summaryrefslogtreecommitdiff
path: root/Makefile.am
AgeCommit message (Collapse)AuthorFilesLines
2012-01-09util: add murmurhash3 hash functionSimo Sorce1-1/+3
2011-12-20PAM: make initgroups timeout work across multiple clientsStephen Gallagher1-0/+2
Instead of timing out the initgroups lookup on a per-cctx basis, we will maintain a hash table of recently-seen users and use this instead. This will allow SSSD to handle user's logging into multiple services simultaneously more graciously, as well as playing nicer with SSH (which makes calls to PAM both before and after a fork). https://fedorahosted.org/sssd/ticket/1063
2011-12-19Move child_common routines to utilStephen Gallagher1-7/+7
2011-12-19Add common SIGCHLD handling for providers.Pavel Zuna1-2/+9
2011-12-16SUDO Integration - pseudo client for testingPavel Březina1-0/+15
2011-12-16SUDO Integration - responderPavel Březina1-0/+17
2011-12-16SUDO integration - LDAP providerPavel Březina1-1/+3
2011-12-16SUDO Integration - LDAP provider - save sudo rules functionsJakub Hrozek1-0/+4
2011-12-16SUDO Integration - sysdb interfaceJakub Hrozek1-0/+4
2011-12-16SUDO integration - client common interfacePavel Březina1-0/+1
2011-12-16sss_utf8_tolower utility function+unit testsJakub Hrozek1-1/+2
2011-12-05Allow using Glib for UTF8 supportStephen Gallagher1-7/+12
2011-11-28Add -fno-strict-aliasingStephen Gallagher1-1/+2
2011-11-23Fix broken build due to commit of IPA netgroup supportStephen Gallagher1-0/+1
2011-11-23Added IPA account info handlerJan Zeleny1-0/+1
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider.
2011-11-23Added support for fetching netgroups in IPA providerJan Zeleny1-0/+1
2011-11-22Set more strict permissions on keyringSimo Sorce1-0/+1
We want to confine access to the keyring to the current process and not let root easily peek into the keyring contents.
2011-11-18RESPONDER: Ensure that all input strings are valid UTF-8Stephen Gallagher1-2/+4
2011-10-14BUILDSYS: Fix --without-manpagesStephen Gallagher1-1/+7
We weren't honoring the --without-manpages option, and this was causing builds to break. Note: 'make dist[check]' will not work if you have configured with --without-manpages because it will not be able to pre-generate the translation files necessary for tarball release.
2011-10-07SYSDB: New source file for sysdb upgrade routinesStephen Gallagher1-0/+1
2011-09-08Improve documentation of libipa_hbacStephen Gallagher1-0/+1
2011-09-06sss_debuglevel - change the debug levels on the flyPavel Březina1-1/+9
https://fedorahosted.org/sssd/ticket/950
2011-09-02Add option to specify the kerberos replay cache dirStephen Gallagher1-0/+4
Adds a configure option to set the distribution default as well as an sssd.conf option to override it. https://fedorahosted.org/sssd/ticket/980
2011-08-25New DEBUG facility - unit testsPavel Březina1-0/+11
https://fedorahosted.org/sssd/ticket/925
2011-08-15sdap_async_accounts.c splitJan Zeleny1-2/+6
The file has been split in three: sdap_async_users.c sdap_async_groups.c sdap_async_initgroups.c https://fedorahosted.org/sssd/ticket/864
2011-08-08Rename sssd.conf to sssd-example.confStephen Gallagher1-1/+1
This file should not be installed by default. It leads to user confusion. We will instead install it as documentation. Fix incorrect example of entry_cache_nowait_percentage
2011-08-01Add rule validator to libipa_hbacStephen Gallagher1-1/+1
https://fedorahosted.org/sssd/ticket/943
2011-07-29libipa_hbac: Support case-insensitive comparisons with UTF8Stephen Gallagher1-1/+2
2011-07-13Fix python HBAC bindings for python <= 2.4Jakub Hrozek1-1/+3
Several parts of the HBAC python bindings did not work with old Python versions, such as the one shipped in RHEL5. The changes include: * a compatibility wrapper around python set object * PyModule_AddIntMacro compat macro * Py_ssize_t compat definition * Do not use PyUnicode_FromFormat * several function prototypes and structures used to have "char arguments where they have "const char *" in recent versions. This caused compilation warnings this patch mitigates by using the discard_const hack on python 2.4
2011-07-08Provide python bindings for the HBAC evaluator libraryJakub Hrozek1-3/+18
2011-07-08Add new HBAC lookup and evaluation routinesStephen Gallagher1-1/+2
2011-07-08Add helper functions for looking up HBAC rule componentsStephen Gallagher1-0/+6
2011-07-08Add HBAC evaluator and testsStephen Gallagher1-1/+27
2011-06-15Add missing libsss_util to proxy providerSumit Bose1-0/+1
2011-05-23Build sssd utils as a libtool helper libraryStephen Gallagher1-88/+98
This will speed up the build, as we are not recompiling the same sources multiple times for different binaries. These objects will now be built once and then statically linked in.
2011-05-23Build SSSD plugins without a version numberStephen Gallagher1-5/+5
The version is both fake and unused, so we'll stop creating the versioned file and use only the unversioned .so. This is safe to do for now because all of the plugins are built at the same time as the interface.
2011-05-06Add support for openldap24 package on RHEL 5.7Sumit Bose1-2/+3
2011-05-04Cache cleaning toolJan Zeleny1-1/+9
2011-04-12Provide a configuration option to use systemd unit fileJakub Hrozek1-3/+12
https://fedorahosted.org/sssd/ticket/837
2011-02-11Make 'make check' look nice againSumit Bose1-3/+8
With current libldb releases 'make check' will print a lot of 'unable to dlopen' messages although the test will succeed. This patch place the memberof module into a directory of its own to avoid these messages. Additionally this patch introduces TESTS_ENVIRONMENT which allows us to remove the SYSDB_TEST preprocessor definition.
2011-02-11Fix module registration with newer LDB libraries.Stephen Gallagher1-0/+1
2010-12-23Build and install translated man pages by defaultSumit Bose1-3/+0
2010-12-22Make manual pages translatableJakub Hrozek1-37/+10
Utilizes PO4A to extract translatable strings from Docbook XML sources and allows translators to submit ordinary .PO files. PO4A then generates translated Docbook documents that can be used to generate translated end user documentation. https://fedorahosted.org/sssd/ticket/297
2010-12-20Serialize requests of the same user in the krb5 providerSumit Bose1-0/+2
2010-12-08Bye, bye, ipa_timerulesSumit Bose1-20/+0
It was decided that IPA HBAC will move to a different format to specify time ranges in access control rules. The evaluation based on the old format is not needed anymore.
2010-12-07Add support for FAST in krb5 providerSumit Bose1-0/+1
2010-12-06Make sure that sss_obfuscate installs as executableStephen Gallagher1-1/+1
2010-12-03Add support for automatic Kerberos ticket renewalSumit Bose1-0/+2
2010-12-03Add krb5_renewable_lifetime optionSumit Bose1-0/+1
2010-11-24Print correct error messages for dp_err_to_string()Stephen Gallagher1-1/+2
All errnum values passed into this function throughout the code are PAM error codes, but we were passing them through strerror() to print them, which is only meaningful for ERRNO error codes. This patch changes dp_err_to_string() to use pam_strerror() and renames it to dp_pam_err_to_string() for clarity. https://fedorahosted.org/sssd/ticket/636