summaryrefslogtreecommitdiff
path: root/src/providers/dp_backend.h
AgeCommit message (Collapse)AuthorFilesLines
2012-09-13FO: Check server validity before setting statusJakub Hrozek1-0/+1
The list of resolved servers is allocated on the back end context and kept in the fo_service structure. However, a single request often resolves a server and keeps a pointer until the end of a request and only then gives feedback about the server based on the request result. This presents a big race condition in case the SRV resolution is used. When there are requests coming in in parallel, it is possible that an incoming request will invalidate a server until another request that holds a pointer to the original server is able to give a feedback. This patch simply checks if a server is in the list of servers maintained by a service before reading its status. https://fedorahosted.org/sssd/ticket/1364
2012-08-15Duplicate detection in fail over did not work.Michal Zidek1-1/+2
https://fedorahosted.org/sssd/ticket/1472
2012-08-01Change refreshing of subdomainsSimo Sorce1-1/+0
This patch keeps a local copy of the subdomains in the ipa subdomains plugin context. This has 2 advantages: 1. allows to check if anything changed w/o always hitting the sysdb. 2. later will allows us to dump this information w/o having to retrieve it again. The timestamp also allows to avoid refreshing too often.
2012-08-01Use a more tractable name for subdomain requestSimo Sorce1-1/+1
I am all for readable names, but there is a tradeof between expressing purpose and compactness.
2012-08-01Change subdomain_infoSimo Sorce1-1/+1
Rename the structure to use a standard name prefix so it is properly name-spaced, in preparation for changing the structure itself.
2012-08-01Primary server support: basic support in failover codeJan Zeleny1-1/+2
Now there are two list of servers for each service. If currently selected server is only backup, then an event will be scheduled which tries to get connection to one of primary servers and if it succeeds, it starts using this server instead of the one which is currently connected to.
2012-08-01Primary server support: introduce concept of reconnectionJan Zeleny1-0/+8
This patch adds two support functions for adding reconnection callbacks and invoking such callbacks. The concept of reconnection is simple: stop using current connection for for new queries to the server without actually going offline.
2012-07-27Remove unused member of be_reqJan Zeleny1-3/+0
2012-07-27Move SELinux processing from session to account PAM stackJan Zeleny1-0/+8
The idea is to rename session provider to selinux provider. Processing of SELinux rules has to be performed in account stack in order to ensure that pam_selinux (which is the first module in PAM session stack) will get the correct input from SSSD. Processing of account PAM stack is bound to access provider. That means we need to have two providers executed when SSS_PAM_ACCT_MGMT message is received from PAM responder. Change in data_provider_be.c ensures just that - after access provider finishes its actions, the control is given to selinux provider and only after this provider finishes is the result returned to PAM responder.
2012-07-27Renamed session provider to selinux providerJan Zeleny1-1/+1
2012-06-29sudo: clean upPavel Březina1-4/+0
2012-06-29sudo ldap provider: add support for on demand refresh of specific rulesPavel Březina1-0/+2
2012-05-03SSH: Add dp_get_host_send to common responder codeJakub Hrozek1-0/+7
Instead of using account_info request, creates a new ssh specific request. This improves code readability and will make the code more flexible in the future. https://fedorahosted.org/sssd/ticket/1176
2012-04-24Carry sysdb context and domain info in be_req structureJan Zeleny1-0/+3
2012-04-24Add domain name to get_account_info requestSumit Bose1-0/+1
2012-04-24data provider: added subdomainsSumit Bose1-0/+7
2012-03-08Detect cycle in the fail over on subsequent resolve requests onlyJakub Hrozek1-1/+2
2012-03-06Only do one cycle when resolving a serverJakub Hrozek1-0/+5
https://fedorahosted.org/sssd/ticket/1214
2012-03-01IPA: Set the DNS discovery domain to match ipa_domainStephen Gallagher1-2/+5
https://fedorahosted.org/sssd/ticket/1217
2012-02-07SSH: ResponderJan Cholasta1-0/+1
2012-02-07DP: Add host info handlerJan Cholasta1-0/+1
2012-02-06Add session target in data providerJan Zeleny1-0/+1
2012-02-05AUTOFS: Data Provider requestJakub Hrozek1-0/+6
2012-01-27SUDO Integration - prepare data provider for new responder commandsPavel Březina1-0/+3
https://fedorahosted.org/sssd/ticket/1143
2012-01-27DP: Handle parsing extra results in be_get_account_infoStephen Gallagher1-0/+1
2011-12-19Move child_common routines to utilStephen Gallagher1-1/+1
2011-12-19Add common SIGCHLD handling for providers.Pavel Zuna1-0/+2
2011-12-16SUDO integration - data provider backend handlerPavel Březina1-0/+6
2010-12-01Run checks before resetting offline stateSumit Bose1-0/+3
Before setting the backend to online during a reset offline request the check_online method if the ID provider is called. If the check_online method returns that the ID provider is still not reachable the backend stays offline. Otherwise the backend is switched to online and the related callbacks are run. Additionally the check online test is called during the res_init request because a change in /etc/resolve.conf might also make a server reachable which was assumed offline before.
2010-12-01Allow protocol fallback for SRV queriesJakub Hrozek1-2/+8
https://fedorahosted.org/sssd/ticket/691
2010-07-09Add an interface to try next fail-over server after connection to the active ↵eindenbom1-0/+6
server was unexpectedly dropped.
2010-07-09Added an interface to query number of configured (and currently resolved ↵eindenbom1-0/+1
through SRV records) failover servers.
2010-06-30Add dns_discovery_domain optionJakub Hrozek1-1/+2
The service discovery used to use the SSSD domain name to perform DNS queries. This is not an optimal solution, for example from the point of view of authconfig. This patch introduces a new option "dns_discovery_domain" that allows to set the domain part of a DNS SRV query. If this option is not set, the default behavior is to use the domain part of the machine's hostname. Fixes: #479
2010-05-27Add run_callbacks flagSumit Bose1-0/+2
2010-05-27Add offline callbacksSumit Bose1-1/+9
2010-05-27Refactor data provider callbacksSumit Bose1-5/+5
2010-05-07Use service discovery in backendsJakub Hrozek1-0/+9
Integrate the failover improvements with our back ends. The DNS domain used in the SRV query is always the SSSD domain name. Please note that this patch changes the default value of ldap_uri from "ldap://localhost" to "NULL" in order to use service discovery with no server set.
2010-05-07Add callback when the ID provider switches from offline to onlineStephen Gallagher1-0/+17
Allow backends to set a callback in the be_ctx that should be invoked when the ID provider goes online. This can be used to perform regular maintenance tasks that are valid only when going online.
2010-05-03Better handle sdap_handle memory from callers.Simo Sorce1-0/+4
Always just mark the sdap_handle as not connected and let later _send() functions to take care of freeing the handle before reconnecting. Introduce restart functions to avoid calling _send() functions in _done() functions error paths as this would have the same effect as directly freeing the sdap_handle and cause access to freed memory in sdap_handle_release() By freeing sdap_handle only in the connection _recv() function we guarantee it can never be done within sdap_handle_release() but only in a following event.
2010-02-18Rename server/ directory to src/Stephen Gallagher1-0/+142
Also update BUILD.txt