Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2013-01-15 | LDAP: avoid complex realloc logic in save_rfc2307bis_group_memberships | Jakub Hrozek | 1 | -12/+4 | |
https://fedorahosted.org/sssd/ticket/1761 The function tried to be smart and realloc only when needed, but that only lead to hard-to find bugs where the logic would not allocate the proper space. Remove the reallocation and prefer readability over speed in this case. | |||||
2013-01-15 | Add domain to some subdomain functions | Simo Sorce | 1 | -2/+7 | |
2013-01-15 | Add domain arguments to sysdb sudo functions | Simo Sorce | 4 | -9/+22 | |
2013-01-15 | Add domain arguments to sysdb ssh functions | Simo Sorce | 1 | -1/+2 | |
2013-01-15 | Add domain arguments to sysdb services functions | Simo Sorce | 3 | -6/+7 | |
also fix sysdb_svc_add declarations | |||||
2013-01-15 | Add domain argument to sysdb selinux functions | Simo Sorce | 3 | -4/+9 | |
2013-01-15 | Add domain argument to sysdb autofs functions | Simo Sorce | 2 | -11/+18 | |
2013-01-15 | Add domain arguemnt to sysdb_get_real_name() | Simo Sorce | 1 | -1/+2 | |
2013-01-15 | Add domain argument to sysdb_idmap_ funcitons | Simo Sorce | 1 | -1/+2 | |
2013-01-15 | Add domain argument to sysdb_remove_attrs() | Simo Sorce | 2 | -5/+6 | |
2013-01-15 | Add domain argument to sysdb_has/set_enumerated() | Simo Sorce | 3 | -3/+4 | |
2013-01-15 | Add domain arg to sysdb_search/delete_netgroup() | Simo Sorce | 3 | -8/+8 | |
2013-01-15 | Add domain argument to sysdb_delete_group() | Simo Sorce | 3 | -5/+7 | |
Also remove sysdb_delete_domgroup() | |||||
2013-01-15 | Add domain argument to sysdb_search_groups() | Simo Sorce | 4 | -8/+13 | |
2013-01-15 | Add domain argument to sysdb_delete_user() | Simo Sorce | 3 | -12/+18 | |
Also remove sysdb_delete_domuser() | |||||
2013-01-15 | Add domain arg to sysdb_search_users() | Simo Sorce | 6 | -17/+30 | |
2013-01-15 | Add domain argument to sysdb_search_custom() | Simo Sorce | 7 | -8/+22 | |
Also changes sysdb_search_custom_by_name() | |||||
2013-01-15 | Add domain argument to sysdb_store_custom() | Simo Sorce | 1 | -1/+1 | |
2013-01-15 | Add domain argument to sysdb_cache_auth() | Simo Sorce | 1 | -1/+5 | |
2013-01-15 | Add domain argument to sysdb_cache_password() | Simo Sorce | 3 | -3/+7 | |
2013-01-15 | Add domain arg to sysdb group member functions | Simo Sorce | 2 | -7/+9 | |
2013-01-15 | Add domain argument to sysdb_store_group() | Simo Sorce | 3 | -7/+8 | |
Also remove sysdb_store_domgroup() | |||||
2013-01-15 | Add domain argument to sysdb_store_user() | Simo Sorce | 3 | -16/+16 | |
Also remove sysdb_store_domuser() | |||||
2013-01-15 | Add domain arguments to sysdb_add_inetgroup fns. | Simo Sorce | 3 | -4/+6 | |
2013-01-15 | Add domain arguments to sysdb_add_group functions. | Simo Sorce | 2 | -4/+6 | |
2013-01-15 | Add domain argument to sysdb_set_user_attr() | Simo Sorce | 3 | -8/+16 | |
2013-01-15 | Add domain to sysdb_search_group_by_gid() | Simo Sorce | 2 | -2/+2 | |
Also remove unused sysdb_search_domgroup_by_gid() | |||||
2013-01-15 | Add domain to sysdb_search_group_by_name() | Simo Sorce | 3 | -7/+16 | |
Also remove unused sysdb_search_domgroup_by_name() | |||||
2013-01-15 | Add domain to sysdb_search_user_by_name() | Simo Sorce | 10 | -23/+50 | |
Also remove unused sysdb_search_domuser_by_name() | |||||
2013-01-15 | Add domain argument to sysdb_get_user_attr() | Simo Sorce | 6 | -15/+18 | |
2013-01-15 | Add domain argument to sysdb_initgroups() | Simo Sorce | 1 | -1/+1 | |
2013-01-15 | Pass domain to sysdb_get<pwu/grg><id() functions | Simo Sorce | 1 | -3/+3 | |
2013-01-15 | Make sysdb_custom_subtree_dn() require a domain. | Simo Sorce | 3 | -4/+6 | |
2013-01-15 | Make sysdb_custom_dn() require a domain. | Simo Sorce | 2 | -5/+9 | |
2013-01-15 | Make sysdb_domain_dn() require a domain. | Simo Sorce | 1 | -1/+1 | |
2013-01-15 | Make sysdb_netgroup_base_dn() require a domain. | Simo Sorce | 1 | -1/+1 | |
