Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-07-06 | KRB5: Drop memctx parameter of krb5_try_kdcip | Stephen Gallagher | 1 | -1/+1 | |
This function is not supposed to return any newly-allocated memory directly. It was actually leaking the memory for krb5_servers if krb5_kdcip was being used, though it was undetectable because it was allocated on the provided memctx. This patch removes the memctx parameter and allocates krb5_servers temporarily on NULL and ensures that it is freed on all exit conditions. It is not necessary to retain this memory, as dp_opt_set_string() performs a talloc_strdup onto the appropriate context internally. It also updates the DEBUG messages for this function to the appropriate new macro levels. | |||||
2012-07-02 | IPA: Don't hang onto memory longer than necessary | Stephen Gallagher | 1 | -0/+1 | |
This request and attached memory would be freed at the end of access-check processing, but it's a waste to keep it around. | |||||
2012-06-29 | sudo: add host info options | Pavel Březina | 1 | -0/+5 | |
Adds some option that allows to manually configure a host filter. ldap_sudo_use_host_filter - if false, we will download all rules regardless their sudoHost attribute ldap_sudo_hostnames - list hostnames and/or fqdn that should be downloaded, separated with spaces ldap_sudo_ip - list of IPv4/6 address and/or network that should be downloaded, separated with spaces ldap_sudo_include_netgroups - include rules that contains netgroup in sudoHost ldap_sudo_include_regexp - include rules that contains regular expression in sudoHost | |||||
2012-06-29 | sudo provider: add ldap_sudo_smart_refresh_interval | Pavel Březina | 1 | -0/+1 | |
2012-06-29 | sudo provider: remove old timer | Pavel Březina | 1 | -2/+0 | |
2012-06-29 | sudo provider: add ldap_sudo_full_refresh_interval | Pavel Březina | 1 | -0/+1 | |
2012-06-21 | Add support for ID ranges | Sumit Bose | 6 | -10/+197 | |
2012-06-14 | Make krb5_ccname_template and krb5_ccachedir configurable | Jakub Hrozek | 1 | -2/+2 | |
2012-06-13 | LDAP: Add ldap_*_use_matching_rule_in_chain options | Stephen Gallagher | 1 | -0/+2 | |
2012-06-10 | IPA subdomains - ask for information about master domain | Jan Zeleny | 6 | -17/+164 | |
The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain. | |||||
2012-05-31 | Add support for filtering atributes | Jan Zeleny | 5 | -7/+12 | |
This patch adds support for filtering attributes when constructing attribute list from a map for LDAP query. | |||||
2012-05-22 | Fixed issue in SELinux user maps | Jan Zeleny | 1 | -0/+2 | |
There was an issue when IPA provider didn't set PAM_SUCCESS when successfully finished loading SELinux user maps. This lead to the map not being read in the responder. | |||||
2012-05-10 | Filter out IP addresses inappropriate for DNS forward records | Jakub Hrozek | 1 | -1/+57 | |
https://fedorahosted.org/sssd/ticket/949 | |||||
2012-05-10 | LDAP: Add attr_count return value to build_attrs_from_map() | Stephen Gallagher | 5 | -7/+8 | |
This is necessary because in several places in the code, we are appending to the attrs returned from this value, and if we relied on the map size macro, we would be appending after the NULL terminator if one or more attributes were defined as NULL. | |||||
2012-05-03 | LDAP: Map the user's primaryGroupID | Stephen Gallagher | 1 | -0/+1 | |
2012-05-03 | LDAP: Allow setting a default domain for id-mapping slice 0 | Stephen Gallagher | 1 | -0/+2 | |
2012-05-03 | LDAP: Add autorid compatibility mode | Stephen Gallagher | 1 | -0/+1 | |
2012-05-03 | LDAP: Add ID mapping range settings | Stephen Gallagher | 1 | -0/+3 | |
2012-05-03 | LDAP: Add id-mapping option | Stephen Gallagher | 1 | -0/+1 | |
