Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-10-04 | Log possibly non-randomizable ccache file template | Ondrej Kos | 4 | -6/+26 | |
fixes https://fedorahosted.org/sssd/ticket/1533 ccache file template is now checked for appended XXXXXX for use with mkstemp. When those characters are not present, warning is written to log. | |||||
2012-10-04 | Check for existing pidfile before starting the providers | Jakub Hrozek | 1 | -17/+15 | |
After we switched to writing pidfile after the responders started, we forgot that starting a second SSSD instance would first overwrite the pipes and sockets and only then the SSSD would find out there already is a pidfile. This patch checks for existing pidfile before proceeding with startup. | |||||
2012-10-04 | Remove unused variable | Jakub Hrozek | 1 | -6/+0 | |
2012-10-04 | Change the log level of two DEBUG messages in check_domain_ranges | Jakub Hrozek | 1 | -4/+5 | |
https://fedorahosted.org/sssd/ticket/1562 | |||||
2012-10-03 | Note that Range Retrieval is not supported when filter is used in the search ↵ | Jakub Hrozek | 2 | -2/+14 | |
base. https://fedorahosted.org/sssd/ticket/1471 | |||||
2012-10-03 | Variable in sdap_sudo_rules_refresh_send could be used, uninitialized. | Michal Zidek | 1 | -0/+1 | |
2012-10-03 | sss_seed: Improved error message when the domain does not exist. | Michal Zidek | 1 | -2/+5 | |
https://fedorahosted.org/sssd/ticket/1553 | |||||
2012-10-03 | sss_seed: Passwords longer then PASS_MAX not allowed. | Michal Zidek | 2 | -1/+20 | |
sss_seed fails if password file specified with -p or --password-file option contains password longer than PASS_MAX. Man pages inform about PASS_MAX limitation. | |||||
2012-10-03 | sss_seed: Make only first line of password file valid. | Michal Zidek | 1 | -0/+36 | |
When file is used to specify a password in sss_seed, then only first line of this file is used. Also empty passwords are treated as errors. https://fedorahosted.org/sssd/ticket/1548 | |||||
2012-10-03 | sss_seed: Show error message when interactive input fails. | Michal Zidek | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1549 | |||||
2012-10-03 | sss_seed: Option --debug did not work in sss_seed tool. | Michal Zidek | 1 | -4/+4 | |
debug_level was set before the parameters were parsed, so the default debug_level value was always used. Also CHECK_ROOT macro was used on bad place, so only root was able to run sss_seed --help/-?. | |||||
2012-10-02 | Include param_help_py.xml in the list of po4a sources | Jakub Hrozek | 1 | -0/+1 | |
2012-10-02 | Flip the default value of ldap_initgroups_use_matching_rule_in_chain | Jakub Hrozek | 3 | -4/+4 | |
https://fedorahosted.org/sssd/ticket/1535 | |||||
2012-10-02 | Add man page section about provider specific re_expression | Sumit Bose | 1 | -8/+33 | |
Fixes: https://fedorahosted.org/sssd/ticket/1525 | |||||
2012-10-02 | remove left over principal selection | Pavel Březina | 3 | -127/+0 | |
https://fedorahosted.org/sssd/ticket/1303 Domain start up was taking too long when there are many principals in a kerberos keytab. We were looking up in the keytab two times. The first time we try to select a proper principal and remember it. The second call happens almost right after the first one and it is just a check if the principal exists in the keytab, without any output information other than success/failure. It is probably a left over from https://fedorahosted.org/sssd/ticket/781. This patch removes the second call. | |||||
2012-10-02 | monitor: create pid file after all responders are started | Pavel Březina | 2 | -4/+37 | |
https://fedorahosted.org/sssd/ticket/1357 | |||||
2012-10-02 | Fix few coding style issues | Pavel Březina | 2 | -4/+7 | |
2012-10-01 | sudo and autofs search bases should not be marked experimental | Jakub Hrozek | 1 | -2/+2 | |
https://fedorahosted.org/sssd/ticket/1541 | |||||
2012-10-01 | Change option to display help message in man pages. | Michal Zidek | 3 | -2/+12 | |
POPT_AUTOHELP generates -? and --help options and not -h to display help message. https://fedorahosted.org/sssd/ticket/1546 | |||||
2012-10-01 | Document ldap_chpass_update_last_change | Jakub Hrozek | 3 | -0/+17 | |
Add the option to the manual page and the configAPI https://fedorahosted.org/sssd/ticket/1494 | |||||
