Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2013-01-15 | Add domain arguments to sysdb_add_group functions. | Simo Sorce | 1 | -2/+2 | |
2013-01-15 | Add domain to sysdb_search_group_by_name() | Simo Sorce | 1 | -6/+12 | |
Also remove unused sysdb_search_domgroup_by_name() | |||||
2013-01-15 | Add domain to sysdb_search_user_by_name() | Simo Sorce | 1 | -10/+22 | |
Also remove unused sysdb_search_domuser_by_name() | |||||
2012-12-10 | LDAP: remove dead assignment | Jakub Hrozek | 1 | -1/+0 | |
2012-12-05 | LDAP: Continue adjusting group membership even if there is nothing to add | Jakub Hrozek | 1 | -2/+1 | |
https://fedorahosted.org/sssd/ticket/1695 | |||||
2012-09-24 | sdap_add_incomplete_groups(): fix ret may be uninitialized warning | Pavel Březina | 1 | -1/+1 | |
2012-09-24 | AD: Optimize initgroups lookups with tokenGroups | Stephen Gallagher | 1 | -4/+20 | |
https://fedorahosted.org/sssd/ticket/1355 | |||||
2012-08-23 | Unify usage of sysdb transactions | Michal Zidek | 1 | -27/+47 | |
Removing bad examples of usage of sysdb_transaction_start/commit/end functions and making it more consistent (all files except of src/db/sysdb_*.c). | |||||
2012-08-21 | Remove compilation warning: ret may be uninitialized | Pavel Březina | 1 | -0/+2 | |
2012-08-21 | Process all groups from a single nesting level | Jakub Hrozek | 1 | -4/+14 | |
https://bugzilla.redhat.com/show_bug.cgi?id=846664 If the first group was cached when processing the nested group membership, we would call tevent_req_done, effectivelly marking the whole nesting level as done. | |||||
2012-08-10 | When ldap_group_nesting_level was reached, the LDAP provider tried to link ↵ | Michal Zidek | 1 | -1/+45 | |
group members with groups outside nesting limit. https://fedorahosted.org/sssd/ticket/1194 | |||||
2012-06-13 | LDAP: Auto-detect support for the ldap match rule | Stephen Gallagher | 1 | -1/+3 | |
This patch extends the RootDSE lookup so that we will perform a second request to test whether the match rule syntax can be used. If both groups and initgroups are disabled in the configuration, this lookup request can be skipped. | |||||
2012-06-13 | LDAP: Add support for AD chain matching extension in initgroups | Stephen Gallagher | 1 | -9/+20 | |
2012-06-12 | LDAP: Make sdap_initgr_common_store() non-static | Stephen Gallagher | 1 | -7/+7 | |
Move it to a private header so it can be reused by other initgroups C files. | |||||
2012-06-12 | LDAP: Add helper function to get list of a user's groups from sysdb | Stephen Gallagher | 1 | -33/+64 | |
2012-06-12 | LDAP: Fix incorrect switch statement in sdap_get_initgr_done() | Stephen Gallagher | 1 | -1/+1 | |
SDAP_SCHEMA_AD needs to be calling sdap_initgr_rfc2307bis_recv(), not sdap_initgr_nested_recv(). By coincidence both recv functions happened to be identical, but if one or the other changed, this would break unexpectedly. | |||||
2012-05-31 | Utilize attribute exclusion in LDAP initgroups | Jan Zeleny | 1 | -3/+33 | |
Previous patch added the possibility to exclude some attributes from a map when building an attribute list to be sent to server. The original reason for this functionality is the code handling LDAP initgroups. In this code, there is no need to fetch members of groups in question. This can save some performance since the list of members can be pretty long in some cases. This case apllies only to RFC2307 and generic RFC2307bis, it doesn't apply for IPA schema. | |||||
2012-05-31 | Add support for filtering atributes | Jan Zeleny | 1 | -10/+10 | |
This patch adds support for filtering attributes when constructing attribute list from a map for LDAP query. | |||||
2012-05-31 | Ghost members - removed sdap_check_aliases() | Jan Zeleny | 1 | -7/+0 | |
This function is no longer necessary because we don't have fake user entries any more. The original purpose of this function was to check if there are fake user entries for particular user and, if yes, to update its membership. | |||||
2012-05-10 | LDAP: Add attr_count return value to build_attrs_from_map() | Stephen Gallagher | 1 | -5/+5 | |
