summaryrefslogtreecommitdiff
path: root/server
AgeCommit message (Collapse)AuthorFilesLines
2009-06-01Add more manpagesJakub Hrozek8-8/+591
2009-05-28Fix user enumeration bugSimo Sorce1-4/+0
The previous patch to fix an enumeration bug found with group enumeration inadvertently introduced a bug with user enumeration. Yeah, almost funny!
2009-05-28Enable enumeration in sysdb testsStephen Gallagher1-0/+8
2009-05-28Suppress "rootdse" error messages.Stephen Gallagher4-0/+41
We will trap all LDB debug messages and pipe them into our internal DEBUG() function. LDB FATAL messages will still be printed by default, WARNING and TRACE functions will be at debug level 3 and 9, respectively.
2009-05-28Make Data Provider a mandatory serviceJakub Hrozek1-0/+32
2009-05-28Build non-versioned sss_pam.so, libnss_sss.so and memberof.soStephen Gallagher1-1/+1
2009-05-28special-case NSS calls in PAM codeJakub Hrozek1-2/+2
2009-05-28Use PTR_2_INT for alignment calculationsSimo Sorce1-4/+5
This version should be pointer size agnostic. Should make this code safe on both 32bit and 64bit.
2009-05-27Fix enumerations (bug #42)Simo Sorce1-12/+76
If a backend had all its results filtered in fill_pwent or fill_grent then we would return an empty result, which means "end of results" to the client. Now we return ENOENT and let callers decide what to do. Also make sure we do not grow packets unless we are going to fill them as that's a recipe for killing the client as the size passed to sss_packet_grow is used to determine the size of the final packet.
2009-05-26fix a wrong timeoutSumit Bose1-3/+4
The timeout of the data provider call (in ms) got overwritten by a cache timeout (in s).
2009-05-26Adjust sysdb tests to the new confdb interface and improve sysdb test coverageJakub Hrozek1-39/+771
2009-05-26Silence warningsSimo Sorce10-22/+29
2009-05-26Do not fire up backend search when the data provider is localJakub Hrozek3-17/+21
2009-05-26Stop overwriting the stackSimo Sorce1-2/+2
Actually use the buffer not it's location on the stack.
2009-05-26Link proxy backend against internal crypto libraryStephen Gallagher1-2/+4
2009-05-26Move useradd defaults to confdbJakub Hrozek1-3/+25
Previously, sss_useradd defaults were hardcoded with no way to change user's default shell or base for home directory. This patch moves them into config/user_defaults
2009-05-26Clean up automake build to work on older versions of libtoolStephen Gallagher2-1/+3
LT_INIT is supported only on Libtool >= 2.0, so I reverted it to using AC_PROG_LIBTOOL. Also reorganized how the common libraries were being built. Now they are treated as libtool convenience libraries instead of installable libraries (the --with-singlelib configure flag can still be used to generate a combined, installable DSO) I cleaned up the set of files being installed by automake, so the list of things we need to remove before packaging the RPM is now only the .la files associated with our own plugins.
2009-05-26Fix manual UID assignment in sysdbJakub Hrozek1-11/+15
If it's an MPG domain, set them equal. If it's a non-MPG domain, get the next available GID and use that.
2009-05-26Fix infopipe packagingJakub Hrozek1-0/+4
2009-05-26Add some more InfoPipe testsJakub Hrozek2-1/+627
2009-05-26Fix typos in the Introspection XML fileJakub Hrozek1-3/+5
2009-05-26Fix initscript return codesJakub Hrozek1-6/+6
2009-05-26Read the config before startup, fail if cannot be readJakub Hrozek1-0/+26
2009-05-19Fix RPM generation issues with sssdStephen Gallagher1-1/+1
Ensures that the common libraries build statically. Also ensures that the sssd.spec creates the SYSV init script with the appropriate permissions. Cleans up the useless rpmdist target that was obsolete. Adds the *.so.N.0.0 files to the RPM, as the .so and .so.N files were dangling symlinks.
