Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-06-12 | Make re_expression and full_name_format per domain options | Stef Walter | 13 | -55/+57 | |
* Allows different user/domain qualified names for different domains. For example Domain\User or user@domain. * The global re_expression and full_name_format options remain as defaults for the domains. * Subdomains get the re_expression and full_name_format of their parent domain. https://bugzilla.redhat.com/show_bug.cgi?id=811663 | |||||
2012-06-10 | Allow fast memcache timeout to be configurable | Jan Zeleny | 3 | -5/+15 | |
https://fedorahosted.org/sssd/ticket/1318 | |||||
2012-06-10 | PAM: Better pam_reply message | Stephen Gallagher | 1 | -1/+2 | |
2012-05-31 | Ghost members - various small changes | Jan Zeleny | 1 | -1/+1 | |
2012-05-31 | Ghost members - NSS responder changes | Jan Zeleny | 1 | -89/+147 | |
Since there are two attributes storing information about user memberships of the group we have to include both of them in results. This will apply only for objects that have ghost members (i.e. they contain the SYSDB_GHOST attribute). If an object has this attribute, values of this attribute are not projected to the memberuid attribute. | |||||
2012-05-25 | NSS: Restore original protocol for getservbyport | Stephen Gallagher | 1 | -1/+1 | |
When fixing an endianness bug, we changed the protocol unnecessarily. | |||||
2012-05-25 | Send 16bit protocol numbers from the sss_client | Jakub Hrozek | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1348 | |||||
2012-05-24 | NSS: Fix segfault when mmap cache cannot be initialized | Stephen Gallagher | 1 | -2/+2 | |
2012-05-16 | NSS: Expire in-memory netgroup cache before the nowait timeout | Stephen Gallagher | 1 | -1/+9 | |
The fact that we were keeping it in memory for the full duration of the cache timeout meant that we would never reap the benefits of the midpoint cache refresh. https://fedorahosted.org/sssd/ticket/1340 | |||||
2012-05-15 | Use sized_string correctly in FQDN domains | Jakub Hrozek | 1 | -2/+2 | |
2012-05-15 | NSS: keep a pointer to body after body is reallocated | Jakub Hrozek | 1 | -0/+3 | |
2012-05-10 | Send the correct enumeration request | Jakub Hrozek | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1329 | |||||
2012-05-09 | NSS: Add default_shell option | Stephen Gallagher | 3 | -1/+15 | |
This option will allow administrators to set a default shell to be used if a user does not have one set in the identity provider. https://fedorahosted.org/sssd/ticket/1289 | |||||
2012-05-09 | NSS: Add fallback_homedir option | Stephen Gallagher | 3 | -2/+27 | |
This option is similar to override_homedir, except that it will take effect only for users that do not have an explicit home directory specified in LDAP. https://fedorahosted.org/sssd/ticket/1250 | |||||
2012-05-04 | Modify behavior of pam_pwd_expiration_warning | Jan Zeleny | 1 | -35/+0 | |
New option pwd_expiration_warning is introduced which can be set per domain and can override the value specified by the original pam_pwd_expiration_warning. If the value of expiration warning is set to zero, the filter isn't apllied at all - if backend server returns the warning, it will be automatically displayed. Default value for Kerberos: 7 days Default value for LDAP: don't apply the filter Technical note: default value when creating the domain is -1. This is important so we can distinguish between "no value set" and 0. Without this possibility it would be impossible to set different values for LDAP and Kerberos provider. | |||||
2012-05-03 | SSH: Add dp_get_host_send to common responder code | Jakub Hrozek | 5 | -22/+186 | |
Instead of using account_info request, creates a new ssh specific request. This improves code readability and will make the code more flexible in the future. https://fedorahosted.org/sssd/ticket/1176 | |||||
2012-05-03 | AUTOFS: remove unused assignments | Jakub Hrozek | 1 | -4/+9 | |
Also changes setautomntent_send so that is only return NULL in case the tevent_req creation fails. | |||||
