summaryrefslogtreecommitdiff
path: root/src/responder/sudo/sudosrv_get_sudorules.c
AgeCommit message (Collapse)AuthorFilesLines
2013-06-27sudo responder: use different callback for oob refreshPavel Březina1-6/+8
https://fedorahosted.org/sssd/ticket/1693 Since we don't care about returned values from out of band refresh, we do not need to set callback data. However, this caused talloc to abort as it considers it as type mismatch when called from tevent_req_callback_data().
2013-05-20Fixing critical format string issues.Lukas Slebodnik1-2/+3
--missing arguments. --format '%s', but argument is integer. --wrong format string, examle: '%\n'
2013-05-10sudo responder: search rules for subdomains in parent domain subtreePavel Březina1-0/+5
https://fedorahosted.org/sssd/ticket/1912 SUDO rules are stored under cn=ipa.domain,cn=sysdb tree but sobdomains users are in cn=sub.domain,cn=sysdb. When we search for rules for subdomain users we have to switch domain context to parent.
2013-04-03Check for correct variable nameJakub Hrozek1-1/+1
https://fedorahosted.org/sssd/ticket/1864
2013-03-07Removing unused parameter type from sudosrv_get_sudorules_query_cache()Lukas Slebodnik1-6/+4
https://fedorahosted.org/sssd/ticket/1825
2013-02-10Parent and subdomains use the same sysdbSimo Sorce1-66/+7
Remove code that tries to get the 'right' sysdb, as it is always going to get the same answer anyway since the recent patches to rework the domains/sysdb relationship.
2013-02-10Add function get_next_domain()Simo Sorce1-3/+3
Use this function instead of explicitly calling domain->next This function allows to get the next primary domain or to descend into the subdomains and replaces also get_next_dom_or_subdom()
2013-01-22sudo responder: change num_rules type from size_t to uint32_tPavel Březina1-7/+7
https://fedorahosted.org/sssd/ticket/1779 2^32 should be enough to store sudo rules. size_t type was causing troubles on big endian architectures, because it wasn't used correctly in combination with D-Bus.
2013-01-15Add domain arguments to sysdb sudo functionsSimo Sorce1-4/+5
2013-01-15Add domain argument to sysdb_search_custom()Simo Sorce1-3/+7
Also changes sysdb_search_custom_by_name()
2013-01-15Pass domain to sysdb_get<pw/gr>nam() functionsSimo Sorce1-1/+1
Also allows us to remove sysdb_subdom_get<pw/gr>nam() wrappers and restore fqnames proper value in subdomains, by testing for a parent domain being present or not.
2012-12-06sudo: print rule name if notBefore or notAfter attribute is missingPavel Březina1-1/+1
...and if sudo_timed = true. https://fedorahosted.org/sssd/ticket/1688 A comma was missing in attribute list. This caused concatenation of the two attributes so we requested one attribute called "objectClasscn". This doesn't affect functionality, only debug messages.
2012-11-14sudo: print how many rules we are refreshing or returningPavel Březina1-3/+4
2012-11-14sudo: support users from subdomainsPavel Březina1-12/+52
https://fedorahosted.org/sssd/ticket/1616
2012-11-14use tmp_ctx in sudosrv_get_sudorules_from_cache()Pavel Březina1-8/+20
2012-11-14sudo: fix missing parameter in two debug messagesPavel Březina1-3/+3
2012-08-07Remove SYSDB_SUDO_CACHE_OC from attribute listsPavel Březina1-1/+0
It is not an attribute.
2012-08-07Rename SYSDB_SUDO_CACHE_AT_OC to SYSDB_SUDO_CACHE_OCPavel Březina1-1/+1
It does not contain name of the object class attribute but the value itself. I renamed it to avoid confusion.
