sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-02-01	Force offline operation with SIGUSR1	Stephen Gallagher	3	-0/+69
	If the monitor receives SIGUSR1, it will instruct all providers to enter offline operation. If any individual provider receives SIGUSR1, it alone will enter offline operation.
2010-02-01	Avoid 'PAM' at the beginning of define and enum names	Sumit Bose	5	-25/+26

2010-02-01	Rename PAM_USER_INFO to PAM_SYSTEM_INFO	Sumit Bose	2	-3/+3

2010-01-25	Fix size error on 64-bit systems	Stephen Gallagher	1	-1/+1

2010-01-22	Handle IPv6 addresses with the async resolver	Stephen Gallagher	4	-13/+65

2010-01-22	Pointers to non 32 bit aligned data were being cast to uint32_t *	George McCollister	2	-9/+11
	uint32_t pointers must point to 32 bit aligned data on ARM. Instead of padding the data to force it into alignment I altered the code to memcpy the data to an aligned location. I'd appreciate any and all feedback especially on whether I took the best approach. pam_test_client auth and pam_test_client acct now work on my armeb-xscale-linux-gnueabi target. Signed-off-by: George McCollister <georgem@opteron.novatech-llc.com>
2010-01-22	Fix async resolver integration with tevent	Stephen Gallagher	1	-7/+19
	We weren't properly setting read/write flags on the tevent fd events, so c-ares was unable to perform bidirectional communication for TCP DNS (in situations where the response is too large to send by UDP)
2010-01-21	Add missing link for Kerberos	Stephen Gallagher	1	-1/+2

2010-01-21	Use version.m4 for setting the SSSD version	Stephen Gallagher	1	-1/+4
	This is the preferred way of setting the version in a file, as autotools will properly monitor this file for changes and rerun autoconf/configure when necessary to update the version. This means that we don't need to manually perform an autoreconf in order to build a new RPM
2010-01-20	Split off libdhash into a shared library	Stephen Gallagher	3	-5/+23
	Right now, the pkg-config checks for the system version of libdhash are forcibly disabled, requiring the SSSD to build it from its own tree. In the future, when we split the libraries off from the SSSD, it will be easy to switch this check to the external library.
2010-01-20	Fix a double free bug	Sumit Bose	1	-3/+0

2010-01-20	Fix timeout memory heirarchy	Stephen Gallagher	1	-2/+14
	This fixes two issues: 1) Eliminates a double-free when a timeout occurs (we were freeing the running event context) 2) Ensures that we don't continue to schedule unnecessary timeout checks
2010-01-20	Deleting nonexistent users or groups is not a noop	Jakub Hrozek	2	-4/+2
	The manual pages for userdel and groupdel utilities incorrectly stated that deleting a nonexistent user or group is a noop. We changed that behavior, but forgot to sync the documentation.
2010-01-20	document debug_timestamps	Jakub Hrozek	2	-0/+22

2010-01-20	Add sysdb request to authenticate against a cached password	Sumit Bose	8	-217/+378
	The code for authentication against a cached password is moved from the pam responder to a generic sysdb tevent request. The new code can be used by other components of sssd to verify passwords on their own. Tests for the sysdb_cache_password and sysdb_cache_auth request are added and some unneeded or unused code and variables are removed.
2010-01-20	sss_groupshow - a utility to print properties of a local group	Jakub Hrozek	9	-2/+452
	This patch adds a utility called sss_groupshow that allows user to print properties of a group in the local domain. Fixes: #306
2010-01-14	Copy-edit, mainly fixing typos and English	David O'Brien	2	-71/+68
	Some reformatting to stay within 79 char line length. Better definition of server vs. machine usage in failover section.
2010-01-14	Make sure callbacks never retry when ares channel is destroyed	Martin Nagy	1	-4/+12
	When the resolv context destructor is invoked, the callbacks for pending queries could have been called with ARES_EDESTRUCTION and try to re-send the query.
2010-01-14	Don't recursively call ares_process_fd() from fd_event()	Martin Nagy	1	-17/+0
	Since ares_process_fd() might also cause fd_event() to be called again, calling ares_process_fd() is unwise. The bug will cause a crash if c-ares is using tcp connections. Fixes: #384
2010-01-14	Make periodic checks for DNS timeouts	Martin Nagy	1	-1/+82
	Since we only call c-ares to process input on FD when there is an activity on them, c-ares never gets a chance to react to a timed-out request. This caused SSSD to hang. Fixes: #381
2010-01-14	Explicitly set async DNS timeout	Stephen Gallagher	5	-6/+15
	We will allow 5s per DNS server, no retries.
2010-01-12	Fix #382, a segfault bug in the memberof plugin.	Simo Sorce	1	-1/+1

