summaryrefslogtreecommitdiff
path: root/src/responder/sudo
AgeCommit message (Collapse)AuthorFilesLines
2013-10-01sudo: improve time restrictions debug messagesPavel Březina1-0/+7
2013-07-22SUDO: realloc with sizeof(uint32_t) when adding uint32_tJakub Hrozek1-1/+1
2013-06-27sudo responder: use different callback for oob refreshPavel Březina1-6/+8
https://fedorahosted.org/sssd/ticket/1693 Since we don't care about returned values from out of band refresh, we do not need to set callback data. However, this caused talloc to abort as it considers it as type mismatch when called from tevent_req_callback_data().
2013-06-04Lookup domains at startupSumit Bose1-0/+6
To make sure that e.g. the short/NetBIOS domain name is available this patch make sure that the responders send a get_domains request to their backends at startup the collect the domain information or read it from the cache if the backend is offline. For completeness I added this to all responders even if they do not need the information at the moment. Fixes https://fedorahosted.org/sssd/ticket/1951
2013-05-20Fixing critical format string issues.Lukas Slebodnik1-2/+3
--missing arguments. --format '%s', but argument is integer. --wrong format string, examle: '%\n'
2013-05-10sudo responder: search rules for subdomains in parent domain subtreePavel Březina1-0/+5
https://fedorahosted.org/sssd/ticket/1912 SUDO rules are stored under cn=ipa.domain,cn=sysdb tree but sobdomains users are in cn=sub.domain,cn=sysdb. When we search for rules for subdomain users we have to switch domain context to parent.
2013-05-02Remove unused TALLOC_CTX from responder_get_domain()Sumit Bose1-1/+1
Recent refactoring removed the need to copy the domain info data of sub-domains because the related objects will not be removed from memory anymore.
2013-04-03Check for correct variable nameJakub Hrozek1-1/+1
https://fedorahosted.org/sssd/ticket/1864
2013-03-20change responder contexts hierarchyPavel Březina1-9/+14
https://fedorahosted.org/sssd/ticket/1575 The hierarchy is now: main_ctx -> responder_ctx -> specific_ctx where specific_ctx is one of sudo, pam, etc.
2013-03-20do not leak memory on failure in *_process_init()Pavel Březina1-3/+7
2013-03-07Removing unused parameter type from sudosrv_get_sudorules_query_cache()Lukas Slebodnik1-6/+4
https://fedorahosted.org/sssd/ticket/1825
2013-02-10Parent and subdomains use the same sysdbSimo Sorce1-66/+7
Remove code that tries to get the 'right' sysdb, as it is always going to get the same answer anyway since the recent patches to rework the domains/sysdb relationship.
2013-02-10Add function get_next_domain()Simo Sorce1-3/+3
Use this function instead of explicitly calling domain->next This function allows to get the next primary domain or to descend into the subdomains and replaces also get_next_dom_or_subdom()
2013-01-22sudo responder: change num_rules type from size_t to uint32_tPavel Březina5-20/+20
https://fedorahosted.org/sssd/ticket/1779 2^32 should be enough to store sudo rules. size_t type was causing troubles on big endian architectures, because it wasn't used correctly in combination with D-Bus.
2013-01-15Add domain arguments to sysdb sudo functionsSimo Sorce1-4/+5
2013-01-15Add domain argument to sysdb_search_custom()Simo Sorce1-3/+7
Also changes sysdb_search_custom_by_name()
2013-01-15Pass domain to sysdb_get<pw/gr>nam() functionsSimo Sorce1-1/+1
Also allows us to remove sysdb_subdom_get<pw/gr>nam() wrappers and restore fqnames proper value in subdomains, by testing for a parent domain being present or not.
2012-12-18RESPONDERS: Create a common file with service names and versionsJakub Hrozek2-2/+1
The monitor sends calls different sbus methods to different responders. Instead of including headers of the particular responders directly in monitor, which breaks layering a little, create a common header file that will be included from src/responder/common/
2012-12-06sudo: print rule name if notBefore or notAfter attribute is missingPavel Březina1-1/+1
...and if sudo_timed = true. https://fedorahosted.org/sssd/ticket/1688 A comma was missing in attribute list. This caused concatenation of the two attributes so we requested one attribute called "objectClasscn". This doesn't affect functionality, only debug messages.
