Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2013-01-25 | Possible null derefence in ipa_subdomains.c. | Michal Zidek | 1 | -0/+4 | |
Found by coverity. https://fedorahosted.org/sssd/ticket/1790 | |||||
2013-01-21 | Add be_req_get_data() helper funciton. | Simo Sorce | 5 | -9/+11 | |
In preparation for making struct be_req opaque. | |||||
2013-01-21 | Add be_req_get_be_ctx() helper. | Simo Sorce | 7 | -53/+61 | |
In preparation for making be_req opaque | |||||
2013-01-21 | Add be_req_create() helper | Simo Sorce | 1 | -3/+2 | |
2013-01-21 | Introduce be_req_terminate() helper | Simo Sorce | 4 | -34/+24 | |
Call it everywhere instead of directly dereferencing be_req->fn This is in preparation of making be_req opaque. | |||||
2013-01-21 | Remove domain from be_req structure | Simo Sorce | 4 | -60/+45 | |
2013-01-21 | Pass domain not be_req to access check functions | Simo Sorce | 1 | -1/+1 | |
2013-01-21 | Do not pass NULL to ipa_subdomain_retrieve() | Simo Sorce | 1 | -18/+20 | |
2013-01-21 | Move hbac_ctx_is_offline() | Simo Sorce | 2 | -7/+6 | |
2013-01-21 | Remove hbac_ctx_sdap_id_[ctx|op]() | Simo Sorce | 2 | -18/+6 | |
2013-01-21 | Remove hbac_ctx_ev() | Simo Sorce | 2 | -10/+3 | |
2013-01-21 | Remove hbac_ctx_be() | Simo Sorce | 3 | -12/+4 | |
2013-01-21 | Remove hbac_ctx_sysdb() | Simo Sorce | 2 | -12/+4 | |
2013-01-21 | Remove sysdb argument from hbac_get_cached_rules() | Simo Sorce | 3 | -9/+6 | |
2013-01-21 | Remove sysdb arg from [ipa_]hbac_sysdb_save() | Simo Sorce | 3 | -36/+25 | |
Also make ipa_hbac_save_list() static | |||||
2013-01-21 | Remove sysdb arg from ipa_hbac_service_info_send() | Simo Sorce | 3 | -5/+0 | |
2013-01-21 | Remove sysdb arg from hbac_*host_attrs_to_rule() | Simo Sorce | 3 | -11/+4 | |
2013-01-21 | Remove sysdb arg from hbac_service_attrs_to_rule() | Simo Sorce | 3 | -5/+2 | |
2013-01-21 | Remove sysdb argument from hbac_user_attrs_to_rule() | Simo Sorce | 3 | -6/+4 | |
2013-01-21 | Remove unused structure | Simo Sorce | 1 | -6/+0 | |
2013-01-21 | Remove sysdb argument from ipa_host_info_send() | Simo Sorce | 5 | -9/+3 | |
2013-01-21 | Remove sysdb as a be request structure member | Simo Sorce | 3 | -7/+7 | |
The sysdb context is already available through the 'domain' context. | |||||
2013-01-21 | Remove sysdb as a be context structure member | Simo Sorce | 5 | -13/+13 | |
The sysdb context is already available through the 'domain' structure. | |||||
2013-01-15 | Add domain to some subdomain functions | Simo Sorce | 1 | -2/+7 | |
2013-01-15 | Add domain arguments to sysdb ssh functions | Simo Sorce | 1 | -1/+2 | |
2013-01-15 | Add domain argument to sysdb selinux functions | Simo Sorce | 3 | -4/+9 | |
2013-01-15 | Add domain arg to sysdb_search/delete_netgroup() | Simo Sorce | 1 | -1/+1 | |
2013-01-15 | Add domain argument to sysdb_search_groups() | Simo Sorce | 1 | -1/+1 | |
2013-01-15 | Add domain arg to sysdb_search_users() | Simo Sorce | 3 | -1/+5 | |
2013-01-15 | Add domain argument to sysdb_search_custom() | Simo Sorce | 7 | -8/+22 | |
Also changes sysdb_search_custom_by_name() | |||||
2013-01-15 | Add domain argument to sysdb_store_custom() | Simo Sorce | 1 | -1/+1 | |
2013-01-15 | Add domain argument to sysdb_store_group() | Simo Sorce | 1 | -3/+2 | |
Also remove sysdb_store_domgroup() | |||||
2013-01-15 | Add domain argument to sysdb_store_user() | Simo Sorce | 1 | -5/+4 | |
Also remove sysdb_store_domuser() | |||||
2013-01-15 | Add domain arguments to sysdb_add_inetgroup fns. | Simo Sorce | 1 | -1/+1 | |
2013-01-15 | Add domain to sysdb_search_user_by_name() | Simo Sorce | 3 | -4/+8 | |
Also remove unused sysdb_search_domuser_by_name() | |||||