2012-05-02 | NSS: fix returning group from cache | Jakub Hrozek | 1 | -1/+1 | |
2012-05-02 | NSS: Check return code of sss_mmap_cache_gr_store | Jakub Hrozek | 1 | -0/+5 | |
2012-05-02 | RESPONDER: check return value from confdb_get_int | Jakub Hrozek | 1 | -0/+7 | |
sss_process_init forgot to check return value of confdb_get_int | |||||
2012-05-02 | SSH: return NULL on error in ssh_host_pubkeys_format_known_host_plain | Jakub Hrozek | 1 | -1/+2 | |
The 'result' pointer must be initialized tin order to always return a defined value. | |||||
2012-04-24 | NSS: Only return data from initgroups once | Jakub Hrozek | 1 | -3/+10 | |
Do not let nss_cmd_initgroups_search() return data itself, but let the caller return data. This is more intuitive and more consistent with the rest of the nss_cmd_*_search() functions. Also fixes a typo - nss_cmd_initgroups_cb used to call getpw_send_reply instead of initgr_send_reply. | |||||
2012-04-24 | Lowercase group members in case-insensitive domains | Jakub Hrozek | 1 | -1/+7 | |
https://fedorahosted.org/sssd/ticket/1312 | |||||
2012-04-24 | Two fixes in responder subdomain code | Jan Zeleny | 1 | -0/+6 | |
2012-04-24 | SSH: Add support for hashed known_hosts | Jan Cholasta | 3 | -36/+171 | |
https://fedorahosted.org/sssd/ticket/1203 | |||||
2012-04-24 | Send PAM requests for subdomains to the right provider | Jan Zeleny | 1 | -3/+41 | |
2012-04-24 | Moved expand_homedir_template() from NSS responder to utility code | Jan Zeleny | 1 | -108/+1 | |
2012-04-24 | Add domain name to get_account_info request | Sumit Bose | 1 | -0/+1 | |
2012-04-24 | Check sub-domains in nss_cmd_get{pwuid|grgid}_search() | Sumit Bose | 1 | -4/+26 | |
2012-04-24 | Ask for subdomains in responder in the first request after startup | Jan Zeleny | 1 | -0/+30 | |
2012-04-24 | Retrieve subdomains if there is a request for fully qualified user | Jan Zeleny | 3 | -31/+192 | |
2012-04-24 | Modified responder_get_domain() | Jan Zeleny | 13 | -22/+51 | |
Now it checks for subdomains as well as for the domain itself | |||||
2012-04-24 | Responder part of the subdomain retrieval work | Jan Zeleny | 3 | -0/+359 | |
2012-04-24 | Add conn_name to allow different names for domains and connections | Jan Zeleny | 2 | -2/+2 | |
2012-04-20 | Convert read and write operations to sss_atomic_read | Jakub Hrozek | 2 | -11/+11 | |
https://fedorahosted.org/sssd/ticket/1209 | |||||
2012-04-18 | Prevent printing NULL from DEBUG messages | Jakub Hrozek | 3 | -5/+10 | |
2012-03-21 | NSS: Look for services with correct case when cache is updated | Jakub Hrozek | 1 | -7/+7 | |
https://fedorahosted.org/sssd/ticket/1259 | |||||
2012-03-21 | Save alias of the primary name, too | Jakub Hrozek | 1 | -8/+14 | |
2012-03-20 | NSS: Fix debug message | Stephen Gallagher | 1 | -0/+2 | |
2012-03-19 | nsssrv: add handling of memory cache group map | Simo Sorce | 5 | -4/+98 | |
2012-03-19 | nsssrv: add handling of memory cache passwd map | Simo Sorce | 3 | -3/+101 | |
2012-03-19 | nsssrv: Add memory cache record handling utils | Simo Sorce | 1 | -0/+279 | |
2012-03-19 | nsssrv: shared memory cache server initialization | Simo Sorce | 4 | -0/+350 | |
2012-03-16 | Free entry found in negative cache | Jakub Hrozek | 1 | -0/+3 | |
2012-03-15 | SSH: Allow clients to explicitly specify host alias | Jan Cholasta | 3 | -67/+38 | |
This change removes the need to canonicalize host names on the responder side - the relevant code was removed. | |||||
2012-03-09 | SSH: Fix missing semicolon | Stephen Gallagher | 1 | -1/+1 | |
2012-03-09 | Add umask before mkstemp() call in SSH responder | Jan Zeleny | 1 | -0/+3 | |
2012-03-09 | Potential NULL-dereference in sudosrv_cmd_get_sudorules | Pavel Březina | 1 | -14/+12 | |
https://fedorahosted.org/sssd/ticket/1236 | |||||
2012-03-09 | Use of unininitialized value in sudosrv_cache_set_entry and ↵ | Pavel Březina | 1 | -0/+2 | |
sudosrv_cache_lookup_internal https://fedorahosted.org/sssd/ticket/1232 | |||||
2012-03-08 | Handle errors from lookup_netgr_step gracefully | Jakub Hrozek | 1 | -3/+10 | |