summaryrefslogtreecommitdiff
path: root/server
AgeCommit message (Collapse)AuthorFilesLines
2009-12-18Fix for #344Sumit Bose1-13/+11
Do not handle a missing ccache file as inactive by default, check if there are still active processes of the user.
2009-12-18Do not overwrite valid TGTs when offlineSumit Bose5-43/+185
2009-12-18Handle chauthtok with PAM_PRELIM_CHECK separatelySumit Bose6-21/+75
If pam_sm_chauthtok is called with the flag PAM_PRELIM_CHECK set we generate a separate call to the sssd to validate the old password before asking for a new password and sending the change password request.
2009-12-17disable password migration codeSumit Bose1-2/+2
2009-12-17Clarify access_provider manpage entryStephen Gallagher1-1/+3
We support installed access providers as well as permit and deny
2009-12-17Add DEBUG messages to getpwnam_callback and getpwuid_callbackStephen Gallagher1-0/+4
This matches the DEBUG logging available for groups.
2009-12-17Updating ES translationStephen Gallagher1-20/+36
2009-12-17Fix tight-loop in monitor part 2Stephen Gallagher1-0/+5
The first fix only fixed tight loops caused by setting 'timeout=0' in services. This patch also fixes it for domains.
2009-12-17Change default for enumeration to TRUEStephen Gallagher2-2/+2
2009-12-17Raise DEBUG level of sdap_get_generic_done()Stephen Gallagher1-1/+1
The DEBUG level of the result should not be lower than the DEBUG level of the request. It generates too much noise when enumerate is enabled or initgroups deals with groups with large numbers of users.
2009-12-15Update SV translationGöran Uddeborg1-26/+35
2009-12-15Fix warning in server.cStephen Gallagher1-1/+1
Function definition was missing "void" to denote that it took no arguments.
2009-12-15Don't set explicit default for "timeout" in domainsStephen Gallagher1-1/+1
2009-12-15Fix tight loop in monitorStephen Gallagher2-4/+9
If the domain heartbeat time was explicitly set in the configuration to 0, we would enter a tight loop in the heartbeat check and never answer requests from the child processes.
2009-12-15Cleanup db files after test runSumit Bose2-2/+21
2009-12-15Fix upgrade bug #323Simo Sorce1-180/+186
Move the upgrade function first and check explicitly for the old ldb name. Perform upgrades up to v02 first if necessary. Then proceed as normal letting the normal init functions perform further upgrades if necessary. This now works also if there is no "local" provider in the current configuration.
2009-12-15Properly close STDERR when daemonizingStephen Gallagher1-9/+3
This is necessary so that any process managing our startup and shutdown (e.g. authconfig) does not block and stall waiting for stderr to terminate. Fixes bug https://fedorahosted.org/sssd/ticket/324
2009-12-15Update IT translationMarina Latini2-0/+644
2009-12-15Update SV translationGöran Uddeborg1-86/+101
2009-12-15Build python modules in builddirSumit Bose2-4/+13
This requires increasing the required autoconf version to 2.59 for use of $(abs_builddir). Fix uninstallation of python files as well
2009-12-15Check for minimal version of checkSumit Bose1-1/+1
Test loops and _i are only available since 0.9.5.