2013-01-15 | Make sysdb_custom_subtree_dn() require a domain. | Simo Sorce | 2 | -2/+2 | |
2013-01-15 | Make sysdb_custom_dn() require a domain. | Simo Sorce | 2 | -5/+9 | |
2013-01-15 | Remove the sysdb_ctx_get_domain() function. | Simo Sorce | 1 | -1/+4 | |
We are deprecating sysdb->domain so kill the function that gives access to this member as we should stop relying on it being available (or correct). | |||||
2013-01-10 | Change pam data auth tokens. | Simo Sorce | 1 | -5/+1 | |
Use the new authtok abstraction and interfaces throught the code. | |||||
2013-01-08 | IPA: Rename IPA_CONFIG_SELINUX_DEFAULT_MAP | Jakub Hrozek | 3 | -4/+6 | |
It is not a map, but a default context. The name should reflect that. | |||||
2013-01-08 | SELINUX: Process maps even when offline | Jakub Hrozek | 1 | -226/+429 | |
Changes the ipa_get_selinux{send,recv} request so that it only delivers data and moves processing to the IPA selinux handler. | |||||
2013-01-08 | SYSDB: Remove duplicate selinux defines | Jakub Hrozek | 1 | -0/+1 | |
2013-01-02 | failover: Protect against empty host names | Michal Zidek | 1 | -1/+1 | |
Added new parameter to split_on_separator that allows to skip empty values. The whole function was rewritten. Unit test case was added to check the new implementation. https://fedorahosted.org/sssd/ticket/1484 | |||||
2012-12-04 | Use an entry type mask macro to filter entry types | Simo Sorce | 2 | -3/+3 | |
Avoids hardcoding magic numbers everywhere and self documents why a mask is being applied. | |||||
2012-12-04 | Streamline ipa_account_info handler | Simo Sorce | 1 | -74/+55 | |
In particular note that we merge ipa_account_info_netgroups_done() and ipa_account_info_users_done() into a single fucntion called ipa_account_info_done() that handles both cases We also remove the auxiliary function ipa_account_info_complete() that unnecessarily violates the tevent_req style and instead use a new function named ipa_account_info_error_text() to generate error text. | |||||
2012-12-04 | Fix tevent_req style for get_netgroup in ipa_id | Simo Sorce | 1 | -80/+71 | |
Also do not intermix two tevent_req sequences | |||||
2012-12-04 | Fix ipa_subdomain_id names and tevent_req style | Simo Sorce | 3 | -52/+36 | |
2012-12-02 | IPA: Handle bad results from c-ares lookup | Stephen Gallagher | 1 | -1/+11 | |
In some situations, the c-ares lookup can return NULL instead of a list of addresses. In this situation, we need to avoid dereferencing NULL. This patch adds a log message and sets the count to zero so it is handled appropriately below. | |||||
2012-11-20 | fix SIGSEGV in IPA provider when ldap_sasl_authid is not set | Pavel Březina | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1657 IPA_HOSTNAME is not stored in ipa_opts->id options so it the option was always NULL here. This caused SIGSEGV when accessed by strchr() in subsequent function. | |||||
2012-11-20 | LDAP: Only convert direct parents' ghost attribute to member | Jakub Hrozek | 1 | -1/+0 | |
https://fedorahosted.org/sssd/ticket/1612 This patch changes the handling of ghost attributes when saving the actual user entry. Instead of always linking all groups that contained the ghost attribute with the new user entry, the original member attributes are now saved in the group object and the user entry is only linked with its direct parents. As the member attribute is compared against the originalDN of the user, if either the originalDN or the originalMember attributes are missing, the user object is linked with all the groups as a fallback. The original member attributes are only saved if the LDAP schema supports nesting. |