summaryrefslogtreecommitdiff
path: root/src/responder/ssh
AgeCommit message (Collapse)AuthorFilesLines
2013-01-23Check that strings do not go beyond the end of the packet body in autofs and ↵Jan Cholasta1-4/+4
SSH requests. This fixes CVE-2013-0220. https://fedorahosted.org/sssd/ticket/1781
2013-01-15Add domain arguments to sysdb ssh functionsSimo Sorce1-3/+4
2013-01-15Add domain argument to sysdb_get_user_attr()Simo Sorce1-1/+1
2012-12-18RESPONDERS: Create a common file with service names and versionsJakub Hrozek2-3/+1
The monitor sends calls different sbus methods to different responders. Instead of including headers of the particular responders directly in monitor, which breaks layering a little, create a common header file that will be included from src/responder/common/
2012-12-10SSH: Reject requests for authorized keys of rootJan Cholasta1-0/+5
https://fedorahosted.org/sssd/ticket/1687
2012-10-29Include talloc log in our debug facilityMichal Zidek1-1/+1
https://fedorahosted.org/sssd/ticket/1495
2012-10-09Fix uninitialized pointer read in ssh_host_pubkeys_update_known_hostsJakub Hrozek1-1/+2
2012-10-05SSH: Expire hosts in known_hostsJan Cholasta3-1/+21
2012-10-05SSH: Refactor sysdb and related codeJan Cholasta2-73/+52
2012-10-01Add new option default_domain_suffixSumit Bose1-1/+2
2012-09-20SSH: Fix possible infinite loop when updating known_hostsJan Cholasta1-3/+1
2012-09-04SSH: Simplify public key formatting functionJan Cholasta1-4/+2
2012-09-04SSH: Return error code in SSH utility functionsJan Cholasta1-6/+7
2012-06-12Make re_expression and full_name_format per domain optionsStef Walter1-2/+2
* Allows different user/domain qualified names for different domains. For example Domain\User or user@domain. * The global re_expression and full_name_format options remain as defaults for the domains. * Subdomains get the re_expression and full_name_format of their parent domain. https://bugzilla.redhat.com/show_bug.cgi?id=811663
2012-05-03SSH: Add dp_get_host_send to common responder codeJakub Hrozek3-9/+184
Instead of using account_info request, creates a new ssh specific request. This improves code readability and will make the code more flexible in the future. https://fedorahosted.org/sssd/ticket/1176
2012-05-02SSH: return NULL on error in ssh_host_pubkeys_format_known_host_plainJakub Hrozek1-1/+2
The 'result' pointer must be initialized tin order to always return a defined value.
2012-04-24SSH: Add support for hashed known_hostsJan Cholasta3-36/+171
https://fedorahosted.org/sssd/ticket/1203
2012-04-24Modified responder_get_domain()Jan Zeleny1-2/+2
Now it checks for subdomains as well as for the domain itself
2012-04-20Convert read and write operations to sss_atomic_readJakub Hrozek1-1/+1
https://fedorahosted.org/sssd/ticket/1209
2012-03-15SSH: Allow clients to explicitly specify host aliasJan Cholasta3-67/+38
This change removes the need to canonicalize host names on the responder side - the relevant code was removed.
2012-03-09SSH: Fix missing semicolonStephen Gallagher1-1/+1
2012-03-09Add umask before mkstemp() call in SSH responderJan Zeleny1-0/+3
2012-03-08Use the correct hash table for pending requestsSimo Sorce1-1/+1
The function that handled pending requests on reconnect was checking an orphaned global variable that was never used, redenring the whole function uselsess. This fixes a very nasty bug that was causing requests for which we never received an answer for (for example because the backend failed and was restarted) to be never removed and therefore causing a black hole effect for any other request of the same type. Fixes: https://fedorahosted.org/sssd/ticket/1229
2012-02-29Remove sysdb_get_ctx_from_list()Sumit Bose1-8/+6
2012-02-27SSH: Replace blocking getaddrinfo call in the responder with asynchronous ↵Jan Cholasta3-26/+56
resolver code
2012-02-27SSH: Use fchmod instead of chmod on known_hosts fileJan Cholasta1-8/+4
2012-02-27SSH: Add more debugging messagesJan Cholasta1-0/+8
2012-02-27SSH: Don't abort known_hosts update when host search failsJan Cholasta1-1/+1
2012-02-26SSH: Manage global known_hosts file in the responderJan Cholasta2-0/+134
https://fedorahosted.org/sssd/ticket/1193
2012-02-26SSH: Save SSH host name aliasesJan Cholasta2-1/+26
2012-02-21Don't give memory context in confdb where not neededJan Zeleny1-1/+1
2012-02-13SSH: Verify that names received from client are valid UTF-8 in responderJan Cholasta1-0/+4
Also added a comment describing the wire format of client requests and responses. https://fedorahosted.org/sssd/ticket/1177
2012-02-07Fix SSH compilation on RHEL5Jakub Hrozek1-0/+3
2012-02-07SSH: ResponderJan Cholasta3-0/+872