2010-01-12	Re-create c-ares channels if /etc/resolv.conf is modified	Martin Nagy	3	-14/+95
	Fixes: #378
2010-01-12	Remove local and kerberos providers from the access_provider list	Stephen Gallagher	3	-6/+2
	Update tests to reflect these removals.
2010-01-12	Update SV translation	Piotr Drąg	1	-3/+2

2010-01-11	Fix return value when offline and TGT is valid	Sumit Bose	1	-1/+1
	Fixes CVE-2010-0014
2010-01-05	Update SV translation	Göran Uddeborg	1	-3/+3

2010-01-05	Update translations for master	Stephen Gallagher	9	-411/+402

2010-01-05	Don't free timer events within the handler.	Simo Sorce	1	-16/+12
	Tevent frees timer handlers once done, so freeing the timer within the event is going to cause double frees. Just attach the timer event to the request it depends on and make sure to steal it on NULL if we are going to free the request from within the handler.
2010-01-05	Return an error for an unknown PAM request	Sumit Bose	4	-12/+41

2009-12-21	Allow debug_timestamps setting on a per-domain basis	Stephen Gallagher	2	-0/+3
	This was missing from the SSSDConfig API, though it was supported by the daemon.
2009-12-18	Fix broken password changes for local users	Stephen Gallagher	1	-1/+6

2009-12-18	Do not blindly accept zero-length passwords	Stephen Gallagher	2	-8/+17

2009-12-18	Fix ldap child memory hierarchy and other issues	Simo Sorce	8	-306/+482
	The timeout handler was not a child of the request so it could fire even though the request was already freed. The code wouldn't use async writes to the children so it could incur in a short write with no way to detect or recover from it. Also fixed style of some helper functions to pass explicit paramters instead of a general structure. Add common code to do async writes to pipes. Fixed async write issue for the krb5_child as well. Fix also sdap_kinit_done(), a return statement was missing and we were mixing SDAP_AUTH and errno return codes in state->result Remove usless helper function that just replicates talloc_strndup()
2009-12-18	Fix for #344	Sumit Bose	1	-13/+11
	Do not handle a missing ccache file as inactive by default, check if there are still active processes of the user.
2009-12-18	Do not overwrite valid TGTs when offline	Sumit Bose	5	-43/+185

2009-12-18	Handle chauthtok with PAM_PRELIM_CHECK separately	Sumit Bose	6	-21/+75
	If pam_sm_chauthtok is called with the flag PAM_PRELIM_CHECK set we generate a separate call to the sssd to validate the old password before asking for a new password and sending the change password request.
2009-12-17	disable password migration code	Sumit Bose	1	-2/+2

2009-12-17	Clarify access_provider manpage entry	Stephen Gallagher	1	-1/+3
	We support installed access providers as well as permit and deny
2009-12-17	Add DEBUG messages to getpwnam_callback and getpwuid_callback	Stephen Gallagher	1	-0/+4
	This matches the DEBUG logging available for groups.
2009-12-17	Updating ES translation	Stephen Gallagher	1	-20/+36

2009-12-17	Fix tight-loop in monitor part 2	Stephen Gallagher	1	-0/+5
	The first fix only fixed tight loops caused by setting 'timeout=0' in services. This patch also fixes it for domains.
2009-12-17	Change default for enumeration to TRUE	Stephen Gallagher	2	-2/+2

2009-12-17	Raise DEBUG level of sdap_get_generic_done()	Stephen Gallagher	1	-1/+1
	The DEBUG level of the result should not be lower than the DEBUG level of the request. It generates too much noise when enumerate is enabled or initgroups deals with groups with large numbers of users.
2009-12-15	Update SV translation	Göran Uddeborg	1	-26/+35

2009-12-15	Fix warning in server.c	Stephen Gallagher	1	-1/+1
	Function definition was missing "void" to denote that it took no arguments.
2009-12-15	Don't set explicit default for "timeout" in domains	Stephen Gallagher	1	-1/+1

2009-12-15	Fix tight loop in monitor	Stephen Gallagher	2	-4/+9
	If the domain heartbeat time was explicitly set in the configuration to 0, we would enter a tight loop in the heartbeat check and never answer requests from the child processes.
2009-12-15	Cleanup db files after test run	Sumit Bose	2	-2/+21

2009-12-15	Fix upgrade bug #323	Simo Sorce	1	-180/+186
	Move the upgrade function first and check explicitly for the old ldb name. Perform upgrades up to v02 first if necessary. Then proceed as normal letting the normal init functions perform further upgrades if necessary. This now works also if there is no "local" provider in the current configuration.