summaryrefslogtreecommitdiff
path: root/src/responder/nss/nsssrv_netgroup.c
AgeCommit message (Collapse)AuthorFilesLines
2013-08-08NSS: Clear cached netgroups if a request comes in from the sss_cacheLukas Slebodnik1-0/+30
In order for sss_cache to work correctly, we must also signal the nss responder to invalidate the hash table requests. https://fedorahosted.org/sssd/ticket/1759
2013-08-08NSS: allow removing entries from netgroup hash tableLukas Slebodnik1-0/+27
There is a timed desctructor in the nss responder that, when the entry timeout passes, removes the netgroup from the hash table while the netgroup is freed. This patch adds a hash delete callback so that if the netgroup is removed from the hash table with hash_delete, its hash table pointer will be invalidated. Later, when the entry is being freed, the destructor won't attempt to remove it from the hash table.
2013-07-31Fix netgroup lookup when using fully qualified namePavel Březina1-2/+2
2013-07-29Netgroups should ignore the 'use_fully_qualified_names' settingStephen Gallagher1-8/+6
Netgroups often have memberNisNetgroup entries included in them that will never process correctly if we require fully-qualified names on the nested lookup. This patch alters the behavior of netgroup lookups to check *all* domains for an unqualified netgroup name, instead of only the ones not requiring fully- qualified names. https://fedorahosted.org/sssd/ticket/2013
2013-06-27Handle too many results from getnetgr.Lukas Slebodnik1-1/+13
2013-05-02Remove unused TALLOC_CTX from responder_get_domain()Sumit Bose1-1/+1
Recent refactoring removed the need to copy the domain info data of sub-domains because the related objects will not be removed from memory anymore.
2013-04-26DB: Switch to new libini_config APIOndrej Kos1-1/+1
https://fedorahosted.org/sssd/ticket/1786 Since we need to support the old interface as well, the configure scritp is modified and correct ini interface is chosen.
2013-02-10Add function get_next_domain()Simo Sorce1-5/+5
Use this function instead of explicitly calling domain->next This function allows to get the next primary domain or to descend into the subdomains and replaces also get_next_dom_or_subdom()
2013-01-15Add domain option to sysdb_get/netgr/attrs() fnsSimo Sorce1-1/+1
2012-12-04NSS: Fix netgroup midpoint cache refreshJakub Hrozek1-1/+1
https://fedorahosted.org/sssd/ticket/1683 The result of the percent calculation was always 0 as it used plain ints. The patch switches to using explicit floats to avoid reintroducing the bug again even with brackets.
2012-10-01Add new option default_domain_suffixSumit Bose1-1/+2
2012-06-12Make re_expression and full_name_format per domain optionsStef Walter1-2/+2
* Allows different user/domain qualified names for different domains. For example Domain\User or user@domain. * The global re_expression and full_name_format options remain as defaults for the domains. * Subdomains get the re_expression and full_name_format of their parent domain. https://bugzilla.redhat.com/show_bug.cgi?id=811663
2012-05-16NSS: Expire in-memory netgroup cache before the nowait timeoutStephen Gallagher1-1/+9
The fact that we were keeping it in memory for the full duration of the cache timeout meant that we would never reap the benefits of the midpoint cache refresh. https://fedorahosted.org/sssd/ticket/1340
2012-04-24Retrieve subdomains if there is a request for fully qualified userJan Zeleny1-28/+57
2012-04-24Modified responder_get_domain()Jan Zeleny1-1/+1
Now it checks for subdomains as well as for the domain itself
2012-04-18Prevent printing NULL from DEBUG messagesJakub Hrozek1-1/+2
2012-03-08Handle errors from lookup_netgr_step gracefullyJakub Hrozek1-3/+10
2012-03-08Save original name into the in-memory cacheJakub Hrozek1-1/+1
2012-02-29Remove sysdb_get_ctx_from_list()Sumit Bose1-2/+2
2012-02-13Allocate setent structure on state, not on the client contextJakub Hrozek1-2/+2
https://fedorahosted.org/sssd/ticket/1189
2012-02-05RESPONDERS: Refactor setent_req_listJakub Hrozek1-11/+3
Makes the setent_add_ref() and setent_notify_*() functions more generic to be reusable by the autofs responder.
2012-02-04NSS: Add individual timeouts for entry typesStephen Gallagher1-1/+1
https://fedorahosted.org/sssd/ticket/1016
2012-02-04NSS: Use sss_hash_create instead of destructorJakub Hrozek1-0/+1
2012-01-31Refactor nss_cmd_send_emptyJakub Hrozek1-2/+2
2012-01-17NSS: Improve DEBUG messages for netgroup cacheStephen Gallagher1-2/+2
2011-12-21sss_get_cased_name utility functionJakub Hrozek1-3/+6
2011-12-16Use the case sensitivity flag in respondersJakub Hrozek1-8/+13
2011-12-16Responders: Split getting domain by name into separate functionJakub Hrozek1-1/+1
2011-12-08Ignore NULL-terminator when checking UTF8-validity for netgroupsStephen Gallagher1-1/+1
Glib fails if the NULL-terminator is included when a length is specified.
2011-11-18RESPONDER: Ensure that all input strings are valid UTF-8Stephen Gallagher1-0/+7
2011-08-15sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny1-2/+1
The patch also updates code using modified functions. Tests have also been adjusted.
2011-04-25Don't use negative cache in netgroup lookupJan Zeleny1-20/+19
In responder a negative cache is used to indicate that the record has not been found by previous lookup. This approach is however not applicable for netgroup lookup because the design of their lookup is a little different. This patch removes some pieces of code working with negative cache, because they didn't fuction well. Instead a new flag has been added to the positive cache. This flag indicates if the record in the cache is a record of existing netgroup or it's just a placeholder. https://fedorahosted.org/sssd/ticket/820
2011-03-09Change state of hash entry if netgroup cannot be parsedSumit Bose1-0/+2
2011-03-07Refactor set_netgroup_entry()Sumit Bose1-4/+7
To avoid wrong or missing netgroup names in the getent_ctx destructor set_netgroup_entry() now takes the name out of the getent_ctx struct instead of using a separate argument.
2011-03-07Add missing name to struct getent_ctx for missing netgroupSumit Bose1-0/+6
https://fedorahosted.org/sssd/ticket/817
2011-01-14Fix missing hash table bugStephen Gallagher1-0/+1
When the automatic cleanup happened, if the netgroup had been created with no contents (to indicate an unknown netgroup), we weren't saving the hash table address and the talloc_free() was failing.
2010-12-17Fix possible NULL-dereference in lookup_netgr_step()Sumit Bose1-1/+1
https://fedorahosted.org/sssd/ticket/735
2010-12-15Fix uninitialized value error in lookup_netgr_step()Sumit Bose1-146/+181
2010-10-26Always use talloc_zero() to allocate cmdctxSumit Bose1-1/+1
2010-10-13Also return member groups to the clientSumit Bose1-54/+84
2010-10-13Add handling of nested netgroups to nss clientSumit Bose1-1/+4
2010-10-13Add missing tevent_req_done()Sumit Bose1-0/+1
2010-10-13Add netgroup support to the NSS responderStephen Gallagher1-0/+863