Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2013-02-10 | Introduce IS_SUBDOMAIN() macro | Simo Sorce | 1 | -2/+2 | |
Fixes https://fedorahosted.org/sssd/ticket/1766 | |||||
2013-02-10 | Change the way domains are linked. | Simo Sorce | 1 | -107/+45 | |
- Use a double-linked list for domains and subdomains. - Never remove a subdomain, simply mark it as disabled if it becomes unused. - Rework the way subdomains are refreshed. Now sysdb_update_subdomains() actually updates the current subdomains and marks as disabled the ones not found in the sysdb or add new ones found. It never removes them. Removal of missing domains from sysdb is deferred to the providers, which will perform it at refresh time, for the ipa provider that is done by ipa_subdomains_write_mappings() now. sysdb_update_subdomains() is then used to update the memory hierarchy of the subdomains. - Removes sysdb_get_subdomains() - Removes copy_subdomain() - Add sysdb_subdomain_delete() | |||||
2013-02-10 | Remove sysdb_subdom completely | Simo Sorce | 1 | -52/+58 | |
struct sss_domain_info is always used to represent domains now. Adjust tests accordingly. | |||||
2013-02-10 | Refactor sysdb_master_domain_add_info() | Simo Sorce | 1 | -24/+6 | |
2013-02-10 | Update main domain info in place | Simo Sorce | 1 | -5/+4 | |
2013-02-10 | Avoid sysdb_subdom in sysdb_get_subdomains() | Simo Sorce | 1 | -3/+1 | |
2013-02-10 | Add realm info to sss_domain_info | Simo Sorce | 5 | -6/+8 | |
2013-02-10 | NSS: Add original homedir to home directory template options | Stephen Gallagher | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1805 | |||||
2013-02-01 | dp: check whether hostid backend is configured before filing be request | Pavel Březina | 1 | -0/+8 | |
2013-01-30 | Fix minor grammar error in log | Stephen Gallagher | 1 | -1/+1 | |
2013-01-30 | krb: recreate ccache if it was deleted | Pavel Březina | 1 | -1/+8 | |
https://fedorahosted.org/sssd/ticket/1512 If directory where a ccache file was stored was missing and user was still logged in, we erroneously considered the ccache file still active. Thus the ccache file was not recreated and user was unable to login. | |||||
2013-01-28 | nested groups: fix group lookup hangs if member dn is incorrect | Pavel Březina | 1 | -0/+24 | |
https://fedorahosted.org/sssd/ticket/1783 When dn in member attribute is invalid (e.g. rdn instead of dn) or it is outside of configured search bases, we might hit a situation when tevent_req is marked as done before any callback could be attached on it. | |||||
2013-01-25 | Possible null derefence in ipa_subdomains.c. | Michal Zidek | 1 | -0/+4 | |
Found by coverity. https://fedorahosted.org/sssd/ticket/1790 | |||||
2013-01-22 | fix backend callbacks: remove callback properly from dlist | Pavel Březina | 1 | -6/+18 | |
https://fedorahosted.org/sssd/ticket/1776 Although cb->list got updated when the callback is removed, this change did not propagate to be_ctx->*_cb_list which caused dlist having invalid records. | |||||
2013-01-22 | Fix code style | Jakub Hrozek | 1 | -1/+2 | |
2013-01-21 | Make struct be_req opaque | Simo Sorce | 2 | -18/+18 | |
2013-01-21 | Add be_req_get_data() helper funciton. | Simo Sorce | 17 | -32/+45 | |
In preparation for making struct be_req opaque. | |||||
2013-01-21 | Add be_req_get_be_ctx() helper. | Simo Sorce | 22 | -133/+155 | |
In preparation for making be_req opaque | |||||
2013-01-21 | Add be_req_create() helper | Simo Sorce | 3 | -40/+38 | |
2013-01-21 | Introduce be_req_terminate() helper | Simo Sorce | 18 | -129/+84 | |
Call it everywhere instead of directly dereferencing be_req->fn This is in preparation of making be_req opaque. | |||||
2013-01-21 | Remove domain from be_req structure | Simo Sorce | 7 | -64/+46 | |
2013-01-21 | Pass domain not be_req to access check functions | Simo Sorce | 5 | -22/+33 | |
2013-01-21 | Split simple_access_check function out | Simo Sorce | 3 | -206/+225 | |
