summaryrefslogtreecommitdiff
path: root/server/confdb/confdb.c
AgeCommit message (Collapse)AuthorFilesLines
2009-12-17Change default for enumeration to TRUEStephen Gallagher1-1/+1
2009-12-10Consolidate code for splitting strings by separatorJakub Hrozek1-105/+1
There were two functions for parsing strings by a separator. This patch consolidates on the one previously used in confdb. This also allows stripping the tokens of whitespace. Fixes: #319
2009-12-09Properly deny id_provider=filesStephen Gallagher1-0/+7
2009-10-16Do not allow setting auth, access or chpass providers for LOCALStephen Gallagher1-0/+33
The LOCAL provider does not have a mechanism to load alternate auth, access or chpass backends, nor does it make sense to do so. This will throw a configuration error if these values are specified (unless they are explicitly also set to 'local')
2009-10-09Remove magicPrivateGroups optionSimo Sorce1-12/+0
In sssd only local is a native mpg domain, and it is forced. All other providers will have to unroll mpg users into a user/group pair of entries in the db. This allows the provider to automatically establish if the remote server provides mpg users w/o possibily conflicting manual configurations on the client trying to force an mpg behavior where none is provided.
2009-10-06Remove unused btreemap codeStephen Gallagher1-1/+0
We have converted to using dhash in place of btreemap everywhere in the code.
2009-09-25Upgrade confdb to version 2Stephen Gallagher1-31/+21
This converts a great many configuration options to the new standard format.
2009-09-23Revert "Use syslog for logging error conditions in SSSD"Stephen Gallagher1-23/+23
This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
2009-09-21Several fixes and enhancements for config file processingStephen Gallagher1-15/+78
1) Add get_entry_as_bool function 2) Make all parameters in confdb_get_domain_internal() use macro names for the attributes. This will make it easer to convert them to the version 2 config file.
2009-09-21Use syslog for logging error conditions in SSSDJakub Hrozek1-18/+18
This is just a band-aid until ELAPI is fully functional and ready to use.
2009-09-11Print error message when connection to the config db failsStephen Gallagher1-0/+2
2009-09-11Complete the removal of "legacy" option.Simo Sorce1-5/+0
The code was still dependent on it for the ldap driver. Changed the driver code to depend on the schema type. Fix defaults for user and groups trees. ATM if you use the rfc2307bis schema you have to put users and groups in 2 separate trees (what people does by default anyway. If this limitation will turn to be too hard, we will change this later.
2009-09-10Remove unused event context argument from confdb_initStephen Gallagher1-1/+0
Because the confdb always operates synchronously, it maintains its own private event context internally. The event context argument passed to it is never used, so we'll remove it to avoid confusion.
2009-09-10Properly detect negative/invalid values for the minId and maxIdStephen Gallagher1-6/+53
2009-09-10Check for valid min and max IDs in confdb_get_domainsStephen Gallagher1-1/+7
2009-09-08Split database in multiple filesSimo Sorce1-13/+39
The special persistent local database retains the original name. All other backends now have their own cache-NAME.ldb file.
2009-09-01stop processing a domain if no provider is givenSumit Bose1-0/+1
2009-08-31Turn enumeration into a boolean valueSimo Sorce1-4/+17
2009-08-21Fix accidentally forcing MPGs on for all domainsStephen Gallagher1-1/+1
2009-08-20Make the LOCAL provider always use MagicPrivateGroupsStephen Gallagher1-1/+2
Also updates the manpage for sssd.conf to denote this
2009-08-18fix return value of confdb_get_domainsSumit Bose1-0/+1
If the last configured domain is broken confdb_get_domains returns the return value of confdb_get_domain even if there are valid domains available.
2009-06-19Fix segfault in update_monitor_configStephen Gallagher1-0/+4
We were stealing the memory context of only the first value in the linked-list of domains (and also services). This patch adds a memory context to hold the lists so that can be stolen along with all of the entries.
2009-06-08Treat a missing provider entry as a config errorStephen Gallagher1-2/+7
2009-06-01Suppress "rootdse" error messages from the confdbStephen Gallagher1-3/+4
2009-05-28Suppress "rootdse" error messages.Stephen Gallagher1-0/+6
We will trap all LDB debug messages and pipe them into our internal DEBUG() function. LDB FATAL messages will still be printed by default, WARNING and TRACE functions will be at debug level 3 and 9, respectively.
2009-05-26Silence warningsSimo Sorce1-2/+2
2009-05-12Fix warnings in monitor.c and confdb.cStephen Gallagher1-1/+1
2009-05-11Separate confdb API from confdb setupStephen Gallagher1-348/+3
Refactoring the confdb so that the setup code can be linked separately from the access API. This is being done so that our plugins do not need to link against the collection and ini_config libraries.
2009-05-04Fixes for porting SSSD to Debian-based platformsStephen Gallagher1-1/+0
2009-04-16Avoid unnecessary reloads of config.ldbSimo Sorce1-4/+37
Add code to check if the file has changed since the last update was performed. Avoid dumping and reloading the config ldb if the modification time of the configuration file has not changed at all.
