sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2009-11-09	IPA time rules parsing routines	Jakub Hrozek	4	-0/+1841

2009-11-09	Add missing include	Jakub Hrozek	1	-0/+1

2009-11-09	Check return, zero free hostent, adhere to style	Simo Sorce	4	-20/+28

2009-11-07	Fix ldap driver	Simo Sorce	1	-0/+3

2009-11-07	Fix build	Simo Sorce	1	-4/+8

2009-11-07	added access module of IPA provider	Sumit Bose	6	-4/+1697

2009-11-06	Add fail over utility functions	Martin Nagy	4	-1/+971
	These functions should be used by providers to centrally manage lists of servers. Servers are grouped into services and each service has it's own list of servers. If, however, you will try to add a same server into two different services, they will share a common structure. This means that a host will only be resolved once.
2009-11-06	Add simple reference counting wrappers for talloc	Martin Nagy	4	-1/+373

2009-11-06	Add DLIST_FOR_EACH() macro	Martin Nagy	1	-0/+3

2009-11-06	Check is ccache structure is initialized before calling krb5_cc_destroy	Sumit Bose	1	-8/+16

2009-11-06	Clean up unused dependencies	Stephen Gallagher	2	-7/+38

2009-11-06	Fix a bad free in async_resolv.c	Martin Nagy	1	-6/+0
	Also remove redundant talloc_free()'s. They are not needed since their parent should be freed right after calling the _recv() function.
2009-11-06	Add missing include file to files-tests.c	Martin Nagy	1	-0/+1

2009-11-06	Always set last update and expire time	Simo Sorce	4	-114/+110
	modifications to existing users/groups were setting metadata, but creation was not. Fixes #259
2009-11-06	Split async helpers in multiple files	Simo Sorce	6	-3285/+3386
	The size of sdap_async.c was unmanageable. This patch splits it into a generic file with common infrastructure calls, a file that handles connection calls and a file for id related calls.
2009-11-06	Reorganize ldap id provider files	Simo Sorce	5	-547/+584
	Split enum task in a separate file.
2009-11-06	Unify code to use the generic search interface	Simo Sorce	1	-593/+473
	This code removes redundancies in the code. both users and groups enumeration code use the same search generic search function now. Also the code to save users and groups have been unified across all callers.
2009-11-06	Fix and enhance initgroups call	Simo Sorce	1	-170/+637
	This call was failing and was defective because it didn't properly handle the various different schemas we support. Now the function does 2 things: - Updates the user entry to make sure it is still valid - Retrieves every group the user is member of
2009-11-06	Unify parse routines, use maps in generic searches	Simo Sorce	4	-130/+77
	This remove redundant code and also allows the generic search to be used to use maps to convert attributes.
2009-11-06	Store the original memberof attributes if any	Simo Sorce	1	-7/+30
	Also change the interface of sdap_save_user_send() so that it can be more easily reused like it was done for sdap_save_group_send().
2009-11-06	Make useful function more broadly available.	Simo Sorce	3	-30/+30

2009-11-06	Make available method to quickly retrive string	Simo Sorce	2	-3/+35
	sysdb_attrs has a lot of methods to add them but very little to get information out. Start adding a way to retrieve a single valued attribute as a string.
2009-11-05	Build files.c only for tools	Stephen Gallagher	4	-13/+14
	Move files.c into tools directory
2009-11-05	Increase the sbus dispatch DEBUG level to 9	Stephen Gallagher	1	-2/+2
	This is heavy noise and low-usefulness for debugging normal operating issues.
2009-11-05	Update midpoint refresh logic to be relative to cache timeout	Stephen Gallagher	6	-15/+49

