summaryrefslogtreecommitdiff
path: root/src/providers/simple/simple_access_check.c
AgeCommit message (Collapse)AuthorFilesLines
2013-09-17simple provider: obey case sensitivity for subdomain users and groupsPavel Březina1-7/+43
When comparing username and his groups to access list, we will obey case sensitivity of object from access list. Resolves: https://fedorahosted.org/sssd/ticket/2034
2013-09-17simple provider: support subdomain groupsPavel Březina1-23/+64
Resolves: https://fedorahosted.org/sssd/ticket/2034
2013-09-11Fix formating of variables with type: gid_tLukas Slebodnik1-4/+4
2013-09-11Fix formating of variables with type: size_tLukas Slebodnik1-2/+2
2013-04-19Convert the simple access check to new error codesJakub Hrozek1-9/+17
https://fedorahosted.org/sssd/ticket/453 It makes sense to keep using the boolean for access granted/denied, but when the user/group is not found, the request would now return ERR_ACCOUNT_UNKNOWN
2013-04-15Fix simple access group control in case-insensitive domainsJakub Hrozek1-16/+9
https://fedorahosted.org/sssd/ticket/1713 In the simple access provider, we need to only canonicalize user names when comparing with values in the ACL, not when searching the cache. The sysdb searches might do a base search with a DN constructed with the username which fails if the username is lower case.
2013-03-19Resolve GIDs in the simple access providerJakub Hrozek1-117/+618
Changes the simple access provider's interface to be asynchronous. When the simple access provider encounters a group that has gid, but no meaningful name, it attempts to resolve the name using the be_file_account_request function. Some providers (like the AD provider) might perform initgroups without resolving the group names. In order for the simple access provider to work correctly, we need to resolve the groups before performing the access check. In AD provider, the situation is even more tricky b/c the groups HAVE name, but their name attribute is set to SID and they are set as non-POSIX
2013-01-21Split simple_access_check function outSimo Sorce1-0/+224
Need to split out the function or new additions to the handler funtion will not allow simple access tests to compile anymore.