summaryrefslogtreecommitdiff
path: root/src/db
AgeCommit message (Collapse)AuthorFilesLines
2011-02-03Add additional indexing for sysdbStephen Gallagher2-1/+117
Adds an index for dataExpireTimestamp This is used for determining which users need to be removed during the cleanup task. If enumeration is enabled (or huge numbers of users have been cached), the cleanup task runs very slowly due to the non-indexed search. Also adds an index for ONELEVEL lookups, to speed up situations where we would need to request all entries under a particular node in the LDB.
2011-01-21Delete attributes that are removed from LDAPStephen Gallagher2-0/+125
Sometimes, a value in LDAP will cease to exist (the classic example being shadowExpire). We need to make sure we purge that value from SSSD's sysdb as well. https://fedorahosted.org/sssd/ticket/750
2011-01-14Do not throw a DP error when a netgroup is not foundStephen Gallagher1-1/+4
https://fedorahosted.org/sssd/ticket/775
2011-01-14Work around libldb bugStephen Gallagher1-2/+10
Libldb performs non-indexed searches for ONELEVEL requests. We'll use SUBTREE instead to reduce the performance hit substantially
2010-12-21Add authorizedService supportStephen Gallagher1-0/+2
https://fedorahosted.org/sssd/ticket/670
2010-12-20Add sysdb_has_enumerated and sysdb_set_enumerated helper functionsStephen Gallagher2-0/+152
Includes a unit test
2010-11-15Fix const cast issue with sysdb_attrs_users_from_str_listStephen Gallagher2-2/+2
2010-11-15Fix const cast warning for sysdb_update_membersStephen Gallagher2-4/+4
2010-11-15Sanitize sysdb DN helpersStephen Gallagher1-7/+83
2010-11-15Sanitize search filters for the sysdbStephen Gallagher1-6/+39
2010-11-15Add sysdb utility function for sanitizing DNStephen Gallagher2-0/+27
2010-10-26Always use uint32_t for UID/GID numbersJakub Hrozek2-9/+9
2010-10-18Modify sysdb_[add|remove]_group_member to accept users and groupsStephen Gallagher2-39/+91
Previously, it assumed that all members were users. This changes the interface so that either a user or a group can be specified. Also, it eliminates the need for a memory context to be passed, since the internal memory should be self-contained.
2010-10-15sysdb interface for adding fake usersJakub Hrozek2-0/+65
2010-10-15sysdb interface for adding incomplete groupsJakub Hrozek2-0/+49
Useful for optimizing the initgroups operation.
2010-10-15Add sysdb_attrs_get_ulong utility functionJakub Hrozek2-0/+29
2010-10-13Implement netgroup support for LDAP providerSumit Bose1-0/+3
2010-10-13Also return member groups to the clientSumit Bose2-60/+83
2010-10-13Add sysdb_netgroup_base_dn()Sumit Bose2-0/+8
2010-10-13Do not fail if netgroup exists just update the attributesSumit Bose1-1/+1
2010-10-13Netgroups sysdb APIStephen Gallagher4-2/+802
2010-09-22Fix sysdb_attrs_to_listJakub Hrozek1-2/+2
2010-09-22Fix sysdb_group_dn_nameJakub Hrozek1-1/+8
2010-09-22Initgroups on a non-cached user should go to the data providerStephen Gallagher1-1/+11
We were accidentally returning an error when sysdb_getpwnam() returned zero results internally in sysdb_initgroups(). The correct behavior here is to return EOK and a result object with zero entries.
2010-09-22Fix missing variable substitution in DEBUG messageStephen Gallagher1-2/+2
2010-09-15Define objectclass with a constantJakub Hrozek2-3/+4
Use a #define instead of hardcoded string
2010-09-08Dead assignments cleanup in various places in SSSDJan Zeleny1-0/+3
Three assignments deleted, two return code inspection added. Also found and fixed one critical bug caused by dead assignment. Ticket: #590
2010-09-08Move crypto functions into its own subdirJakub Hrozek1-1/+1
A refactoring patch that creates a common util/crypto subdir with per-implementation subdirectories for each underlying crypto library supported by SSSD.
2010-08-03Add sysdb_update_members functionStephen Gallagher2-0/+61
This function will take a user, a list of groups that this user should be added to and a list of groups the user should be removed from and will recursively call sysdb_[add|remove]_group_member Includes a unit test
2010-08-03Add sysdb_group_dn_name utility functionStephen Gallagher2-0/+24
2010-08-03Add sysdb_attrs_to_list() utility functionStephen Gallagher2-0/+81
2010-06-02Add sysdb_attrs_get_string_array()Sumit Bose2-0/+35
2010-05-27Add ldap_access_filter optionStephen Gallagher2-0/+12
This option (applicable to access_provider=ldap) allows the admin to set an additional LDAP search filter that must match in order for a user to be granted access to the system. Common examples for this would be limiting access to users by in a particular group, for example: ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com
2010-05-26Add support for delayed kinit if offlineSumit Bose2-2/+13
If the configuration option krb5_store_password_if_offline is set to true and the backend is offline the plain text user password is stored and used to request a TGT if the backend becomes online. If available the Linux kernel key retention service is used.
2010-04-12sysydb: Finally stop using a common event contextSimo Sorce3-23/+7
This commit completes the migration to a synchronous sysdb
2010-04-12sysdb: remove remaining traces of sysdb_handleSimo Sorce3-222/+0
2010-04-12sysdb: remove obsolete helpers from sysdbSimo Sorce2-158/+0
2010-04-12sysdb: convert sysdb_initgroupsSimo Sorce2-96/+49
2010-04-12sysdb: convert sysdb_enumgrentSimo Sorce2-56/+34
2010-04-12sysdb: convert sysdb_enumpwentSimo Sorce2-55/+23
2010-04-12sysdb: convert sysdb_get_user_attrSimo Sorce2-18/+23
2010-04-12sysdb: convert sysdb_getgrgidSimo Sorce2-22/+34
2010-04-12sysdb: convert sysdb_getgrnamSimo Sorce2-18/+47
2010-04-12sysdb: convert sysdb_getpwuidSimo Sorce2-19/+23
2010-04-12sysdb: convert sysdb_getpwnamSimo Sorce2-18/+22
2010-04-12sysdb: add automatic transactions where neededSimo Sorce1-7/+47
Only functions that do multiple operations need explicit transactions as ldb_add/ldb_modify/ldb_delete already start transactions automatically intenrally.
2010-04-12sysdb: remove async transactionsSimo Sorce2-157/+0
not used anymore
2010-04-12sysdb: add synchronous transaction functionsSimo Sorce2-14/+37
2010-04-12sysdb: remove sysdb_check_handleSimo Sorce1-90/+0
not used anymore
2010-04-12sysdb: convert sysdb_cache_authSimo Sorce2-178/+79