sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-03-01	autofs: fix invalid header 'number of entries' in packet	Pavel Březina	1	-1/+5
	https://fedorahosted.org/sssd/ticket/1739 Pointer to packet body may change while filling packet with autofs mount points. As a consequence, we sometimes wrote the number of entries into invalid body and we recieved an arbitrary number on the client side. If the number was 0, there were some skipped entries. If the number was greater than 0, everything worked correctly, because we iterate through the cached entries until we reach packet length - we don't compare to the number.
2013-02-10	Add function get_next_domain()	Simo Sorce	1	-4/+4
	Use this function instead of explicitly calling domain->next This function allows to get the next primary domain or to descend into the subdomains and replaces also get_next_dom_or_subdom()
2013-01-23	Check that strings do not go beyond the end of the packet body in autofs and ↵	Jan Cholasta	1	-3/+3
	SSH requests. This fixes CVE-2013-0220. https://fedorahosted.org/sssd/ticket/1781
2013-01-15	Add domain argument to sysdb autofs functions	Simo Sorce	1	-2/+2

2012-12-18	AUTOFS: Clear enum cache if a request comes in from the sss_cache	Jakub Hrozek	1	-0/+22
	In order for sss_cache to work correctly, we must also signal the autofs responder to invalidate the hash table requests.
2012-12-18	RESPONDERS: Create a common file with service names and versions	Jakub Hrozek	1	-2/+1
	The monitor sends calls different sbus methods to different responders. Instead of including headers of the particular responders directly in monitor, which breaks layering a little, create a common header file that will be included from src/responder/common/
2012-12-18	AUTOFS: remove all maps from hash if request for auto.master comes in	Jakub Hrozek	2	-3/+59
	https://fedorahosted.org/sssd/ticket/1592 When a request for auto.master comes in, we need to remove all the maps from the lookup hash table. We can't simply delete the maps, because another request might be processing them, so instead the maps are removed from the hash table, effectively becoming orphaned. The maps will get freed when the timed destructor is invoked.
2012-12-18	AUTOFS: allow removing entries from hash table	Jakub Hrozek	3	-1/+32
	There is a timed desctructor in the autofs responder that, when the entry timeout passes, removes the autofs map from the hash table while the map is freed. This patch adds a hash delete callback so that if the map is removed from the hash table with hash_delete, its hash table pointer will be invalidated. Later, when the entry is being freed, the destructor won't attempt to remove it from the hash table.
2012-10-29	Include talloc log in our debug facility	Michal Zidek	1	-1/+1
	https://fedorahosted.org/sssd/ticket/1495
2012-10-01	Add new option default_domain_suffix	Sumit Bose	1	-1/+2

2012-06-12	Make re_expression and full_name_format per domain options	Stef Walter	1	-2/+2
	* Allows different user/domain qualified names for different domains. For example Domain\User or user@domain. * The global re_expression and full_name_format options remain as defaults for the domains. * Subdomains get the re_expression and full_name_format of their parent domain. https://bugzilla.redhat.com/show_bug.cgi?id=811663
2012-05-03	AUTOFS: remove unused assignments	Jakub Hrozek	1	-4/+9
	Also changes setautomntent_send so that is only return NULL in case the tevent_req creation fails.
2012-04-24	Modified responder_get_domain()	Jan Zeleny	1	-1/+1
	Now it checks for subdomains as well as for the domain itself
2012-03-08	Use the correct hash table for pending requests	Simo Sorce	1	-1/+1
	The function that handled pending requests on reconnect was checking an orphaned global variable that was never used, redenring the whole function uselsess. This fixes a very nasty bug that was causing requests for which we never received an answer for (for example because the backend failed and was restarted) to be never removed and therefore causing a black hole effect for any other request of the same type. Fixes: https://fedorahosted.org/sssd/ticket/1229
2012-02-29	Remove sysdb_get_ctx_from_list()	Sumit Bose	1	-2/+2

2012-02-27	AUTOFS: speed up the client by requesting multiple entries at once	Jakub Hrozek	2	-34/+79
	https://fedorahosted.org/sssd/ticket/1166
2012-02-23	AUTOFS: Invoke implicit setautomntent if needed	Jakub Hrozek	2	-45/+156
	https://fedorahosted.org/sssd/ticket/1167
2012-02-21	Don't give memory context in confdb where not needed	Jan Zeleny	1	-2/+2

2012-02-13	Allocate setent structure on state, not on the client context	Jakub Hrozek	1	-2/+2
	https://fedorahosted.org/sssd/ticket/1189
2012-02-13	Remove setent structure when callback is called	Jakub Hrozek	1	-1/+1

2012-02-05	AUTOFS: responder	Jakub Hrozek	4	-0/+1718