2012-05-03 | LDAP: Add objectSID config option | Stephen Gallagher | 1 | -0/+2 | |
2012-05-03 | SSH: Add dp_get_host_send to common responder code | Jakub Hrozek | 1 | -9/+6 | |
Instead of using account_info request, creates a new ssh specific request. This improves code readability and will make the code more flexible in the future. https://fedorahosted.org/sssd/ticket/1176 | |||||
2012-05-03 | IPA: Check return values | Jakub Hrozek | 2 | -2/+12 | |
2012-05-02 | HBAC: Prevent NULL dereference in hbac_evaluate | Jakub Hrozek | 1 | -2/+4 | |
'info' is optional parameter and can be set to NULL | |||||
2012-05-02 | ipa_get_config_send: remove unused assignment | Jakub Hrozek | 1 | -1/+0 | |
2012-05-02 | IPA netgroups: return EOK when there are no netgroups to process | Jakub Hrozek | 1 | -0/+1 | |
If the code fell through the loop, ret would have been random value. | |||||
2012-05-01 | execv, excvp and exec_child never return EOK | Stef Walter | 1 | -5/+3 | |
* So don't need to handle that case | |||||
2012-04-24 | Utilize sysdb context within be_req in HBAC | Jan Zeleny | 1 | -2/+2 | |
2012-04-24 | Detect subdomain request in IPA access provider | Jan Zeleny | 1 | -0/+10 | |
2012-04-24 | Accept be_req instead if be_ctx in LDAP access provider | Jan Zeleny | 1 | -1/+1 | |
2012-04-24 | Basic support for subdomains in auth provider | Jan Zeleny | 1 | -0/+6 | |
2012-04-24 | Add ID operations in subdomains | Jan Zeleny | 3 | -0/+276 | |
2012-04-24 | Add s2n extended operation | Sumit Bose | 2 | -0/+667 | |
2012-04-24 | IPA: Add get-domains target | Sumit Bose | 6 | -0/+425 | |
2012-04-18 | Prevent printing NULL from DEBUG messages | Jakub Hrozek | 3 | -4/+4 | |
2012-04-13 | Remove forgotten DEBUG message | Jakub Hrozek | 1 | -2/+0 | |
2012-04-05 | Use HTML_TIMESTAMP instead of HTML_FOOTER_DESCRIPTION | Jakub Hrozek | 1 | -3/+4 | |
https://fedorahosted.org/sssd/ticket/1271 | |||||
2012-03-29 | Return correct resolv_status on resolver timeout | Jakub Hrozek | 1 | -1/+6 | |
https://fedorahosted.org/sssd/ticket/1274 | |||||
2012-03-28 | Remove old compatibility tests | Stephen Gallagher | 2 | -31/+0 | |
These are now replaced by the more accurate tests. This patch also drops the runtime option-count check, since we are always performing the more complete check at build-time. | |||||
2012-03-28 | Add terminator for sdap_attr_map | Stephen Gallagher | 1 | -8/+18 | |
2012-03-28 | Add terminator for dp_option | Stephen Gallagher | 1 | -3/+6 | |
2012-03-28 | Put dp_option maps in their own file | Stephen Gallagher | 2 | -215/+249 | |
There is no functional change due to this patch. | |||||
2012-03-16 | IPA: Allow service lookups | Stephen Gallagher | 1 | -0/+1 | |
2012-03-12 | IPA: Initialize hbac_ctx to NULL | Stephen Gallagher | 1 | -1/+1 | |
2012-03-09 | IPA: Check nsAccountLock during PAM_ACCT_MGMT | Stephen Gallagher | 4 | -1/+69 | |
https://fedorahosted.org/sssd/ticket/1227 | |||||
2012-03-05 | IPA: Fix segfault with srchost functionality enabled | Stephen Gallagher | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1215 | |||||
2012-03-01 | IPA: Set the DNS discovery domain to match ipa_domain | Stephen Gallagher | 1 | -1/+3 | |
https://fedorahosted.org/sssd/ticket/1217 | |||||
2012-02-26 | SSH: Save SSH host name aliases | Jan Cholasta | 1 | -29/+8 | |
2012-02-24 | Delete missing attributes from netgroups to be stored | Jan Zeleny | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1136 | |||||
2012-02-24 | IPA hosts refactoring | Jan Zeleny | 15 | -152/+132 | |
2012-02-24 | LDAP: Only use paging control on requests for multiple entries | Stephen Gallagher | 6 | -15/+21 | |
The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one |