb lib dir configurable	Sumit Bose	2	-1/+19

2009-11-25	Use ldb modules from build root for tests	Sumit Bose	2	-0/+5

2009-11-25	Fix internal options numbers test	Simo Sorce	1	-12/+24
	Unfortunately since we changed the defines to an enum the preprocessor test stopped working. Turn tests into runtime tests that will abort the process.
2009-11-23	Really check return value from pam_set_item	Sumit Bose	1	-3/+3

2009-11-23	Fix ticket #289	Simo Sorce	1	-0/+18
	When I converted fill_grent to speed up enumerations I left out this check by mistake.
2009-11-23	Update translation strings for string freeze	Stephen Gallagher	6	-383/+463

2009-11-23	Read KDC info from file instead from environment	Sumit Bose	13	-74/+477
	Then name or IP adress of the KDC is written into the pubconf directory into a file named kdcinfo.REALM. The locator plugin will then read this file and pass the data to the kerberos libraries.
2009-11-23	Speed up user requests while offline	Stephen Gallagher	6	-52/+102
	This adds a new boolean option to sss_dp_send_acct_req() called fast_reply. If we make a request to the backends and we are currently offline, this option will determine whether we should immediately return from the cache (acceptable for NSS requests) or potentially wait for an online check to complete (required for PAM requests).
2009-11-23	Make backend request type a bitfield	Stephen Gallagher	3	-5/+5

2009-11-23	Update NL translation	Stephen Gallagher	1	-6/+6

2009-11-23	Update PL translation	Stephen Gallagher	1	-79/+80

2009-11-23	Add ldap_pwd_policy option	Sumit Bose	7	-45/+129

2009-11-20	Add initial failover support for ldap and ipa	Simo Sorce	22	-69/+938
	The retun values are still not directly used with ldap libraries that still do their own name resolution, but this patch introduces a very basic framework to have a multiple providers in one domain use and share a single failover service if they want to.
2009-11-20	Raise some timeouts	Simo Sorce	2	-3/+3
	When using high debug levels or valgrind the code maybe slow enough that these timeouts were too strict.
2009-11-20	Filter by id range before actually storing entries.	Simo Sorce	4	-31/+89
	This way we do not need to check for id ranges on every search.
2009-11-20	Optimize sysdb_enumgrent	Simo Sorce	3	-504/+203
	This brings down the time needed to enumerate my group database from 2.4 seconds to 0.15 seconds.
2009-11-20	Only display errors in unit tests	Stephen Gallagher	10	-11/+21
	If you want to turn verbosity back on, just set the environment variable CK_VERBOSITY=verbose
2009-11-20	Enhance check for remote hosts	Sumit Bose	2	-55/+97

2009-11-20	Add ipa_auth	Sumit Bose	5	-1/+352
	To support IPA DS to Kerberos password migration a seperate authentication target is added. It calls the Kerberos authentication target and in the case of a 'Preauthentication Error' the LDAP authentication target. On success the Kerberos target is called again to request the TGT.
2009-11-20	Add reference to sssd-krb5 man page.	Simo Sorce	1	-0/+3
	Thanks to Marko Myllynen for spotting this.
2009-11-20	Improve handling of ccache files	Sumit Bose	8	-206/+1081
	- save current ccache file to sysdb - use the saved ccache file if the user has running processes - create an empty ccache if offline - return enviroment variables if offline
2009-11-20	Correctly escape DN value.	Simo Sorce	1	-6/+42
	In building the DN string we weren't correctly escaping the value of the RDN component. This patches fixes that.
2009-11-20	Better behavior on cleanup	Simo Sorce	4	-20/+44
	With the previous code in domains with many users and enumeration enable we would eventually end up making thousands of individual searches for entries in the clean-up process. Change the code to do a full enumeration before a cleanup so we do one single big search to update all entries and only then search for entries to purge. This also fixes the fact that the cleanup task was running at every enumeration instead of running every "ldap_purge_cache_timeout" seconds.
2009-11-20	Add empty NL translation	Stephen Gallagher	4	-0/+654

2009-11-20	Validate Kerberos credentials with local keytab	Sumit Bose	16	-43/+326