sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2009-07-31	Add ignore_not_found parameter to sysdb delete functions	Jakub Hrozek	1	-6/+9
	Also add tests
2009-07-21	add handling of the new backend targets to proxy backend	Sumit Bose	1	-0/+30

2009-07-20	add infrastructure to handle new backend targets	Sumit Bose	1	-11/+12

2009-07-08	Unify password caching ops in sysdb	Simo Sorce	1	-128/+27

2009-07-08	fixed some typos which prevented password caching	Sumit Bose	1	-3/+5

2009-07-03	Convert proxy internals to tevent_req style	Simo Sorce	1	-865/+1438

2009-07-03	Rework transaction code to use tevent_req	Simo Sorce	1	-226/+491
	This is part of a set of patches to rewrite sysdb to a hopefully better API, that will also let use use tevent_req async style calls to manipulate our cache.
2009-07-03	Rename sysdb_req to sysdb_handle.	Simo Sorce	1	-45/+45
	This sysdb_req has always really been a transaction handle and not a request. This is part of a set of patches to rewrite transaction support in sysdb to a hopefully better API, that will also let use use tevent_req async style to manipulate our cache.
2009-06-30	Remove redundant libPath option from proxy provider	Stephen Gallagher	1	-3/+7
	The libPath should be constructed from the libName. There is no benefit to specifying it separately.
2009-06-10	Turn sssd_mem_takeover into sssd_mem_attach	Simo Sorce	1	-11/+0
	The old function was not used anywhere, and this function uses better semantics, including not using void ** which gives strict aliasing problems. Also add a generic password destroy function
2009-05-26	Silence warnings	Simo Sorce	1	-4/+5

2009-05-18	Implement approximate offline detection in proxy	Simo Sorce	1	-5/+98
	This will blackout any request to the backend for 15 seconds, then will allow again to retry.
2009-05-18	Move actual password caching into sysdb	Simo Sorce	1	-11/+113
	Convert auth modules to do the caching themselves
2009-04-27	fix for pam proxy chauthtok	Sumit Bose	1	-9/+17
	When a user from a domain served by the proxy backend changes his password with passwd the passwd command asks for the old password, but it is not validated by the pam_chauthtok call in the proxy backend, because it is running as root. If the request is coming the unpriviledged socket we now call pam_authenticate explicitly before pam_chauthtok.
2009-04-13	Always pass full domain info	Simo Sorce	1	-7/+11
	Change sysdb to always passwd sss_domain_info, not just the domain name. This way domain specific options can always be honored at the db level.
2009-04-07	Split modules types in Identity and Authenticator	Simo Sorce	1	-13/+60
	The same module may implement both types, but initializatrion will be nonetheless performed separately, once for the identity module and once for the authenticator module. Also change the proxy module to retireve the pam target name from the domain configuration so that it is possibile to create per-domain pam stacks. With this modification it is actually possibile to use normal nss and pam modules to perform a successful authentication (tested only with sudo so far) Update exmples.
2009-04-01	Add way to use files as a proxy backend fro LOCAL	Simo Sorce	1	-11/+65
	Makes LOCAL a normal backend removing some special handling. Fix/Add id range filtering and name filtering Filters uid=0 and gid=0 in the proxy backend as 0 is invalid within sysdb and was causing getxxent calls to fail completely. Fix nss_ncache_check_xxx calls to avoid dirtying the 'ret' variable and causing some unwanted failures. Change sysdb to always return the uid number when searching member entries so that id range filtering can be perfomed also in group searhes (does not work with legacy backends)
2009-03-20	Enable autoreconnection of Data Provider Backends to the Data Provider	Stephen Gallagher	1	-3/+10

2009-03-19	use pam_data as main data structure for dbus communication	Sumit Bose	1	-4/+2

2009-02-28	Convert sync calls in sysdb to async, transaction dependent, calls.	Simo Sorce	1	-350/+610

2009-02-26	Rebase the code to use talloc, tdb, tevent, ldb as external	Simo Sorce	1	-0/+1
	dependencies based on the latest samba code. Convert all references to the old events library to use the renamed tevent library.
2009-02-24	Add PAM responder	Sumit Bose	1	-1/+131
	Also move responders under server/responder with shared code in server/responder/common Signed-off-by: Simo Sorce <ssorce@redhat.com>
2009-02-20	Completely rework the nss interface to be able to use 2	Simo Sorce	1	-31/+189
	types of domains: modern and legacy modern uses member/meberof, legacy uses memberUid for group memberships. Rework the proxy backend to use the legacy style as that's the format the data comes in (trying to convert would require too many transformations and increased the number of queries). Add support for fetching groups in nss. Add support for enumerating users and groups (requires to enable enumeration in config) both in nss and in the proxy provider. Remove confdb_get_domain_basedn() and substitute with generic calls in the nss init function. Store a domain structure in the btree not the basedn so that we can add enumeration flags. Also make sure NSS understand how to make multiple calls on enumerations, also make passing the domian parameter always mandatory, passing in domain=* is not valid anymore. This work fixes also a few memory, degfault, and logic bugs found while testing all nss functions (there are still some to fix that are less critical and much harder to find yet).
2009-02-13	Make backend requests async	Simo Sorce	1	-48/+349

2009-02-12	- make all functions supposed to get input in posix format	Simo Sorce	1	-12/+12
	use the same namespace (sysdb_posix_) - no need to explicitly start a transaction if only one operation is performed using a synchronous interface - split _add_remove_ functions into separate functions, don't let ldap madness creep into out interfaces
2009-01-12	Regroup database rleated functions under db and	Simo Sorce	1	-4/+7
	rename everything with the sysdb suffix.
2009-01-11	Add support for getpwuid in proxy backend	Simo Sorce	1	-1/+60

2009-01-11	Turn ldap_provider.c into proxy.c and make it possible to load just any	Simo Sorce	1	-0/+281
	libnss library through config directives on the domain object