summaryrefslogtreecommitdiff
path: root/server
AgeCommit message (Collapse)AuthorFilesLines
2009-12-15fail over: Change the first server pick logicMartin Nagy1-5/+26
The logic of selecting the server to fail over to was changed so that we start from the server next to the one that didn't work the last time. This is because the status of a server that failed last time might get reset before we try another one. This can cause that we try to use the nonworking server repeatedly, not giving a chance to other servers. Fixes: #321
2009-12-15Don't consider one address with different port numbers as the sameMartin Nagy6-21/+38
There were two problems with the code. We were using fo_set_server_status() instead of fo_set_port_status() when we failed to connect to a service. This is a problem because if two services use the same server, or we want to use one server with two different ports, marking the whole server as bad is incorrect. The other problem was that be_resolve_server_done() was comparing the hostent structures -- these are, however, equal across multiple server:port pairs with the same server addresses. Fixes: #321
2009-12-10Fix stupid copy-paste errorStephen Gallagher1-1/+0
2009-12-10Fix DEBUG message for sysdb_initSumit Bose1-2/+2
2009-12-10Fix for #322, update from old database versions.Simo Sorce1-1/+14
2009-12-10Run SSSDConfig tests during 'make check'Stephen Gallagher2-89/+108
2009-12-10Remove default for ldap_use_start_tls in IPA providersStephen Gallagher1-1/+1
2009-12-10Add 'permit' and 'deny' access providers to SSSDConfig APIStephen Gallagher2-5/+16
2009-12-10Consolidate code for splitting strings by separatorJakub Hrozek6-163/+107
There were two functions for parsing strings by a separator. This patch consolidates on the one previously used in confdb. This also allows stripping the tokens of whitespace. Fixes: #319
2009-12-10Fix for #316Simo Sorce1-3/+3
We were never filling the group attrs because of an inverse return check. Plus fix a crash bug for using a pointer that is not a memory context.
2009-12-10Add Swedish translation for SSSD serverGöran Uddeborg2-0/+628
2009-12-10Fix processing of Boolean values in SSSDConfigStephen Gallagher4-23/+169
Previously, we were just casting the strings to bool, but this meant that all boolean values were "True". This patch solves the problem and adds regression tests for it.
2009-12-10Add missing SSSDConfig file for IPA for make installStephen Gallagher2-0/+2
Update tests to include IPA options
2009-12-10Document the failover feature in manpagesJakub Hrozek4-4/+61
Fixes: #309
2009-12-10Handle the special 02 upgrade case for 04->05Simo Sorce1-0/+7
2009-12-10Add rebuild task to memberof pluginSimo Sorce5-8/+858
This task allows us to rebuild memberuid and memberof attributes throughout the database. This way we can upgrade from version 0.4 databases that didn't generate and store memberuid. The task can be invoked by adding a speaicl named entry to the ldb file. The entry dn to use is: @MEMBEROF-REBUILD, the entry has no attributes and any attribute is ignored at present. The entry will not be stored in the database but will just trigger the task to execute a rebuild of the memberof and memberuid attributes
2009-12-10Always update sysdb to the latest versionSumit Bose1-3/+11
2009-12-09Add German translationFabian Affolter2-0/+656
2009-12-09Add missing options to sssd-ipa configuraionStephen Gallagher1-0/+72
2009-12-09Properly deny id_provider=filesStephen Gallagher2-6/+7
2009-12-09Correctly restart server status after the timeoutMartin Nagy1-1/+1
The macro STATUS_DIFF() was wrong causing the result to always be lower than 0, therefore the timeout was never reached. Fixes: #302
2009-12-09Add some debugging statements to fail_over and resolverMartin Nagy2-5/+69
These were very useful for debugging and hopefully still will be in the future.
2009-12-09Ensure that list_active_domains returns the real valueStephen Gallagher1-4/+16
Previously, we were accidentally filtering out domains that were not configured, so deleted domains might still appear in the active domain list. This patch should ensure that this never happens.
