sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2009-07-20	Monitor resolv.conf for changes	Stephen Gallagher	4	-128/+234
	This patch updates the monitor_config_file() functions so that they can monitor any number of files and invoke a specified callback whenever they are modified. When inotify is available, we will add an additional watch descriptor to the inotify file descriptor. When inotify is not available, the polling function will simply loop to check each file in the monitor list. When changes are discovered in resolv.conf, the monitor will send a "resInit" signal to all of its known children. They are only required to handle this function if they need updated DNS information. Services that do not implement resInit should return DBUS_ERROR_UNKNOWN_METHOD (rather than timing out) with no ill effects.
2009-07-20	Improvements to config file updates	Stephen Gallagher	2	-41/+152
	1) Some text editors will create a new file and move it into place on top of the existing file. When this happens, the kernel issues an IN_IGNORE inotify event and automatically removes the watch descriptor for that file. We'll handle the event and create a new watch descriptor for the new file. We will attempt to rewatch the file six times at five-second intervals. 2) Some scripts may append new data to the config file in several steps (such as calling echo "foo" >> sssd.conf several times). In order to handle these scripts safely, we'll defer processing of inotify events for one second after the first is detected. This should be ample time for the remainder of the script to complete.
2009-07-20	add infrastructure to handle new backend targets	Sumit Bose	6	-150/+228

2009-07-20	Fix saving new nextID	Jakub Hrozek	1	-1/+1

2009-07-10	let krb5 backend safe valid credentials for offline authentication	Sumit Bose	1	-0/+43

2009-07-10	fixed the default value for tls_reqcert	Sumit Bose	1	-1/+1

2009-07-10	add a short explanation about the used debug levels	Sumit Bose	1	-0/+14

2009-07-09	fixed typos and a potential memory leak	Sumit Bose	1	-2/+3

2009-07-08	Implement the ldap identity module.	Simo Sorce	7	-787/+1408
	This uses and exapands the async helpers.
2009-07-08	Unify password caching ops in sysdb	Simo Sorce	7	-291/+178

2009-07-08	Use async helpers for ldap auth module	Simo Sorce	1	-722/+314
	This changes the style quite a lot, but the tevent_req style is much more clear and much less error-prone than the giant loop we had previously.
2009-07-08	Add async helper functions	Simo Sorce	7	-25/+2060
	These functions use the tevent_req async model, where a pair of _send/_recv functions pilot requests, with additional helpers like _done functions, and where needed multiple stage helpers.
2009-07-08	Expose sysdb function to parse sysdb_attrs	Simo Sorce	2	-2/+4

2009-07-08	Add dumb way to clean up .X files	Simo Sorce	1	-0/+1

2009-07-08	fix return code of krb5 child to indicate that the kdc is unavailable	Sumit Bose	1	-1/+5

2009-07-08	fixed some typos which prevented password caching	Sumit Bose	1	-3/+5

2009-07-08	fixed a double talloc_free error	Sumit Bose	6	-12/+0

2009-07-06	Check for root before initializing	Jakub Hrozek	9	-4/+99
	Also move setting locale to separate function to be called before anything else to make sure the "Not root" message would be localized.
2009-07-03	Cleanup warnings in client and server code	Simo Sorce	2	-4/+1

2009-07-03	Convert proxy internals to tevent_req style	Simo Sorce	1	-865/+1438

2009-07-03	Rework transaction code to use tevent_req	Simo Sorce	18	-2762/+4893
	This is part of a set of patches to rewrite sysdb to a hopefully better API, that will also let use use tevent_req async style calls to manipulate our cache.
2009-07-03	Rename sysdb_req to sysdb_handle.	Simo Sorce	18	-416/+410
	This sysdb_req has always really been a transaction handle and not a request. This is part of a set of patches to rewrite transaction support in sysdb to a hopefully better API, that will also let use use tevent_req async style to manipulate our cache.
2009-07-02	Adding wrappers to free data in INI API.	Dmitri Pal	2	-7/+5
	See ticket #37 in sssd track.
2009-07-02	Gettextize the sss_ tools	Jakub Hrozek	7	-109/+176