2009-11-05	Add configure check for sasl.h	Stephen Gallagher	1	-0/+2

2009-11-05	add replacements for missing Kerberos calls	Sumit Bose	7	-48/+160

2009-11-04	Do not delete users, groups outside domain range	Jakub Hrozek	2	-11/+35
	Fixes: 240
2009-11-04	Simplify debug_fn()	Stephen Gallagher	1	-12/+2
	We don't need to be allocating an output string here. This was also causing a runtime bug when the output string contained characters that would be interpreted by fprintf as specifiers.
2009-11-04	Fix for a seg fault during recursive delete	Sumit Bose	1	-1/+7

2009-11-04	Add sysdb_attrs_replace_name to sysdb API.	Sumit Bose	3	-0/+80

2009-11-04	Free the PCRE regexp with destructor	Jakub Hrozek	1	-0/+10

2009-11-03	Rename sdap_id_map to sdap_attr_map	Simo Sorce	7	-21/+75
	Also start adding some infrastructure to use the USN counter when available. In particular add a place to add generic attrs mapping, ie attributes that are neither user nor group specific.
2009-11-03	Add complete pydoc for SSSDConfig API	Stephen Gallagher	1	-1/+534

2009-11-03	Localize SSSDConfig strings	Stephen Gallagher	4	-3/+919

2009-11-03	Add support for option descriptions to SSSDConfig API	Stephen Gallagher	2	-14/+148
	Addresses https://fedorahosted.org/sssd/ticket/242 related to authconfig integration
2009-11-03	Remove magic_private_groups from SSSDConfig API schema	Stephen Gallagher	2	-3/+0

2009-11-03	Make config_file_version a hidden setting in SSSDConfig API	Stephen Gallagher	5	-17/+134
	The config_file_version should never be changed by the API, so we will hide the option inside the SSSDConfig API and remove it from the schema. Guarantee that the config file is of the correct version
2009-11-02	add sysdb_delete_recursive request to sysdb API	Sumit Bose	4	-4/+282

2009-11-02	Make debug message less irritating.	Sumit Bose	1	-2/+2
	The 'Unable to load' debug message is now only shown when the backend target is given explicitly in the config file. I the other case we let the caller decided how to handle this error condition.
2009-11-02	set ipa_hostname if not given in config file	Sumit Bose	1	-0/+20

2009-10-30	Fix segfault when SASL is not used at all	Simo Sorce	2	-2/+4

2009-10-30	remove old sysdb file before starting tests	Sumit Bose	1	-0/+8

2009-10-30	Fix compiler warnings in krb5_utils-tests.	Sumit Bose	1	-21/+21

2009-10-30	Add AM_CFLAGS to unit tests	Sumit Bose	1	-8/+12

2009-10-29	Add support to get rootDSE from the LDAP server.	Simo Sorce	6	-121/+398
	Also fic sdap_get_generic_send() to be a bit more "generic" :-) Also figs bugs within it. This patch allow us 2 good things. A) we check that the server effectively supports GSSAPI auth before we try to use it. B) against IPA it substantially cuts delays when the server is offline because it uses a 5 second async timeout on the connection and doesn't try to do a slow synchronous kinit+sasl_bind if the server is not even available.
2009-10-29	Tidy up ipa options	Simo Sorce	9	-223/+239
	Do not replicate every and each option we may want to set in ipa. Just read out ldap and krb provider options (added reference in the manual too, and removed mention of ipa specific timeout values, use ldap options for that) Avoid calling auth module initialization twice, just pass the auth context to the chpass module too. Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be used for both users and groups. the user and group search bases can still be set separately if necessary but they are now optional and set to be identical to SDAP_SEARCH_BASE if not explicitly specified in the configuration.
2009-10-29	Allow sysdb_search_entry request to return more than one result	Sumit Bose	3	-27/+178

2009-10-29	added a ASQ search API for sysdb	Sumit Bose	3	-0/+356

2009-10-28	Kill the ldap connection when we go offline	Simo Sorce	1	-5/+16
	This patch uses a wrapper to kill the ldap connection when we are marked offline. This also makes sure we do not try to reuse a bad connection handler after a fatal error.