2012-10-01 | sysdb_master_domain_get_info: fix copy-and-paste error | Sumit Bose | 1 | -2/+2 | |
2012-10-01 | Use flat name for master domain as well | Sumit Bose | 3 | -2/+20 | |
2012-10-01 | Add new option default_domain_suffix | Sumit Bose | 16 | -35/+137 | |
2012-10-01 | BUILD: Include the patch file in the tarball | Stephen Gallagher | 1 | -0/+1 | |
2012-09-26 | sssd-ldap manpage: ldap_scheme formatting | Ondrej Kos | 1 | -6/+26 | |
fixes https://fedorahosted.org/sssd/ticket/1483 ldap schemes now displayed as bullet list | |||||
2012-09-26 | LDAP: Handle empty namingContexts values safely | Stephen Gallagher | 1 | -0/+8 | |
Certain LDAP servers can return an empty string as the value of namingContexts. We need to treat these as NULL so that we can fail gracefully. https://fedorahosted.org/sssd/ticket/1542 | |||||
2012-09-24 | Bumping the version to 1.9.1 release | Jakub Hrozek | 1 | -1/+1 | |
2012-09-24 | Updating translations for the 1.9.0 release | Jakub Hrozek | 32 | -4701/+4837 | |
2012-09-24 | Set the version number to 1.9.0 for the release | Jakub Hrozek | 1 | -1/+1 | |
2012-09-24 | RPM: Create ghost files during install | Jakub Hrozek | 1 | -0/+5 | |
2012-09-24 | Detect LDAPDerefRes in configure script | Jakub Hrozek | 1 | -1/+9 | |
https://fedorahosted.org/sssd/ticket/1317 | |||||
2012-09-24 | KRB5: Recover gracefully if the ccache file could not be reused | Jakub Hrozek | 1 | -4/+6 | |
https://fedorahosted.org/sssd/ticket/1384 | |||||
2012-09-24 | Bad debug message when no dns_discovery_domain specified. | Michal Zidek | 1 | -3/+11 | |
https://fedorahosted.org/sssd/ticket/920 | |||||
2012-09-24 | DB: Use TALLOC_CTX for talloc context | Jakub Hrozek | 1 | -10/+10 | |
A couple of sysdb functions used "void *" in place of a TALLOC_CTX. | |||||
2012-09-24 | SYSDB: Remove unnecessary domain parameter from several sysdb calls | Jakub Hrozek | 15 | -115/+79 | |
The domain can be read from the sysdb object. Removing the domain string makes the API more self-contained. | |||||
2012-09-24 | AUTOFS: convert the existing autofs entries during a sysdb upgrade | Jakub Hrozek | 3 | -1/+144 | |
2012-09-24 | AUTOFS: Use both key and value in entry RDN | Jakub Hrozek | 4 | -14/+51 | |
This patch switches from using just key in the RDN to using both key and value. That is neccessary to allow multiple direct mounts in a single map. | |||||
2012-09-24 | AUTOFS: Add entry objects below map objects | Jakub Hrozek | 6 | -220/+172 | |
https://fedorahosted.org/sssd/ticket/1506 Changes how the new autofs entry objects are handled. Instead of creating the entry on the cn=autofs,cn=custom level, the entry is created below the map it belongs to. | |||||
2012-09-24 | AUTOFS: Add sysdb tests | Jakub Hrozek | 1 | -0/+249 | |
2012-09-24 | AUTOFS: Do not fail if search base is not provided | Jakub Hrozek | 1 | -2/+2 | |
2012-09-24 | AD: Handle sysdb lookup failure during tokenGroups processing | Stephen Gallagher | 1 | -0/+6 | |
2012-09-24 | Make subdomain discovery less noisy | Sumit Bose | 1 | -15/+16 | |
Fixes https://fedorahosted.org/sssd/ticket/1517 | |||||
2012-09-24 | autofs, sudo, ssh and PAC are not experimental anymore | Jakub Hrozek | 7 | -76/+10 | |
2012-09-24 | sdap_add_incomplete_groups(): fix ret may be uninitialized warning | Pavel Březina | 1 | -1/+1 | |
2012-09-24 | AD: Optimize initgroups lookups with tokenGroups | Stephen Gallagher | 3 | -4/+313 | |
https://fedorahosted.org/sssd/ticket/1355 | |||||
2012-09-24 | AD: Detect domain controller compatibility version | Stephen Gallagher | 3 | -0/+44 | |
2012-09-24 | sss_cache tool invalidates records in memory cache. | Michal Zidek | 7 | -3/+166 | |
2012-09-24 | tools_util.h provides signal_sssd function. | Michal Zidek | 3 | -99/+99 | |
2012-09-24 | Mark the fastcache files in the spec file as %ghost | Jakub Hrozek | 1 | -0/+2 | |
https://fedorahosted.org/sssd/ticket/1487 | |||||
2012-09-24 | AD: autorid compatibility should recommend the use of default domain | Stephen Gallagher | 1 | -4/+4 | |
Previously, we were failing to start if ldap_idmap_autorid_compat was True but the default domain SID was unspecified. This is the recommended configuration, but it is functional without it. There is just a slight risk that the IDs will be inconsistent between machines if the first user requested is not from the default domain. https://fedorahosted.org/sssd/ticket/1530 |