sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2009-03-06	Add userspace tools to manipulate accounts.	Simo Sorce	1	-0/+2
	The first functional command is sss_useradd (Name is temporary, while looking for a better one)
2009-03-04	Add internal min/max/next id management fucntions	Simo Sorce	1	-0/+6
	Retrieve minID and maxID from domain configuration so that lower and upper bounds can be set per domain. Add function that keeps track of the next available id, increments and returns it on requests, avoiding collisions with existing ids.
2009-03-04	Improve sysdb	Simo Sorce	1	-0/+36
	Add comments in header files to better explain interfaces and intended usage. Expose function to convert from ldb errors to errnos. Add sysdb_attrs helper to add a long integer as a value.
2009-03-03	Provide sysdb_set_user_attr() functions.	Simo Sorce	1	-0/+75
	Provide also helper functions to build struct sysdb_attrs. Also fix sysdb_get_user_attr() to have a consistent interface as all other functions.
2009-02-28	Expose some more functions needed by the tests	Simo Sorce	1	-0/+4

2009-02-28	Convert sync calls in sysdb to async, transaction dependent, calls.	Simo Sorce	1	-0/+13

2009-02-26	Serialize access to sysdb and also exposes ldb transactions.	Simo Sorce	1	-736/+9
	This is necessary because in ldb only 1 transaction per context is possible and all operations (or new transactions) are nested within it. Will revisit this later when ldb will addresses the problem.
2009-02-26	Rebase the code to use talloc, tdb, tevent, ldb as external	Simo Sorce	1	-8/+8
	dependencies based on the latest samba code. Convert all references to the old events library to use the renamed tevent library.
2009-02-20	Reorganize sysdb a bit,	Simo Sorce	1	-930/+154
	rename _posix_ function into _legacy_ Add support for the posix legacy mode where memberships are stored in memberUId and not in member/memberof pairs. Do not build sysdb as a library
2009-02-20	Completely rework the nss interface to be able to use 2	Simo Sorce	1	-2/+2
	types of domains: modern and legacy modern uses member/meberof, legacy uses memberUid for group memberships. Rework the proxy backend to use the legacy style as that's the format the data comes in (trying to convert would require too many transformations and increased the number of queries). Add support for fetching groups in nss. Add support for enumerating users and groups (requires to enable enumeration in config) both in nss and in the proxy provider. Remove confdb_get_domain_basedn() and substitute with generic calls in the nss init function. Store a domain structure in the btree not the basedn so that we can add enumeration flags. Also make sure NSS understand how to make multiple calls on enumerations, also make passing the domian parameter always mandatory, passing in domain=* is not valid anymore. This work fixes also a few memory, degfault, and logic bugs found while testing all nss functions (there are still some to fix that are less critical and much harder to find yet).
2009-02-17	Fix another transaction mis-handling	Simo Sorce	1	-22/+20

2009-02-16	ldb_msg_* functions do not reliably set errno on error, do not realy on that.	Simo Sorce	1	-34/+34
	This was causing some functions to not cancel a transaction as they should have, leaving it pending indefintely. It in turn meant that no other process could see what was "stored" in the db as transactions are not fluched to the db until "committed". Took me quite a while and a lot of confusion to catch why I was seeing "ghost entries" in some processes and not seeing the entry in others .. As a defensive programming measure make sure we commit OR cancel in the same spot and that we always go thorugh it.
2009-02-13	Object not found on delete is not really an error.	Simo Sorce	1	-10/+10

2009-02-13	Always pass teh database path explicitly, so that test cases can use	Simo Sorce	1	-26/+120
	throw away databases Check version and init main db if empty
2009-02-13	Fix add member, remove one to many lines in the previous tidyup	Simo Sorce	1	-0/+6

2009-02-12	- make all functions supposed to get input in posix format	Simo Sorce	1	-165/+170
	use the same namespace (sysdb_posix_) - no need to explicitly start a transaction if only one operation is performed using a synchronous interface - split _add_remove_ functions into separate functions, don't let ldap madness creep into out interfaces
2009-02-12	Added sysdb_remove_group_posix and sysdb_remove_group_posix_by_gid	Stephen Gallagher	1	-3/+132
	Fixed a few small bugs in sysdb_[store\|remove]_account_posix. The string "uid=" needed to be replaced with SYSDB_PW_NAME, and the search scope in sysdb_remove_account_posix_by_uid needed to be LDB_SCOPE_ONELEVEL, not LDB_SCOPE_BASE. Added associated unit tests. Modified the unit test structure so that it is called as a single suite, rather than a User and Group suite, since there is too much overlap.
2009-02-12	Add support for removing members from groups. Updated convenience functions ↵	Stephen Gallagher	1	-25/+60
	for adding/removing user accounts and POSIX groups to the groups. Also modified the add/remove member functions to be a single interface taking a flag for add or removal, since the code only differs by one LDB flag. Added associated unit tests.
2009-02-12	Add sysdb_add_group_to_posix_group, refactored sysdb_add_acct_to_posix_group ↵	Stephen Gallagher	1	-75/+70
	to now use sysdb_add_member_to_posix_group along with sysdb_add_member_to_posix_group. Added new unit tests to sysdb-tests.c for groups of groups.
2009-02-12	Adding sysdb_add_acct_to_posix_group and associated unit tests	Stephen Gallagher	1	-4/+171

2009-02-12	Adding sysdb_store_group_posix with unit test	Stephen Gallagher	1	-3/+169

2009-01-12	Regroup database rleated functions under db and	Simo Sorce	1	-0/+1125
	rename everything with the sysdb suffix.