2012-07-09Fix potential NULL-dereferenceStephen Gallagher1-1/+2
Coverity #12800
2012-07-09Fix potential NULL-dereferenceStephen Gallagher1-1/+3
Coverity #12801
2012-06-29sudo responder: schedule OOB full refresh when expired rule is deletedPavel Březina1-4/+38
2012-06-29sudo responder: refresh expired rulesPavel Březina1-31/+106
2012-06-29sudo responder: update dp interfacePavel Březina1-1/+2
2012-06-29sudo responder: allow fetching only expired rules in ↵Pavel Březina1-25/+22
sudosrv_get_sudorules_query_cache()
2012-06-29sudo sysdb: add expiration time to the filterPavel Březina1-1/+1
2012-06-29sudo responder: new request enum typePavel Březina1-7/+8
sss_sudo_type represents query type that comes to the responder sss_dp_sudo_type represents query type to DP that is issued by the responder I'm leaving current values of sss_dp_sudo_type untouched so the compilation is not broken. Hovewer, they will be changed to new DP types once the DP interface is updated.
2012-06-29sudo api: send uid, username and domainnamePavel Březina1-20/+31
https://fedorahosted.org/sssd/ticket/1239 Test client was changed accordingly. The new usage is: sss_sudo_cli username [uid] If uid is not set, getpwnam(username) is called. It will retrieve both default options and rules.
2012-06-29sudo responder: get rid of dctx where possiblePavel Březina1-55/+59
2012-06-29sudo responder: remove code duplication in commandsPavel Březina1-78/+0
2012-02-29Remove sysdb_get_ctx_from_list()Sumit Bose1-7/+4
2012-02-23Move sudo_dom_ctx.user to local variablePavel Březina1-7/+8
2012-02-23Honor case_sensitive option in sudo responderPavel Březina1-15/+61
https://fedorahosted.org/sssd/ticket/1205
2012-02-06SUDO Integration - fix offline behaviourPavel Březina1-2/+2
2012-02-04SUDO Integration - in-memory cache in responderPavel Březina1-5/+20
New sudo responder option: cache_timeout https://fedorahosted.org/sssd/ticket/1111
2012-01-30Fix sudo compilation on RHEL5Jakub Hrozek1-0/+2
2012-01-27SUDO Integration - responder command for cn=defaultsPavel Březina1-13/+24
https://fedorahosted.org/sssd/ticket/1143
2012-01-27SUDO Integration - make sysdb_get_sudo_filter() more configurablePavel Březina1-2/+5
https://fedorahosted.org/sssd/ticket/1143
2012-01-27Use the new SUDO request in DP and sudo responderJakub Hrozek1-17/+67
Also remove the old request implementation https://fedorahosted.org/sssd/ticket/1115
2012-01-23DP: Fix bugs in sss_dp_get_account_intStephen Gallagher1-0/+1
The conversion to the tevent_req style introduced numerous bugs related to memory management of the various client requests. In some circumstances, this could cause memory corruption and segmentation faults in the NSS responder. This patch makes the following changes: 1) Rename the internal lookup from subreq to sidereq, to indicate that it is not a sub-request of the current lookup (and therefore is not cancelled if the current request is). 2) Change the handling of the callback loops since they call tevent_req_[done|error], which results in them being freed (and therefore removed from the cb_list. This was the source of the memory corruption that would occasionally result in dereferencing an unreadable request. 3) Remove the unnecessary sss_dp_get_account_int_recv() function and change sss_dp_get_account_done() so that it only frees the sidereq. All of the waiting processes have already been signaled with the final results from sss_dp_get_account_int_done()
2012-01-21RESPONDER: Extend sss_dp_account_send() to include extra dataStephen Gallagher1-1/+1
Some NSS maps such as 'services' require more values to be passed to the data provider than just the name or ID. In these cases, we will amend an optional component to filter value to pass to the data provider backend.
2012-01-17SUDO Integration review issuesPavel Březina1-1/+2
2011-12-16SUDO Integration - responder - get sudo rules logicJakub Hrozek1-2/+444
2011-12-16SUDO Integration - responderPavel Březina1-0/+113
generated by cgit (git 2.34.1) at 2024-06-18 13:10:16 +0000