2012-12-02sudo: print message if old protocol is usedPavel Březina1-3/+15
2012-11-19SUDO: Fix wrong variable checkJakub Hrozek1-1/+1
https://fedorahosted.org/sssd/ticket/1650
2012-11-14sudo: print how many rules we are refreshing or returningPavel Březina1-3/+4
2012-11-14sudo: do not send domain name with usernamePavel Březina3-6/+5
This caused troubles with subdomain users and it is not really necessary. This patch does not change the protocol itself, that should be done on the earliest possible occasion. Part of https://fedorahosted.org/sssd/ticket/1616
2012-11-14sudo: support users from subdomainsPavel Březina4-60/+214
https://fedorahosted.org/sssd/ticket/1616
2012-11-14use tmp_ctx in sudosrv_get_sudorules_from_cache()Pavel Březina1-8/+20
2012-11-14sudo: fix missing parameter in two debug messagesPavel Březina1-3/+3
2012-10-30sudo: do not hardcode protocol versionPavel Březina1-1/+2
2012-10-29Include talloc log in our debug facilityMichal Zidek1-1/+1
https://fedorahosted.org/sssd/ticket/1495
2012-10-01Add new option default_domain_suffixSumit Bose1-1/+2
2012-08-07Remove SYSDB_SUDO_CACHE_OC from attribute listsPavel Březina1-1/+0
It is not an attribute.
2012-08-07Rename SYSDB_SUDO_CACHE_AT_OC to SYSDB_SUDO_CACHE_OCPavel Březina1-1/+1
It does not contain name of the object class attribute but the value itself. I renamed it to avoid confusion.
2012-07-18Fix uninitialized valuesNick Guay1-1/+1
https://fedorahosted.org/sssd/ticket/1379
2012-07-09Fix potential NULL-dereferenceStephen Gallagher1-1/+2
Coverity #12800
2012-07-09Fix potential NULL-dereferenceStephen Gallagher1-1/+3
Coverity #12801
2012-06-29sudo responder: schedule OOB full refresh when expired rule is deletedPavel Březina2-4/+40
2012-06-29sudo responder: refresh expired rulesPavel Březina1-31/+106
2012-06-29sudo responder: update dp interfacePavel Březina3-34/+72
2012-06-29sudo responder: allow fetching only expired rules in ↵Pavel Březina1-25/+22
sudosrv_get_sudorules_query_cache()
2012-06-29sudo sysdb: add expiration time to the filterPavel Březina1-1/+1
2012-06-29sudo responder: new request enum typePavel Březina3-13/+19
sss_sudo_type represents query type that comes to the responder sss_dp_sudo_type represents query type to DP that is issued by the responder I'm leaving current values of sss_dp_sudo_type untouched so the compilation is not broken. Hovewer, they will be changed to new DP types once the DP interface is updated.
2012-06-29sudo responder: discard in-memory cachePavel Březina3-375/+0
2012-06-29sudo responder: change protocol version to 1Pavel Březina1-0/+9
2012-06-29sudo api: send uid, username and domainnamePavel Březina4-109/+102
https://fedorahosted.org/sssd/ticket/1239 Test client was changed accordingly. The new usage is: sss_sudo_cli username [uid] If uid is not set, getpwnam(username) is called. It will retrieve both default options and rules.
2012-06-29sudo responder: get rid of dctx where possiblePavel Březina3-93/+102
2012-06-29sudo responder: remove code duplication in commandsPavel Březina4-277/+283
2012-06-12Make re_expression and full_name_format per domain optionsStef Walter1-2/+2
* Allows different user/domain qualified names for different domains. For example Domain\User or user@domain. * The global re_expression and full_name_format options remain as defaults for the domains. * Subdomains get the re_expression and full_name_format of their parent domain. https://bugzilla.redhat.com/show_bug.cgi?id=811663
2012-04-24Modified responder_get_domain()Jan Zeleny1-1/+1
Now it checks for subdomains as well as for the domain itself
2012-03-09Potential NULL-dereference in sudosrv_cmd_get_sudorulesPavel Březina1-14/+12
https://fedorahosted.org/sssd/ticket/1236
2012-03-09Use of unininitialized value in sudosrv_cache_set_entry and ↵Pavel Březina1-0/+2
sudosrv_cache_lookup_internal https://fedorahosted.org/sssd/ticket/1232
2012-03-08Use the correct hash table for pending requestsSimo Sorce1-1/+1
The function that handled pending requests on reconnect was checking an orphaned global variable that was never used, redenring the whole function uselsess. This fixes a very nasty bug that was causing requests for which we never received an answer for (for example because the backend failed and was restarted) to be never removed and therefore causing a black hole effect for any other request of the same type. Fixes: https://fedorahosted.org/sssd/ticket/1229
generated by cgit (git 2.34.1) at 2024-11-10 23:30:30 +0000