2009-12-09SSSDConfig.get_domain() should properly detect active stateStephen Gallagher2-0/+30
2009-12-09Don't build the SRV and TXT parsing code except for testsJakub Hrozek2-8/+18
2009-12-09Import ares 1.7.0 helpersJakub Hrozek10-116/+374
2009-12-09Change ares usage to be c-ares 1.7.0 compatibleJakub Hrozek3-87/+102
* Rename structure accordingly to ares upstream * Use new ares parsing functions in the wrappers * fix tests for ares 1.7
2009-12-09SSSDConfig API: fix deactivate_domain()Stephen Gallagher2-2/+73
deactivate_domain() would crash if it attempted to deactivate an already-inactive domain
2009-12-09Reduce code duplication between LDAP child and Kerberos childJakub Hrozek4-234/+160
Fixes: #294
2009-12-08Do not start with provider=filesJakub Hrozek1-0/+6
Fixes: #233
2009-12-08Fix SSSDConfig API bugs around [de-]activation of domainsStephen Gallagher2-7/+152
Adds two new public functions: SSSDConfig.activate_domain() SSSDConfig.deactivate_domain() These two functions are used during the save_domain() call to ensure that the active domain list is always kept up to date.
2009-12-08Fix broken SSSDChangeConf.set() functionStephen Gallagher1-1/+1
The set function didn't do anything at all. It needed to use the ipachangeconf.merge() function to behave properly instead of mergeNew()
2009-12-08Reduce the verbosity of the SSSDConfigTestStephen Gallagher1-4/+4
Now it will report only failures or final success
2009-12-08Add SSSDDomain.set_name() function to SSSDConfig APIStephen Gallagher2-3/+77
This function will change the name of an existing domain
2009-12-08dhash: Add private pointer for delete callbackSimo Sorce2-2/+3
Also pass a flag to the delete callback to tell it if this is a normal entry removal or we are cleaning up the tbale definitively.
2009-12-08Add Spanish translationbeckerde1-166/+191
2009-12-08Add Portuguese translationruigo2-0/+654
2009-12-08Make SSSDDomain.remove_provider() remove configured optionsStephen Gallagher2-6/+54
We will remove all options for a provider that are not also required by another configured provider. (For example, we will not remove krb5_realm when deleting the krb5 auth provider if the LDAP provider is in use, since it may still require this argument).
2009-12-08SSSDDomain.remove_provider() requires only the provider typeStephen Gallagher2-12/+18
There was no valid reason to require the backend type when specifying a provider to remove.
2009-12-08Fix potential uninitialized value error in responder_dp.cStephen Gallagher1-1/+1
If we fell into the default case of the switch statement, we would attempt to talloc_free() a random memory location. This patch guarantees that sdp_req is NULL if it has not been initialized.
2009-12-08Fix potential uninitialized value errors in nsssrv_cmd.cStephen Gallagher1-1/+2
2009-12-08Avoid returning uninitialized result.Stephen Gallagher1-0/+1
If grouplist was a zero-length array, we would return ret unitialized.
2009-12-08Add allocation error checkStephen Gallagher1-7/+10
2009-12-08Change dhash API to be talloc-friendlySimo Sorce1-16/+4
2009-12-08Add dummy credentials to an empty ccache fileSumit Bose1-2/+54
Application like krb5-auth-dialog might get confused if there is a credential cache file without any credentials in it. This patch adds an expired credential where only the client and the server principal are set. The client principal is the user's principal and the server principal corresponds to a TGT principal of the realm the user belongs to.
2009-12-08Fail on nonexistent input fileJakub Hrozek2-3/+12
2009-12-08Handle spaces in config parserJakub Hrozek3-2/+43
Fixes: #301
2009-12-07Fix bug #311, properly set callback attributeSimo Sorce1-0/+1
2009-12-07Allow nesting to fix #310Simo Sorce3-0/+5
2009-12-07Add offline support for ipa_accessSumit Bose2-17/+134