summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-09-23Revert "Use syslog for logging error conditions in SSSD"Stephen Gallagher29-460/+403
This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
2009-09-22Make configure script compatible with older python versionsStephen Gallagher1-7/+16
Older python versions (such as that used in RHEL5) do not have a python-config executable to report CFLAGS and LIBS. In order to support such versions of python, we will duplicate the logic that python-config would have performed directly in our configure script
2009-09-21ELAPI: Ticket 161: Initialize structures with calloc instead of enumerating ↵Jakub Hrozek5-36/+6
members
2009-09-21Several fixes and enhancements for config file processingStephen Gallagher1-15/+78
1) Add get_entry_as_bool function 2) Make all parameters in confdb_get_domain_internal() use macro names for the attributes. This will make it easer to convert them to the version 2 config file.
2009-09-21ELAPI: fix varargs call, update unit testsJakub Hrozek3-8/+58
2009-09-21Use syslog for logging error conditions in SSSDJakub Hrozek29-398/+455
This is just a band-aid until ELAPI is fully functional and ready to use.
2009-09-21Provide python bindings for sysdbJakub Hrozek9-1/+1540
Implement a set of python bindings for the sysdb with feature set similar to what is available in the tools. The primary consumers would be applications like system-config-users. Resolves: Ticket #102
2009-09-21Decouple synchronous sysdb interface from toolsJakub Hrozek11-1020/+1845
Instead of working directly with async code in tools, create synchronous wrappers that could be used by tools and python bindings. Also resolves many issues with code duplication in tools and thus fixes ticket #87
2009-09-21Refactor tools codeJakub Hrozek8-268/+244
Move parameter parsing in tools before attempting to do anything that might fail - so that we have debug_level set correctly for potential error messages. That allows printing the --help and --usage messages without being root. Fix code duplicates in tools and refactor its code a little to lay ground for decoupling the synchronous interfaces. Remove some legacy tools leftovers, re-add sensible error message on removing nonexistent users/groups which was removed by accident. Fixes: Trac ticket #75 Fix typo in groupdel: fixes ticket #136
2009-09-18Include groupSearchBase in sssd-ldap(5) manpageStephen Gallagher1-1/+11
2009-09-18Add missing reference to sssd-ldap(5) in sssd.conf(5) manpageStephen Gallagher1-0/+3
2009-09-18Add documentation for installing build dependenciesJeff Schroeder1-1/+8
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2009-09-18Add binaries and backup files to .gitignoreJakub Hrozek1-0/+14
2009-09-17Better handle groups w/o membersSimo Sorce1-6/+122
There was a chance that groups w/o members could end up causing a failure to store the group. This would happen in case the structure used by glibc to fill up the group data was "dirty". Always memset structures before passing them to te libc and also check if there are any members, before calling the async function. Finally add some tracing at level 7 so that it is easier to follow what is going on in case of touble.
2009-09-17Fix copy&paste error.Simo Sorce1-4/+4
2009-09-16Add missing updates to LINGUAS for pl translationStephen Gallagher2-0/+2
2009-09-16Add pl translationPiotr Drąg2-0/+291
2009-09-16ELAPI: Fix dispatcher structure initializationJakub Hrozek1-10/+1
2009-09-16Check if SSL/TLS handler is already in placeSumit Bose1-1/+8
Authentication against a LDAP server should always use an encrypted connection. To acchive this the LDAP provider calls ldap_start_tls which will fail if the connection is already encrypted, e.g. if an ldaps tunnel is already established. Because the error message from ldap_start_tls is not specific we check the status with ldap_tls_inplace before calling ldap_start_tls.
2009-09-15Add PRERELEASE_VERSION variable for use in sssd.spec.inStephen Gallagher2-1/+11
This will add a second, optional line to the VERSION file that will be used by the automated build scripts to create snapshot versions.
2009-09-15Allow rerunning autoreconf from the tarballStephen Gallagher2-0/+4
We were missing two files from the tarball distribution that prevented autoreconf from running successfully: VERSION and replace/autoconf-2.60.m4
2009-09-15Include m4 directories in tarballStephen Gallagher10-7/+25
Necessary for RPM builds on RHEL5
2009-09-15INI Error handling and interface cleanupDmitri Pal2-30/+86
Inspired by issue #173 I reviewed the other function of the interface and found a lot of problems with its error handling. Also made INI use collection public interfaces.
2009-09-14added child timeout handlerSumit Bose3-6/+104
2009-09-14fix the wrong usage of an offsetSumit Bose1-1/+1
2009-09-14add krb5ccache_dir and krb5ccname_template optionSumit Bose9-60/+713
The configuration options krb5ccache_dir and krb5ccname_template are added to the Kerberos provider to create the user's credential caches the same way as pam_krb5 does. Due to the design of the sssd and the supported ccache types of MIT Kerberos only files are allowed.
