Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2011-11-02 | Support to request canonicalization in LDAP/IPA provider | Jan Zeleny | 10 | -1/+45 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | Add support to request canonicalization on krb AS requests | Jan Zeleny | 10 | -6/+68 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | Add wrapper for krb5_get_init_creds_opt_set_canonicalize | Jan Zeleny | 3 | -0/+14 | |
2011-11-02 | Fixes debug-tests.c coverity issues: NEGATIVE_RETURNS, FORWARD_NULL | Pavel Březina | 1 | -49/+140 | |
https://fedorahosted.org/sssd/ticket/1046 | |||||
2011-11-02 | RESPONDER: Fix segfault in sss_packet_send() | Stephen Gallagher | 1 | -0/+5 | |
There are several places (all error-handling) where sss_cmd_done() is called with no response packet created. As a short-term solution, we need to check whether the packet is NULL and simply return EINVAL. client_send() (the consumer) will then forcibly disconnect the client (which will return PAM_SYSTEM_ERR to the client). | |||||
2011-11-02 | LDAP: Add support for multiple search bases for group enumeration | Stephen Gallagher | 4 | -24/+101 | |
2011-11-02 | LDAP: Add support for multiple search bases for user enumeration | Stephen Gallagher | 4 | -8/+49 | |
2011-11-02 | LDAP: Convert ldap_*_search_filter | Stephen Gallagher | 3 | -59/+23 | |
Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter. | |||||
2011-11-02 | LDAP: Update manpages with multiple search base information | Stephen Gallagher | 1 | -1/+56 | |
2011-11-02 | LDAP: Add multiple search bases for initgroups (RFC2307bis groups) | Stephen Gallagher | 1 | -77/+225 | |
2011-11-02 | LDAP: Add multiple search bases for initgroups (RFC2307 groups) | Stephen Gallagher | 1 | -17/+99 | |
2011-11-02 | LDAP: Add multiple search bases for initgroups (users) | Stephen Gallagher | 1 | -30/+72 | |
2011-11-02 | LDAP: Support multiple group search bases (non-enumeration, RFC2307) | Stephen Gallagher | 4 | -16/+74 | |
2011-11-02 | LDAP: Support multiple netgroup search bases | Stephen Gallagher | 3 | -14/+65 | |
2011-11-02 | LDAP: Support multiple user search bases (non-enumeration) | Stephen Gallagher | 4 | -14/+70 | |
2011-11-02 | LDAP: Add parser for multiple search bases | Stephen Gallagher | 5 | -26/+380 | |
2011-11-02 | Make sdap_get_id_specific_filter() more strict | Stephen Gallagher | 2 | -4/+4 | |
2011-11-02 | Fix size return for split_on_separator() | Stephen Gallagher | 2 | -6/+6 | |
It was returning the size of the array, rather than the number of elements. (The array was NULL-terminated). This argument was only used in one place that was actually working around this odd return value. | |||||
2011-11-02 | Remove unused sdap_options attributes | Stephen Gallagher | 1 | -3/+0 | |
These DNs were never assigned or referenced anywhere. | |||||
2011-11-02 | Cleanup of unused function in ldap access provider | Jan Zeleny | 1 | -2/+0 | |
2011-11-02 | Remove confusing do-while loop | Jakub Hrozek | 1 | -35/+36 | |
The deref processing would return a single control back. The do-while loop was harmless but confusing. | |||||
2011-11-02 | Use LDAPDerefSpec properly | Jakub Hrozek | 1 | -4/+6 | |
ldap_create_deref_control_value expects an array of LDAPDerefSpec structures with LDAPDerefSpec.derefAttr == NULL as a sentinel. We were passing a single instance of a LDAPDerefSpec structure. https://fedorahosted.org/sssd/ticket/1050 | |||||
2011-10-31 | Steal result onto mem_ctx in sdap_initgr_nested_get_direct_parents | Jakub Hrozek | 1 | -2/+1 | |