2009-12-15Use sys.exit instead of exitSumit Bose1-1/+2
2009-12-15fail over: Change the first server pick logicMartin Nagy1-5/+26
The logic of selecting the server to fail over to was changed so that we start from the server next to the one that didn't work the last time. This is because the status of a server that failed last time might get reset before we try another one. This can cause that we try to use the nonworking server repeatedly, not giving a chance to other servers. Fixes: #321
2009-12-15Don't consider one address with different port numbers as the sameMartin Nagy6-21/+38
There were two problems with the code. We were using fo_set_server_status() instead of fo_set_port_status() when we failed to connect to a service. This is a problem because if two services use the same server, or we want to use one server with two different ports, marking the whole server as bad is incorrect. The other problem was that be_resolve_server_done() was comparing the hostent structures -- these are, however, equal across multiple server:port pairs with the same server addresses. Fixes: #321
2009-12-10Fix stupid copy-paste errorStephen Gallagher1-1/+0
2009-12-10Fix DEBUG message for sysdb_initSumit Bose1-2/+2
2009-12-10Fix for #322, update from old database versions.Simo Sorce1-1/+14
2009-12-10Run SSSDConfig tests during 'make check'Stephen Gallagher2-89/+108
2009-12-10Remove default for ldap_use_start_tls in IPA providersStephen Gallagher1-1/+1
2009-12-10Add 'permit' and 'deny' access providers to SSSDConfig APIStephen Gallagher2-5/+16
2009-12-10Consolidate code for splitting strings by separatorJakub Hrozek6-163/+107
There were two functions for parsing strings by a separator. This patch consolidates on the one previously used in confdb. This also allows stripping the tokens of whitespace. Fixes: #319
2009-12-10Fix for #316Simo Sorce1-3/+3
We were never filling the group attrs because of an inverse return check. Plus fix a crash bug for using a pointer that is not a memory context.
2009-12-10Add Swedish translation for SSSD serverGöran Uddeborg2-0/+628
2009-12-10Fix processing of Boolean values in SSSDConfigStephen Gallagher4-23/+169
Previously, we were just casting the strings to bool, but this meant that all boolean values were "True". This patch solves the problem and adds regression tests for it.
2009-12-10Add missing SSSDConfig file for IPA for make installStephen Gallagher2-0/+2
Update tests to include IPA options
2009-12-10Document the failover feature in manpagesJakub Hrozek4-4/+61
Fixes: #309
2009-12-10Handle the special 02 upgrade case for 04->05Simo Sorce1-0/+7
2009-12-10Add rebuild task to memberof pluginSimo Sorce5-8/+858
This task allows us to rebuild memberuid and memberof attributes throughout the database. This way we can upgrade from version 0.4 databases that didn't generate and store memberuid. The task can be invoked by adding a speaicl named entry to the ldb file. The entry dn to use is: @MEMBEROF-REBUILD, the entry has no attributes and any attribute is ignored at present. The entry will not be stored in the database but will just trigger the task to execute a rebuild of the memberof and memberuid attributes
2009-12-10Always update sysdb to the latest versionSumit Bose1-3/+11
2009-12-09Add German translationFabian Affolter2-0/+656
2009-12-09Add missing options to sssd-ipa configuraionStephen Gallagher1-0/+72
2009-12-09Properly deny id_provider=filesStephen Gallagher2-6/+7
2009-12-09Correctly restart server status after the timeoutMartin Nagy1-1/+1
The macro STATUS_DIFF() was wrong causing the result to always be lower than 0, therefore the timeout was never reached. Fixes: #302
2009-12-09Add some debugging statements to fail_over and resolverMartin Nagy2-5/+69
These were very useful for debugging and hopefully still will be in the future.
2009-12-09Ensure that list_active_domains returns the real valueStephen Gallagher1-4/+16
Previously, we were accidentally filtering out domains that were not configured, so deleted domains might still appear in the active domain list. This patch should ensure that this never happens.
2009-12-09SSSDConfig.get_domain() should properly detect active stateStephen Gallagher2-0/+30
2009-12-09Don't build the SRV and TXT parsing code except for testsJakub Hrozek2-8/+18
2009-12-09Import ares 1.7.0 helpersJakub Hrozek10-116/+374
2009-12-09Change ares usage to be c-ares 1.7.0 compatibleJakub Hrozek3-87/+102
* Rename structure accordingly to ares upstream * Use new ares parsing functions in the wrappers * fix tests for ares 1.7
2009-12-09SSSDConfig API: fix deactivate_domain()Stephen Gallagher2-2/+73
deactivate_domain() would crash if it attempted to deactivate an already-inactive domain