2009-04-14Add common function to retrieve comma sep. listsSimo Sorce1-45/+158
Also convert all places where we were using custom code to parse config arguments. And fix a copy&paste error in nss_get_config
2009-04-13Always pass full domain infoSimo Sorce1-73/+107
Change sysdb to always passwd sss_domain_info, not just the domain name. This way domain specific options can always be honored at the db level.
2009-04-13Allow configuration of the SSSD through /etc/sssd/sssd.confStephen Gallagher1-58/+256
The SSSD now links with the ini_config and collection libraries in the common directory. The monitor will track changes to the /etc/sssd/sssd.conf file using inotify on platforms that support it, or polled every 5 seconds on platforms that do not. At startup or modification of the conf file, the monitor will purge the existing confdb and reread it completely from the conf file, to ensure that there are no lingering entries. It does this in a transaction, so there should be no race condition with the client services. A new option has been added to the startup options for the SSSD. It is now possible to specify an alternate config file with the -c <file> at the command line.
2009-04-08Change the way we retrieve domainsSimo Sorce1-72/+72
To be able to correctly filter out duplicate names when multiple non-fully qualified domains are in use we need to be able to specify the domains order. This is now accomplished by the configuration paramets 'domains' in the config/domains entry. 'domains' is a comma separated list of domain names. This paramter allows also to have disbaled domains in the configuration without requiring to completely delete them. The domains list is now kept in a linked list of sss_domain_info objects. The first domain is also the "default" domain.
2009-03-30fixed two issues in the initial configurationSumit Bose1-1/+1
- value array is not terminated properly - infopipe service is added dynamically
2009-03-20Simplify default configurationSimo Sorce1-111/+35
Make confdb load a base ldif like sysdb to initialize the db, makes it simpler to understand at first sight what is the default configuration. Make the parameter "command" optional. Derive the default command from available information. Make the debug level a global by default so that enabling debug for all components is as easy as passing just -d X to the sssd binary.
2009-03-20Add better error reporting to confdb functionsSimo Sorce1-29/+63
2009-03-20Avoid nested events in confdbSimo Sorce1-1/+15
2009-03-18Enable MPGs and user/group enumeration on the LOCAL domain by defaultStephen Gallagher1-3/+5
2009-03-09use fixed paths to sockets to make sure clients and server are using the sameSumit Bose1-0/+4
2009-03-09Make MPG a configurable option for the domain.Simo Sorce1-0/+11
2009-03-08Use LOCAL for the default domain in confdb_init_dbStephen Gallagher1-0/+4
2009-03-06added PAM default configuration to confdb_init_dbSumit Bose1-6/+35
set default value of enumerate in LOCAL domain to 1 added checks to talloc_asprintf return values fixed InfoPipe defaults
2009-03-04Add internal min/max/next id management fucntionsSimo Sorce1-1/+43
Retrieve minID and maxID from domain configuration so that lower and upper bounds can be set per domain. Add function that keeps track of the next available id, increments and returns it on requests, avoiding collisions with existing ids.
2009-03-02Implement GetUserAttributes in the InfoPipeStephen Gallagher1-2/+2
This patch adds support for requesting user data in the sysdb via the InfoPipe. It currently has support for reading defined entries of integral, floating-point or string types. Tasks remaining: 1) Implement call to the provider when cache is out of date 2) Support byte arrays for userpic and similar I modified sysdb_search_ctx in sysdb_search.c to accept an array of attributes to pass into the LDB search. I also made one additional related fix: the btreemap now sorts in the correct order. Previously I had accidentally transposed the two values for sorting, so the map would always have been in exact reverse order.
2009-02-28Fix confdb issues.Simo Sorce1-91/+52
Avoid uninitialized memory messages in valgrind (in _btreemap_get_keys). Do not free memory we just stored in the btree (in confdb_get_domains_list). Streamline confdb_get_domains() and remove extra calls when we already have all the information handy. Do not store basedn in domain info, the base dn is always calculated out of the domain name. Remove the "provider" attribute, it was really used only to distinguish between LOCAL and other domains, directly check for LOCAL as a special case instead.
2009-02-27Refactor creation of domain_map into confdbStephen Gallagher1-20/+117
The NSS provider, the Data Provider backends and the InfoPipe all need access to the domain map provided by the confdb. Instead of reimplimenting it in multiple places, it is now provided in a pair of helper functions from the confdb. confdb_get_domains() returns a domain map by reference. Always returns the most up-to-date set of domains from the confdb. confdb_get_domains_list() returns an array of strings of all the domain names. Always returns the most up-to-date set of domains from the confdb. This patch also modifies the btreemap_get_keys() function to better handle memory and report allocation failures.
2009-02-26Rebase the code to use talloc, tdb, tevent, ldb as externalSimo Sorce1-4/+1
dependencies based on the latest samba code. Convert all references to the old events library to use the renamed tevent library.
2009-02-24Spec file patch Take 2:Stephen Gallagher1-0/+4
Adding support for generating RPMS for sssd. Fixing TDB autoconf macros to require version 1.1.3 and support for the tdb_repack symbol (required by LDB) Updating tdb.h to #include <sys/stat.h> for proper autoconf Build system modifications to simplify RPM generation Fixing RPM build system as recommended during code review Minor tweaks to Makefile and sssd.spec Make policykit and infopipe configurable Soname and symlinks
2009-02-20Add helper function to get booleans from confdbSimo Sorce1-9/+42