This is necessary because in several places in the code, we are appending to the attrs returned from this value, and if we relied on the map size macro, we would be appending after the NULL terminator if one or more attributes were defined as NULL. | |||||
2012-05-03 | LDAP: Treat groups with unmappable SIDs as non-POSIX groups | Stephen Gallagher | 1 | -9/+12 | |
2012-05-03 | LDAP: Add helper function to map IDs | Stephen Gallagher | 1 | -16/+5 | |
This function will also auto-create a new ID map if the domain has not been seen previously. | |||||
2012-05-03 | LDAP: Add helper routine to convert LDAP blob to SID string | Stephen Gallagher | 1 | -28/+144 | |
2012-03-08 | Fix nested groups processing | Jakub Hrozek | 1 | -26/+60 | |
Instead of keeping the number of parent groups in "state" and having to reset the count when moving to another group on the same level, keep track of the all groups on a particular level along with their parents and parent count. | |||||
2012-03-05 | Use proper errno code | Jakub Hrozek | 1 | -1/+1 | |
2012-02-24 | Modifications to simplify list_missing_attrs | Jan Zeleny | 1 | -1/+1 | |
2012-02-24 | LDAP: Only use paging control on requests for multiple entries | Stephen Gallagher | 1 | -6/+12 | |
The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one | |||||
2012-02-23 | LDAP: Properly assign orig_dn | Stephen Gallagher | 1 | -0/+1 | |
This was only used for properly identifying debug messages. | |||||
2012-02-14 | Fix memory hierarchy when processing nested group memberships | Jakub Hrozek | 1 | -6/+8 | |
https://fedorahosted.org/sssd/ticket/1186 | |||||
2012-02-04 | LDAP: Fix incorrect search timeouts | Stephen Gallagher | 1 | -1/+1 | |
2012-02-04 | LDAP: Do not fail if RootDSE check cannot determine search bases | Stephen Gallagher | 1 | -1/+34 | |
https://fedorahosted.org/sssd/ticket/1152 | |||||
2011-12-16 | Use the case sensitivity flag in the LDAP provider | Jakub Hrozek | 1 | -4/+13 | |
2011-11-30 | Use dereference during IPA provider initgroups | Jakub Hrozek | 1 | -40/+149 | |
https://fedorahosted.org/sssd/ticket/1099 | |||||
2011-11-22 | Cleanup: Remove unused parameters | Jakub Hrozek | 1 | -16/+7 | |
2011-11-11 | Squash transactions in sdap_initgr_common_store | Jakub Hrozek | 1 | -6/+25 | |
https://fedorahosted.org/sssd/ticket/1053 | |||||
2011-11-07 | Use correct state struct in sdap_initgr_rfc2307bis_next_base | Jakub Hrozek | 1 | -2/+3 | |
2011-11-07 | Fix segfault in sdap_get_initgr_user | Jakub Hrozek | 1 | -1/+2 | |
2011-11-02 | LDAP: Add multiple search bases for initgroups (RFC2307bis groups) | Stephen Gallagher | 1 | -77/+225 | |
2011-11-02 | LDAP: Add multiple search bases for initgroups (RFC2307 groups) | Stephen Gallagher | 1 | -17/+99 | |
2011-11-02 | LDAP: Add multiple search bases for initgroups (users) | Stephen Gallagher | 1 | -30/+72 | |
2011-10-31 | Steal result onto mem_ctx in sdap_initgr_nested_get_direct_parents | Jakub Hrozek | 1 | -2/+1 | |
2011-10-31 | RFC2307bis initgroups: fix nested groups processing | Jakub Hrozek | 1 | -20/+33 | |
Due to incorrectly written loop, SSSD would go into infitite loop if it processed the same group on two different levels of membership. | |||||
2011-10-25 | Plug memory leaks in LDAP provider | Jakub Hrozek | 1 | -0/+3 | |
2011-10-17 | Cancel transactions correctly during initgroups | Jakub Hrozek | 1 | -13/+31 | |
2011-10-17 | Use fewer transactions during IPA initgroups | Jakub Hrozek | 1 | -171/+273 | |
2011-10-17 | Use fewer transactions during RFC2307bis initgroups | Jakub Hrozek | 1 | -346/+366 | |
2011-10-17 | Utility functions for LDAP nested schema initgroups | Jakub Hrozek | 1 | -0/+119 | |
2011-10-13 | SysDB commands that save lastUpdate allows this value to be passed in | Pavel Březina | 1 | -2/+4 | |
https://fedorahosted.org/sssd/ticket/836 | |||||
2011-09-28 | Store name aliases for users, groups | Jakub Hrozek | 1 | -0/+7 | |
Also checks fake users for aliases when storing a real users so that getgrnam for a RFC2307 group that references a user by his secondary name followed by getpwnam for this user by his primary name works | |||||
2011-09-28 | Add a sysdb_get_direct_parents function | Jakub Hrozek | 1 | -57/+5 | |