summaryrefslogtreecommitdiff
path: root/src/confdb/confdb.c
AgeCommit message (Collapse)AuthorFilesLines
2013-08-28Add a new option to control subdomain enumerationJakub Hrozek1-0/+13
2013-06-10back end: add refresh expired records periodic taskPavel Březina1-0/+11
https://fedorahosted.org/sssd/ticket/1713 Add new option refresh_expired_interval.
2013-03-01Don't treat 0 as default for pam_pwd_expiration warningJakub Hrozek1-1/+2
2013-02-21Fix the krb5 password expiration warningJakub Hrozek1-1/+7
https://fedorahosted.org/sssd/ticket/1808
2013-02-10Change the way domains are linked.Simo Sorce1-8/+2
- Use a double-linked list for domains and subdomains. - Never remove a subdomain, simply mark it as disabled if it becomes unused. - Rework the way subdomains are refreshed. Now sysdb_update_subdomains() actually updates the current subdomains and marks as disabled the ones not found in the sysdb or add new ones found. It never removes them. Removal of missing domains from sysdb is deferred to the providers, which will perform it at refresh time, for the ipa provider that is done by ipa_subdomains_write_mappings() now. sysdb_update_subdomains() is then used to update the memory hierarchy of the subdomains. - Removes sysdb_get_subdomains() - Removes copy_subdomain() - Add sysdb_subdomain_delete()
2013-02-10Add function get_next_domain()Simo Sorce1-1/+1
Use this function instead of explicitly calling domain->next This function allows to get the next primary domain or to descend into the subdomains and replaces also get_next_dom_or_subdom()
2013-01-22Convert the value of pwd_exp_warning to secondsJakub Hrozek1-5/+6
When read from the domain section, the pwd_expiration_warning was properly converted to seconds from days, but not the pam_pwd_expiration_warning set in the [pam] section. https://fedorahosted.org/sssd/ticket/1773
2013-01-15Move mpg flag to the domain where it belongsSimo Sorce1-0/+3
A sysdb contains now multiple domains, but the mpg property is a property of a specific domain not of the underlying database.
2013-01-02failover: Protect against empty host namesMichal Zidek1-1/+1
Added new parameter to split_on_separator that allows to skip empty values. The whole function was rewritten. Unit test case was added to check the new implementation. https://fedorahosted.org/sssd/ticket/1484
2012-11-15Add ignore_group_members option.Paul B. Henson1-0/+9
https://fedorahosted.org/sssd/ticket/1376
2012-10-18Allow setting the default_shell option per-domain as wellJakub Hrozek1-0/+10
https://fedorahosted.org/sssd/ticket/1583
2012-07-20NSS: Add override_shell optionStephen Gallagher1-0/+10
If override_shell is specified in the [nss] section, all users managed by SSSD will have their shell set to this value. If it is specified in the [domain/DOMAINNAME] section, it will apply to only that domain (and override the [nss] value, if any). https://fedorahosted.org/sssd/ticket/1087
2012-07-06CONFDB: Add the ability to set a boolean value in the confdbStephen Gallagher1-0/+75
2012-06-29confdb: add entry_cache_sudo_timeout optionPavel Březina1-0/+11
2012-06-25Set default for subdomain_homedirSumit Bose1-1/+2
2012-06-20Move some debug lines to new debug log levelsStef Walter1-1/+1
* These are common lines of debug output when starting up sssd https://bugzilla.redhat.com/show_bug.cgi?id=811113
2012-05-11Bad check for id_provider=local and access_provider=permitAriel Barria1-1/+1
documentation-access_provider Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2012-05-09NSS: Add fallback_homedir optionStephen Gallagher1-4/+16
This option is similar to override_homedir, except that it will take effect only for users that do not have an explicit home directory specified in LDAP. https://fedorahosted.org/sssd/ticket/1250
2012-05-04Modify behavior of pam_pwd_expiration_warningJan Zeleny1-0/+18
New option pwd_expiration_warning is introduced which can be set per domain and can override the value specified by the original pam_pwd_expiration_warning. If the value of expiration warning is set to zero, the filter isn't apllied at all - if backend server returns the warning, it will be automatically displayed. Default value for Kerberos: 7 days Default value for LDAP: don't apply the filter Technical note: default value when creating the domain is -1. This is important so we can distinguish between "no value set" and 0. Without this possibility it would be impossible to set different values for LDAP and Kerberos provider.
2012-04-24fix copy and paste error in commentPavel Březina1-1/+1
2012-04-24New config option for subdomainsJan Zeleny1-0/+10
subdomain_homedir - if set, it contains default value, can be overriden in further processing
2012-04-24Add conn_name to allow different names for domains and connectionsJan Zeleny1-0/+1
2012-02-21Don't give memory context in confdb where not neededJan Zeleny1-12/+33
2012-02-05AUTOFS: responderJakub Hrozek1-0/+10
2012-02-04NSS: Add individual timeouts for entry typesStephen Gallagher1-2/+51
https://fedorahosted.org/sssd/ticket/1016
2011-12-20Error out if local domain is case insensitiveJakub Hrozek1-0/+7
https://fedorahosted.org/sssd/ticket/1104
2011-12-16Use the case sensitivity flag in respondersJakub Hrozek1-0/+7
2011-05-23Set _GNU_SOURCE globallySumit Bose1-2/+1
2011-05-20Add a new option to override home directory valueJakub Hrozek1-1/+8
https://fedorahosted.org/sssd/ticket/551
2011-05-20Add a new option to override primary GID numberJakub Hrozek1-0/+7
https://fedorahosted.org/sssd/ticket/742
2010-10-13Store entry_cache_timeout in sss_domain_info objectStephen Gallagher1-0/+7
This is useful so that the NSS responder can identify an domain's entry timeout for expiring the memory cache for a lookup such as with netgroups.
2010-09-15Use a different min_id for local domainJakub Hrozek1-1/+16
When we changed the default min_id to be 1, we forgot about the local domain. It makes sense to keep the minimum id larger there.
2010-09-08Dead assignments cleanup in various places in SSSDJan Zeleny1-1/+0
Three assignments deleted, two return code inspection added. Also found and fixed one critical bug caused by dead assignment. Ticket: #590
2010-03-04Add forgotten \n in DEBUG statementsMartin Nagy1-7/+7
Logs from confdb with missing '\n' in the DEBUG statements annoyed me so I decided to fix them. I also made a quick grep through the code and found other places so I fixed them too.
2010-03-04Make confdb_init's confdb_location parameter constMartin Nagy1-1/+1
2010-02-23Revert "Change default for enumeration to TRUE"Stephen Gallagher1-1/+1
This reverts commit 75a9f18ad8ac6e885ac34cdeebc4d8f8734713f8.
2010-02-23Fix file permissions of config.ldbSumit Bose1-0/+4
2010-02-18Rename server/ directory to src/Stephen Gallagher1-0/+908
Also update BUILD.txt