2009-07-02	PRINT and ERROR macros	Jakub Hrozek	2	-1/+4

2009-07-02	check pending_return after dbus_connection_send_with_reply	Sumit Bose	4	-9/+9

2009-07-02	added kerberos backend with tevent_req event handling	Sumit Bose	8	-2/+978

2009-07-02	added kerberos locator plugin	Sumit Bose	6	-1/+179

2009-06-30	Eliminate segfault on first start-up	Stephen Gallagher	1	-6/+19
	There was a typo in the confdb setup portion of the monitor_process_init that was attempting to use the wrong cdb object to initialize. This patch also adds some missing talloc_free() calls on error.
2009-06-30	Remove redundant libPath option from proxy provider	Stephen Gallagher	3	-17/+7
	The libPath should be constructed from the libName. There is no benefit to specifying it separately.
2009-06-19	Protect against segfault in service_signal_reload	Stephen Gallagher	1	-0/+9
	There is a potential race condition where the monitor may attempt to signal a reload of a child process before the communication sbus channel is available. If this happens, we will just exit this function and let the monitor kill and restart the child process.
2009-06-19	Fix segfault in update_monitor_config	Stephen Gallagher	2	-8/+30
	We were stealing the memory context of only the first value in the linked-list of domains (and also services). This patch adds a memory context to hold the lists so that can be stolen along with all of the entries.
2009-06-19	Allow the use of custom CFLAGS on the make command line	Stephen Gallagher	3	-3/+6
	Setting CFLAGS explicitly in configure.ac means that they would be overwritten when using e.g. make CFLAGS="-O0 -g" This replaces the explicit setting of CFLAGS with an AM_CONDITIONAL to have Makefile.am set these instead. Also fixes a missing #include that was coincidentally obscured because gcc's -O2 happened to be able to locate it. Setting -O0 revealed the problem.
2009-06-18	Add configure check for PCRE >= 7	Stephen Gallagher	1	-0/+2

2009-06-17	Create gettext framework for SSSD daemon	Stephen Gallagher	17	-15/+156

2009-06-16	Control sssd_be exported functions	Stephen Gallagher	2	-2/+9

2009-06-16	Add --with-aux-info config option to SSSD daemon	Stephen Gallagher	2	-0/+11

2009-06-16	Make SysV script install executable	Stephen Gallagher	1	-1/+1

2009-06-11	Remove extra implementation of password_destructor	Stephen Gallagher	1	-11/+0

2009-06-11	Add missing configure check for getpgrp	Stephen Gallagher	1	-1/+1

2009-06-10	Turn sssd_mem_takeover into sssd_mem_attach	Simo Sorce	3	-36/+51
	The old function was not used anywhere, and this function uses better semantics, including not using void ** which gives strict aliasing problems. Also add a generic password destroy function
2009-06-10	Fix warnings in stress-tests.c	Simo Sorce	1	-19/+21

2009-06-10	Link crypt functions only to sssd binaries	Simo Sorce	1	-4/+2

2009-06-08	Fix invalid pointer error in ldb_debug_messages	Stephen Gallagher	1	-2/+19

2009-06-08	Treat a missing provider entry as a config error	Stephen Gallagher	1	-2/+7

2009-06-08	fix detection of authentication against LOCAL domain	Sumit Bose	1	-3/+9

2009-06-08	fix shadow-utils base path	Jakub Hrozek	1	-1/+1

2009-06-03	man page for LDAP domains	Jakub Hrozek	2	-1/+233

2009-06-02	added tls_reqcert option for native LDAP backend	Sumit Bose	1	-0/+32
	In order to allow to access LDAP servers which do not provide SSL/TLS encryption the option tls_reqcert is added to the native LDAP backend. It accepts the same arguments as the corresponding OpenLDAP option documented in ldap.conf(5) and should preform accordingly.
2009-06-02	sssd.conf(5) man page	Jakub Hrozek	2	-1/+655