summaryrefslogtreecommitdiff
path: root/src/providers/dp_backend.h
AgeCommit message (Collapse)AuthorFilesLines
2013-08-24DP: Notify propperly when removing PAC responderOndrej Kos1-0/+1
Adds pac_cli be_client structure pointer, to indetify and log the PAC responder termination correctly.
2013-07-18Remove unused be_ctx->sigchld_ctxJakub Hrozek1-1/+0
2013-06-10back end: add refresh expired records periodic taskPavel Březina1-0/+3
https://fedorahosted.org/sssd/ticket/1713 Add new option refresh_expired_interval.
2013-06-04Add be request queueSumit Bose1-0/+11
For some backend targets it might be not desirable to run requests in parallel but to serialize them. To avoid that each provider has to implement a queue for this target this patch implements a generic queue which collects incoming requests before they are send to the target.
2013-04-10DNS sites support - SRV DNS lookup pluginPavel Březina1-0/+3
https://fedorahosted.org/sssd/ticket/1032 This plugin mimics the current behaviour. If discovery_domain is set it is the only domain that is tried. If discovery_domain is not set, we try to autodetect domain first and if that fails or SRV lookup on this domain fails, we fallback to SSSD domain name.
2013-04-10DNS sites support - SRV lookup plugin interfacePavel Březina1-0/+7
https://fedorahosted.org/sssd/ticket/1032 Introduces two new error codes: - ERR_SRV_NOT_FOUND - ERR_SRV_LOOKUP_ERROR Since id_provider is authoritative in case of SRV plugin choise, ability to override the selected pluging during runtime is not desirable. We rely on the fact that id_provider is initialized before all other providers, thus the plugin is set correctly.
2013-04-03Init failover with be_res optionsJakub Hrozek1-0/+10
2013-03-19Provide a be_get_account_info_send functionJakub Hrozek1-0/+14
In order to resolve group names in the simple access provider we need to contact the Data Provider in a generic fashion from the access provider. We can't call any particular implementation (like sdap_generic_send()) because we have no idea what kind of provider is configured as the id_provider. This patch splits introduces the be_file_account_request() function into the data_provider_be module and makes it public. A future patch should make the be_get_account_info function use the be_get_account_info_send function.
2013-01-21Make struct be_req opaqueSimo Sorce1-18/+0
2013-01-21Add be_req_get_data() helper funciton.Simo Sorce1-0/+3
In preparation for making struct be_req opaque.
2013-01-21Add be_req_get_be_ctx() helper.Simo Sorce1-0/+1
In preparation for making be_req opaque
2013-01-21Add be_req_create() helperSimo Sorce1-0/+3
2013-01-21Introduce be_req_terminate() helperSimo Sorce1-0/+6
Call it everywhere instead of directly dereferencing be_req->fn This is in preparation of making be_req opaque.
2013-01-21Remove domain from be_req structureSimo Sorce1-2/+0
2013-01-21Remove sysdb as a be request structure memberSimo Sorce1-1/+0
The sysdb context is already available through the 'domain' context.
2013-01-21Remove sysdb as a be context structure memberSimo Sorce1-1/+0
The sysdb context is already available through the 'domain' structure.
2012-12-18DP: invalidate all cached maps if a request for auto.master comes inJakub Hrozek1-0/+1
If the Data Provider receives a request for the auto.master map, it passes on a flag to let the actual provider let know he should invalidate the existing maps
2012-09-13FO: Check server validity before setting statusJakub Hrozek1-0/+1
The list of resolved servers is allocated on the back end context and kept in the fo_service structure. However, a single request often resolves a server and keeps a pointer until the end of a request and only then gives feedback about the server based on the request result. This presents a big race condition in case the SRV resolution is used. When there are requests coming in in parallel, it is possible that an incoming request will invalidate a server until another request that holds a pointer to the original server is able to give a feedback. This patch simply checks if a server is in the list of servers maintained by a service before reading its status. https://fedorahosted.org/sssd/ticket/1364
2012-08-15Duplicate detection in fail over did not work.Michal Zidek1-1/+2
https://fedorahosted.org/sssd/ticket/1472
2012-08-01Change refreshing of subdomainsSimo Sorce1-1/+0
This patch keeps a local copy of the subdomains in the ipa subdomains plugin context. This has 2 advantages: 1. allows to check if anything changed w/o always hitting the sysdb. 2. later will allows us to dump this information w/o having to retrieve it again. The timestamp also allows to avoid refreshing too often.
2012-08-01Use a more tractable name for subdomain requestSimo Sorce1-1/+1
I am all for readable names, but there is a tradeof between expressing purpose and compactness.