2009-09-14make cli_pid mandatory and increase version number of pam protocolSumit Bose3-4/+28
2009-09-14remove unused client locale from PAM protocolSumit Bose1-19/+0
2009-09-14Let the PAM client send its PIDSumit Bose5-14/+63
- the client sends the PID as uint32_t and sssd will use uint32_t too - fix a possible type issue where a uint32_t is sent as int32 in internal dbus communication
2009-09-14Turn ldap driver options into multitypeSimo Sorce6-194/+376
This patch makes basic options multiype, the init function assigns a type from the initialization array, and processes values fetched from confdb accordingly. 4 types are supported so far: string, number, blob and boolean Also convert defines into enums where appropriate. Add fetch functions that check the requested type.
2009-09-14Make the offline status backend-globalSimo Sorce6-215/+94
Add helpers functions to query/set the offline status per backend. Now all providers share the same offline status.
2009-09-11Exit if the sssd is launched as a user other than rootStephen Gallagher1-0/+9
2009-09-11Print error message when connection to the config db failsStephen Gallagher1-0/+2
2009-09-11use fork+exec for kerberos helperSumit Bose5-195/+477
2009-09-11add change password target to krb5 backendSumit Bose6-209/+464
2009-09-11Update documentation and examplesSimo Sorce3-18/+31
Remove the "legacy" option from examples and man pages. Legacy is is finally R.I.P Add docs for ldapSchema in sssd-ldap man page.
2009-09-11Complete the removal of "legacy" option.Simo Sorce10-76/+243
The code was still dependent on it for the ldap driver. Changed the driver code to depend on the schema type. Fix defaults for user and groups trees. ATM if you use the rfc2307bis schema you have to put users and groups in 2 separate trees (what people does by default anyway. If this limitation will turn to be too hard, we will change this later.
2009-09-11Fix getgrnam and getgrgid callsSimo Sorce1-7/+9
The patch that added check_cache() broke them, no results returned for any group with actual members ...
2009-09-11Add strtoint32 and strtouint32 testsStephen Gallagher2-0/+465
2009-09-11Add 'make tests' targetStephen Gallagher12-0/+33
2009-09-11Fix ldap enumeration async taskSimo Sorce1-12/+16
The request was being freed, instead of marking it done and let the callback free it when done. This was causing us to access freed memory, when trying to set the next run. Let the callback add new runs and free the request instead as normally we would do with any other tevent_req async call. Courtesy of valgrind again.
2009-09-11Fix memory mishandling.Simo Sorce1-10/+7
By attaching the reply to a subreq, we ended up freeing the operations list element before we used it to skip to the next one. Do not steal the context and let the unlocking code free the old reply, when it moves onto processing the next one. Got this one with valgrind.
2009-09-11Fix first-time confdb generationStephen Gallagher1-1/+1
We were talloc_free()-ing the cdb_file string too early.
2009-09-11ELAPI Better separation from collection internals.Dmitri Pal1-20/+24
This patch eliminates the need to include collection's private header and uses only public interface.
2009-09-11COLLECTION Functions to deal with hashDmitri Pal3-17/+71
The hashing logic was internal to the collection item. But if someone wants to effectively deal with the items and compare the property to a string he should compare hashes first. But it was not possible without the provided functions. As a result some of the ELAPI modules had to take advantage of knowledge of the item structure. This is bad. So this patch lays foundation for refactoring of the ELAPI code that was using internals of the item directly (file_util.c mostly). Also patch adds a unit test that was required for testing new functionality and for ticket #83
2009-09-11Add copyright noticesJakub Hrozek16-0/+328
Fixes: #138
2009-09-11Small changes to the example config and manpageJakub Hrozek2-18/+29
Remove magicPrivateGroups since it's set automatically, use bool values for enumerate. Also add a notice about krb5 auth-module with a link to specialized manpage to sssd.conf(5) similar to what we have for ldap auth-module. Move both outside proxy domain description.
2009-09-10Read the configuration parsing before daemonizationStephen Gallagher2-83/+106
We will now parse the config file and validate the confdb contents before processing the rest of the monitor startup. This will allow us to return an appropriate error code to the shell if the configuration is invalid.
2009-09-10Remove unused event context argument from confdb_initStephen Gallagher6-7/+5
Because the confdb always operates synchronously, it maintains its own private event context internally. The event context argument passed to it is never used, so we'll remove it to avoid confusion.
2009-09-10Properly detect negative/invalid values for the minId and maxIdStephen Gallagher1-6/+53
generated by cgit (git 2.34.1) at 2024-07-20 21:45:16 +0000