2011-10-31 | RFC2307bis initgroups: fix nested groups processing | Jakub Hrozek | 1 | -20/+33 | |
Due to incorrectly written loop, SSSD would go into infitite loop if it processed the same group on two different levels of membership. | |||||
2011-10-31 | resolver: Free the whole hostent structure | Jakub Hrozek | 1 | -1/+1 | |
We would only free the hostent structure itself, not its contents. Use a wrapper provided by c-ares to do so. | |||||
2011-10-31 | Do not leak hash table iterator during proxy auth | Jakub Hrozek | 1 | -0/+1 | |
2011-10-31 | Plug memory leaks in sysdb_ops | Jakub Hrozek | 1 | -20/+54 | |
https://fedorahosted.org/sssd/ticket/1051 | |||||
2011-10-31 | Added krb5_fast_principal to SSSDConfig API | Jan Zeleny | 4 | -3/+9 | |
2011-10-25 | SSSDConfig: Handle integer parsing more leniently | Stephen Gallagher | 2 | -1/+4 | |
Allow the base to be auto-detected rather than limited to base 10 Add hexadecimal integer test | |||||
2011-10-25 | Plug memory leaks in LDAP provider | Jakub Hrozek | 1 | -0/+3 | |
2011-10-18 | Updating translation files | Stephen Gallagher | 72 | -5716/+178926 | |
2011-10-17 | Cancel transactions correctly during initgroups | Jakub Hrozek | 1 | -13/+31 | |
2011-10-17 | Use fewer transactions during IPA initgroups | Jakub Hrozek | 1 | -171/+273 | |
2011-10-17 | Use fewer transactions during RFC2307bis initgroups | Jakub Hrozek | 1 | -346/+366 | |
2011-10-17 | Utility functions for LDAP nested schema initgroups | Jakub Hrozek | 1 | -0/+119 | |
2011-10-17 | MONITOR: fix timeout conversion | Stephen Gallagher | 1 | -1/+1 | |
2011-10-17 | gitignore additions | Jakub Hrozek | 1 | -1/+20 | |
2011-10-17 | Sanitize DN in sysdb_get_direct_parents | Jakub Hrozek | 1 | -1/+7 | |
2011-10-17 | Add a missing break | Jakub Hrozek | 1 | -0/+1 | |
2011-10-14 | Update sssd-example.conf | Marko Myllynen | 1 | -3/+6 | |
Mention cache_credentials and tweak the AD example to match the wiki page. https://fedorahosted.org/sssd/wiki/Configuring%20sssd%20to%20authenticate%20with%20a%20Windows%202008%20Domain%20Server | |||||
2011-10-14 | TOOLS: Do not leak pid_file handle on error | Stephen Gallagher | 1 | -1/+2 | |
Coverity 11032 | |||||
2011-10-14 | Report on errno, not return code in create_socket_symlink | Jakub Hrozek | 1 | -0/+2 | |
https://fedorahosted.org/sssd/ticket/1044 | |||||
2011-10-14 | Fix off-by-one error in remove_socket_symlink() | Jakub Hrozek | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1043 | |||||
2011-10-14 | Fixed timeout handling in responders | Jan Zeleny | 1 | -72/+72 | |
2011-10-14 | BUILDSYS: Fix --without-manpages | Stephen Gallagher | 2 | -1/+8 | |
We weren't honoring the --without-manpages option, and this was causing builds to break. Note: 'make dist[check]' will not work if you have configured with --without-manpages because it will not be able to pre-generate the translation files necessary for tarball release. | |||||
2011-10-14 | HBAC: Use originalMember for identifying hostgroups | Stephen Gallagher | 3 | -45/+165 | |
2011-10-14 | HBAC: Use originalMember for identifying servicegroups | Stephen Gallagher | 3 | -41/+169 | |
2011-10-14 | HBAC: Do not save member/memberOf links | Stephen Gallagher | 1 | -120/+0 | |
We can just trust the values from the FreeIPA server | |||||
2011-10-13 | SysDB commands that save lastUpdate allows this value to be passed in | Pavel Březina | 11 | -77/+130 | |
https://fedorahosted.org/sssd/ticket/836 | |||||
2011-10-13 | Check if dp_requests hash table exists before using it | Jakub Hrozek | 1 | -0/+5 | |