2013-01-15 | Remove the sysdb_ctx_get_domain() function. | Simo Sorce | 1 | -1/+4 | |
We are deprecating sysdb->domain so kill the function that gives access to this member as we should stop relying on it being available (or correct). | |||||
2013-01-15 | Refactor single domain initialization | Simo Sorce | 1 | -2/+2 | |
Bring it out of sysdb, which will slowly remove internal dependencies on domains and instead will always require them to be passed by callers. | |||||
2013-01-14 | let ldap_backup_chpass_uri work | Pavel Březina | 1 | -2/+4 | |
https://fedorahosted.org/sssd/ticket/1760 | |||||
2013-01-14 | Fix LDAP authentication - invalid password length | Pavel Březina | 1 | -1/+1 | |
sss_authtok_get_password() already returns length without terminating zero. This broke authentication over LDAP because we removed the last password character. | |||||
2013-01-10 | Change pam data auth tokens. | Simo Sorce | 16 | -373/+429 | |
Use the new authtok abstraction and interfaces throught the code. | |||||
2013-01-10 | Code can only check for cached passwords | Simo Sorce | 1 | -4/+17 | |
Make it clear to the API users that we can not take arbitrary auth tokens. We can only take a password for now so simplify and clarify the interface. | |||||
2013-01-10 | Fix sdap reinit. | Simo Sorce | 1 | -82/+89 | |
This set of functions had a few important issues: 1. the base_dn was always NULL, as the base array was never actually used to construct any DN. This means each function searched the whole database multiple times. It would try to remove SYSDB_USN from all database entries 3 times. Then it would try to find non updated entries another 3 times and delete them, arguably find empty results the last 2 times. 2. Remove use of sysdb_private.h, that header is *PRIVATE* which means it should not be used anywhere but within sysdb. Do this by using existing functions instead of using ldb calls directly. This is important to keep sysdb as conistent and self-contained as possible. | |||||
2013-01-09 | AD: Add user as a direct member of his primary group | Jakub Hrozek | 1 | -8/+109 | |
In the AD case, deployments sometimes add groups as parents of the primary GID group. These groups are then returned during initgroups in the tokenGroups attribute and member/memberof links are established between the user and the group. However, any update of these groups would remove the links, so a sequence of calls: id -G user; id user; id -G user would return different group memberships. The downside of this approach is that the user is returned as a group member during getgrgid call as well. | |||||
2013-01-09 | AD: replace GID/UID, do not add another one | Jakub Hrozek | 4 | -7/+41 | |
The code would call sysdb_attrs_add_uint32 which added another UID or GID to the ID=0 we already downloaded from LDAP (0 is the default value) when ID-mapping an entry. This led to funky behaviour later on when we wanted to process the ID. | |||||
2013-01-08 | IPA: Rename IPA_CONFIG_SELINUX_DEFAULT_MAP | Jakub Hrozek | 3 | -4/+6 | |
It is not a map, but a default context. The name should reflect that. | |||||
2013-01-08 | SELINUX: Process maps even when offline | Jakub Hrozek | 1 | -226/+429 | |
Changes the ipa_get_selinux{send,recv} request so that it only delivers data and moves processing to the IPA selinux handler. | |||||
2013-01-08 | SYSDB: Remove duplicate selinux defines | Jakub Hrozek | 1 | -0/+1 | |
2013-01-07 | sudo smart refresh: fix debug message | Pavel Březina | 1 | -1/+1 | |
2013-01-07 | sudo smart refresh: do not include usn in filter if no valid usn is known | Pavel Březina | 1 | -5/+12 | |
https://fedorahosted.org/sssd/ticket/1736 When there are no rules during first refresh, we don't have valid USN value. We use 0 in this case, but it turned out that OpenLDAP takes it as invalid time format (if modifyTimestamp is used instead of USN) and thus returns no records. Now we don't include USN/modifyTimestamp attribute in the filter if such situasion occurs. |