sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-06-07	LDAP: sdap_id_ctx might contain several connections	Jakub Hrozek	1	-31/+32
	With some LDAP server implementations, one server might provide different "views" of the identites on different ports. One example is the Active Directory Global catalog. The provider would contact different view depending on which operation it is performing and against which SSSD domain. At the same time, these views run on the same server, which means the same server options, enumeration, cleanup or Kerberos service should be used. So instead of using several different failover ports or several instances of sdap_id_ctx, this patch introduces a new "struct sdap_id_conn_ctx" that contains the connection cache to the particular view and an instance of "struct sdap_options" that contains the URI. No functional changes are present in this patch, currently all providers use a single connection. Multiple connections will be used later in the upcoming patches.
2012-09-05	Don't terminate the same connection twice	Jakub Hrozek	1	-6/+0
	https://fedorahosted.org/sssd/ticket/1488
2012-08-23	Clean up cache on server reinitialization	Pavel Březina	1	-0/+38
	https://fedorahosted.org/sssd/ticket/734 We successfully detect when the server is reinitialized by testing the new lastUSN value. The maximum USN values are set to zero, but the current cache content remains. This patch removes records that were deleted from the server. It uses the following approach: 1. remove entryUSN attribute from all entries 2. run enumeration 3. remove records that doesn't have entryUSN attribute updated We don't need to do this for sudo rules, they will be refreshed automatically during next smart/full refresh, or when an expired rule is deleted.
2012-08-01	Primary server support: support for "disconnecting" connections in LDAP	Jan Zeleny	1	-4/+37
	This patch adds support for marking existing connections as being disconnected. Each such connection can't be used for new queries and a new one has to be created instead if necessary. This will ensure that pending operations will end gracefully during reconnection. Also all new queries to the server we are reconnecting to will use another (probably newly created) connection.
2012-06-29	ldap provider: add sudo usn value	Pavel Březina	1	-0/+1

2012-01-31	LDAP: Add enumeration support for services	Stephen Gallagher	1	-0/+1

2011-11-29	Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connections	Jakub Hrozek	1	-1/+3

2011-05-04	Fixed lastUSN checking improvements	Jan Zeleny	1	-2/+2
	This patch fixes some issues with setting lastUSN attribute and it adds check against the highest user/group USN after enumeration to keep better track of the real highest USN. Optimal solution here would be to schedule a check of rootDSE entry right after the enumeration finishes, but for the moment this is good enough.
2011-04-19	Add last usn checking after reconnection	Jan Zeleny	1	-0/+15
	When reconnecting to the LDAP server supporting USNs (either because of new incomming id operation or invokation of callback responsible for checking status of the backend), detect whether the highest USN is lower than the one SSSD has recorded. If so, setup enumeration/cleanup to refresh potentionally changed account information in the SSSD cache. Related ticket: https://fedorahosted.org/sssd/ticket/734
2011-03-14	Fix one unlikely case of failure in sdap_id_op module	Jan Zeleny	1	-1/+3
	There can be an unlikely scenario when the first part of sdap_id_op_connect_done works fine and there is no need to mark backend offline. But right after the check, the memory allocation can fail in which case the backend needs to be marked offline along with disabled reconnecting.
2010-12-07	ldap: Use USN entries if available.	Simo Sorce	1	-1/+2
	Otherwise fallback to the default modifyTimestamp indicator
2010-12-07	ldap: add checks to determine if USN features are available.	Simo Sorce	1	-4/+5

2010-12-07	ldap: remove variable that was never assigned nor used	Simo Sorce	1	-8/+0

2010-12-07	Pass sdap_id_ctx in sdap_id_op functions.	Simo Sorce	1	-38/+48

2010-09-15	Store rootdse supported features in sdap_handler	Sumit Bose	1	-2/+2

2010-07-09	Use new LDAP connection framework in IPA dynamic DNS forwarder.	eindenbom	1	-0/+4

2010-07-09	Add an interface to try next fail-over server after connection to the active ↵	eindenbom	1	-0/+3
	server was unexpectedly dropped.
2010-07-09	LDAP connection usage tracking, sharing and failover retry framework.	eindenbom	1	-0/+758