Need to split out the function or new additions to the handler funtion will not allow simple access tests to compile anymore. | |||||
2013-01-21 | Do not pass NULL to ipa_subdomain_retrieve() | Simo Sorce | 1 | -18/+20 | |
2013-01-21 | Move hbac_ctx_is_offline() | Simo Sorce | 2 | -7/+6 | |
2013-01-21 | Remove hbac_ctx_sdap_id_[ctx|op]() | Simo Sorce | 2 | -18/+6 | |
2013-01-21 | Remove hbac_ctx_ev() | Simo Sorce | 2 | -10/+3 | |
2013-01-21 | Remove hbac_ctx_be() | Simo Sorce | 3 | -12/+4 | |
2013-01-21 | Remove hbac_ctx_sysdb() | Simo Sorce | 2 | -12/+4 | |
2013-01-21 | Remove sysdb argument from hbac_get_cached_rules() | Simo Sorce | 3 | -9/+6 | |
2013-01-21 | Remove sysdb arg from [ipa_]hbac_sysdb_save() | Simo Sorce | 3 | -36/+25 | |
Also make ipa_hbac_save_list() static | |||||
2013-01-21 | Remove sysdb arg from ipa_hbac_service_info_send() | Simo Sorce | 3 | -5/+0 | |
2013-01-21 | Remove sysdb arg from hbac_*host_attrs_to_rule() | Simo Sorce | 3 | -11/+4 | |
2013-01-21 | Remove sysdb arg from hbac_service_attrs_to_rule() | Simo Sorce | 3 | -5/+2 | |
2013-01-21 | Remove sysdb argument from hbac_user_attrs_to_rule() | Simo Sorce | 3 | -6/+4 | |
2013-01-21 | Remove unused structure | Simo Sorce | 1 | -6/+0 | |
2013-01-21 | Remove sysdb argument from ipa_host_info_send() | Simo Sorce | 5 | -9/+3 | |
2013-01-21 | Remove sysdb as a be request structure member | Simo Sorce | 7 | -12/+9 | |
The sysdb context is already available through the 'domain' context. | |||||
2013-01-21 | Remove sysdb as a be context structure member | Simo Sorce | 27 | -56/+52 | |
The sysdb context is already available through the 'domain' structure. | |||||
2013-01-21 | Move ldap provider access functions | Simo Sorce | 2 | -59/+86 | |
It was confusing to see the ldap provider own handler mixed with the generic ldap access code used also by the ipa and ad providers. So move the ldap provider handler code in its own file. | |||||
2013-01-21 | LDAP: Compare lists of DNs when saving autofs entries | Jakub Hrozek | 1 | -134/+147 | |
https://fedorahosted.org/sssd/ticket/1758 The autofs entries do not have the key as an unique identifier, but rather the full (key, value) tuple as some keys have a special meaning, such as the direct mount key (/-) and may be present in a single map multiple times. Comparing the full DN that contains both the key and the value will allow for working updates if either key or value changes. | |||||
2013-01-19 | set struct bet_info->bet_type | Pavel Březina | 1 | -0/+1 | |
2013-01-16 | Invalidate user entry even if there are no groups | Jakub Hrozek | 1 | -5/+7 | |
Related to https://fedorahosted.org/sssd/ticket/1757 Previously we would optimize the mc invalidate code for cases where the user was a member of some groups. But if the user was removed from the server while being in memory cache, we would only invalidate the mc record if he was a member of at least one supplementary group. | |||||
2013-01-16 | Remove outdated code. | Simo Sorce | 1 | -10/+0 | |
This code should not be necessary anymore since June 2010 with commit: 90acbcf20b5f896ca8f631923afe946c90d90de7 | |||||
2013-01-15 | LDAP: avoid complex realloc logic in save_rfc2307bis_group_memberships | Jakub Hrozek | 1 | -12/+4 | |
https://fedorahosted.org/sssd/ticket/1761 The function tried to be smart and realloc only when needed, but that only lead to hard-to find bugs where the logic would not allocate the proper space. Remove the reallocation and prefer readability over speed in this case. | |||||
2013-01-15 | Add domain to some subdomain functions | Simo Sorce | 1 | -2/+7 | |
2013-01-15 | Add domain arguments to sysdb sudo functions | Simo Sorce | 4 | -9/+22 | |
2013-01-15 | Add domain arguments to sysdb ssh functions | Simo Sorce | 1 | -1/+2 | |
2013-01-15 | Add domain arguments to sysdb services functions | Simo Sorce | 3 | -6/+7 | |
also fix sysdb_svc_add declarations | |||||
2013-01-15 | Add domain argument to sysdb selinux functions | Simo Sorce | 3 | -4/+9 | |