2009-05-19Use freeipa-devel@redhat.com for bug reportsStephen Gallagher1-1/+1
2009-05-19Enable automake builds for sssd serverStephen Gallagher13-3791/+467
2009-05-19call tevent_add_fd only onceSumit Bose1-27/+11
2009-05-19added prototype for sysdb_set_cached_passwordSumit Bose1-0/+6
2009-05-18Implement approximate offline detection in proxySimo Sorce1-5/+98
This will blackout any request to the backend for 15 seconds, then will allow again to retry.
2009-05-18Move actual password caching into sysdbSimo Sorce12-156/+286
Convert auth modules to do the caching themselves
2009-05-18Split ldap backend into auth and identity filesSimo Sorce3-20/+800
2009-05-18Move ldap_be.c into ldap/ldap_auth.cSimo Sorce1-0/+0
2009-05-18Prevent accepting blank passwordsSimo Sorce1-0/+7
2009-05-18Fix crypt functions to not use static buffers.Simo Sorce4-338/+334
Also fix style, clarify, and simplify some logic.
2009-05-15Treat the local provider as a special caseStephen Gallagher2-1/+17
The local provider needs no backend, so we'll create a special provider entry for it called "local" that will not attempt to retrieve provider configuration but will remain in the service list so it can be updated when the config file changes.
2009-05-15added new pam client protocolSumit Bose1-1/+132
2009-05-15added more flexible handling of client protocolSumit Bose4-2/+63
- allow different protocol versions for PAM and NSS - support more than one protocol version in the responder
2009-05-14Manpage generationJakub Hrozek7-3/+240
Provides a set of make rules for generating UNIX manual pages from DocBook 4.5 source as well as sample manpage for sss_useradd. Automatic generation of manual pages during "make" process is tunable with config parameter "--with-manpages". To rebuild the man pages separately, use the "make doc" target. Before building, the manpages are validated using a DTD schema.
2009-05-14Update configure rules for LDB and POPTStephen Gallagher2-4/+9
We need to ensure that configure fails with an error if the popt development libraries are not present or if ldb module support is not available.
2009-05-14More useful error message when adding user/group that already existsJakub Hrozek2-2/+18
Fixes: RHBZ #498462
2009-05-14Check for valid ID range, domains overlapJakub Hrozek1-0/+36
2009-05-14added check for NULL valuesSumit Bose3-9/+8
- allow unspecified value in struct pam_data to be NULL - check if domain structure is initialized in pam_reply
2009-05-12Fix warnings in monitor.c and confdb.cStephen Gallagher2-7/+13
2009-05-11Separate confdb API from confdb setupStephen Gallagher8-374/+458
Refactoring the confdb so that the setup code can be linked separately from the access API. This is being done so that our plugins do not need to link against the collection and ini_config libraries.
2009-05-08Chdir to / when daemonizingJakub Hrozek1-0/+11
2009-05-08Use tevent for shutdown signals, remove old pidfile, make sssd single-instance.Jakub Hrozek2-1/+79
Use tevent signal handling facilities for handlong SIGTERM and SIGINT in the monitor. Remove pidfile on SIGTERM and SIGINT. Make sssd single-instance by checking if we suceeded in signaling the process in the pidfile.
2009-05-08redirect stderr to /dev/null in initscriptJakub Hrozek1-1/+1
2009-05-06Fix some more return paths using uninitalized retSimo Sorce1-3/+3
2009-05-04Fixes for porting SSSD to Debian-based platformsStephen Gallagher5-5/+7
2009-04-29Fix configuration corruption issueStephen Gallagher1-2/+20
In the event that the configuration was corrupt the first time the SSSD is started, it would write in the special data for attributes and indexes, but it would fail before writing the version. Subsequent reloads (even with correct configuration files) would fail, since they would try again to write the attributes and indexes and fail since they were already present.