2012-08-01Change subdomain_infoSimo Sorce1-1/+1
Rename the structure to use a standard name prefix so it is properly name-spaced, in preparation for changing the structure itself.
2012-08-01Primary server support: basic support in failover codeJan Zeleny1-1/+2
Now there are two list of servers for each service. If currently selected server is only backup, then an event will be scheduled which tries to get connection to one of primary servers and if it succeeds, it starts using this server instead of the one which is currently connected to.
2012-08-01Primary server support: introduce concept of reconnectionJan Zeleny1-0/+8
This patch adds two support functions for adding reconnection callbacks and invoking such callbacks. The concept of reconnection is simple: stop using current connection for for new queries to the server without actually going offline.
2012-07-27Remove unused member of be_reqJan Zeleny1-3/+0
2012-07-27Move SELinux processing from session to account PAM stackJan Zeleny1-0/+8
The idea is to rename session provider to selinux provider. Processing of SELinux rules has to be performed in account stack in order to ensure that pam_selinux (which is the first module in PAM session stack) will get the correct input from SSSD. Processing of account PAM stack is bound to access provider. That means we need to have two providers executed when SSS_PAM_ACCT_MGMT message is received from PAM responder. Change in data_provider_be.c ensures just that - after access provider finishes its actions, the control is given to selinux provider and only after this provider finishes is the result returned to PAM responder.
2012-07-27Renamed session provider to selinux providerJan Zeleny1-1/+1
2012-06-29sudo: clean upPavel Březina1-4/+0
2012-06-29sudo ldap provider: add support for on demand refresh of specific rulesPavel Březina1-0/+2
2012-05-03SSH: Add dp_get_host_send to common responder codeJakub Hrozek1-0/+7
Instead of using account_info request, creates a new ssh specific request. This improves code readability and will make the code more flexible in the future. https://fedorahosted.org/sssd/ticket/1176
2012-04-24Carry sysdb context and domain info in be_req structureJan Zeleny1-0/+3
2012-04-24Add domain name to get_account_info requestSumit Bose1-0/+1
2012-04-24data provider: added subdomainsSumit Bose1-0/+7
2012-03-08Detect cycle in the fail over on subsequent resolve requests onlyJakub Hrozek1-1/+2
2012-03-06Only do one cycle when resolving a serverJakub Hrozek1-0/+5
https://fedorahosted.org/sssd/ticket/1214
2012-03-01IPA: Set the DNS discovery domain to match ipa_domainStephen Gallagher1-2/+5
https://fedorahosted.org/sssd/ticket/1217
2012-02-07SSH: ResponderJan Cholasta1-0/+1
2012-02-07DP: Add host info handlerJan Cholasta1-0/+1
2012-02-06Add session target in data providerJan Zeleny1-0/+1
2012-02-05AUTOFS: Data Provider requestJakub Hrozek1-0/+6
2012-01-27SUDO Integration - prepare data provider for new responder commandsPavel Březina1-0/+3
https://fedorahosted.org/sssd/ticket/1143
2012-01-27DP: Handle parsing extra results in be_get_account_infoStephen Gallagher1-0/+1
2011-12-19Move child_common routines to utilStephen Gallagher1-1/+1
2011-12-19Add common SIGCHLD handling for providers.Pavel Zuna1-0/+2
2011-12-16SUDO integration - data provider backend handlerPavel Březina1-0/+6
2010-12-01Run checks before resetting offline stateSumit Bose1-0/+3
Before setting the backend to online during a reset offline request the check_online method if the ID provider is called. If the check_online method returns that the ID provider is still not reachable the backend stays offline. Otherwise the backend is switched to online and the related callbacks are run. Additionally the check online test is called during the res_init request because a change in /etc/resolve.conf might also make a server reachable which was assumed offline before.
2010-12-01Allow protocol fallback for SRV queriesJakub Hrozek1-2/+8
https://fedorahosted.org/sssd/ticket/691
2010-07-09Add an interface to try next fail-over server after connection to the active ↵eindenbom1-0/+6
server was unexpectedly dropped.
2010-07-09Added an interface to query number of configured (and currently resolved ↵eindenbom1-0/+1
through SRV records) failover servers.
2010-06-30Add dns_discovery_domain optionJakub Hrozek1-1/+2
The service discovery used to use the SSSD domain name to perform DNS queries. This is not an optimal solution, for example from the point of view of authconfig. This patch introduces a new option "dns_discovery_domain" that allows to set the domain part of a DNS SRV query. If this option is not set, the default behavior is to use the domain part of the machine's hostname. Fixes: #479
generated by cgit (git 2.34.1) at 2024-05-17 01:44:21 +0000