Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-06-29 | sudo responder: change protocol version to 1 | Pavel Březina | 1 | -1/+1 | |
2012-06-29 | sudo api: send uid, username and domainname | Pavel Březina | 5 | -66/+158 | |
https://fedorahosted.org/sssd/ticket/1239 Test client was changed accordingly. The new usage is: sss_sudo_cli username [uid] If uid is not set, getpwnam(username) is called. It will retrieve both default options and rules. | |||||
2012-06-29 | sudo api: remove EOK | Pavel Březina | 2 | -13/+10 | |
2012-06-21 | PAC client: add krb5 authdata plugin | Sumit Bose | 2 | -0/+467 | |
2012-06-21 | PAC client: add basic support in common client code | Sumit Bose | 2 | -0/+38 | |
2012-06-21 | PAC responder: add the core functionality | Sumit Bose | 1 | -0/+4 | |
This adds support for parsing PAC and storing information contained within. In particular the user and all his memberships are stored. In case it is necessary, getgrgid() requests are sent to provider for group resolution. | |||||
2012-06-21 | Add close on exec support for old platforms | Simo Sorce | 1 | -1/+16 | |
Older platfroms like RHEL5 do not have support for O_CLOEXC and need an explicit fcntl after the fd is created. Add it conditionally so it can be clearly removed once we declared those platfroms obsolete and unsupported. | |||||
2012-06-21 | Do not leak file descriptors in client libs. | Simo Sorce | 1 | -1/+1 | |
We need to make sure the mc socket is not leaked otherwise child processes will pile up leaked file descriptors. Add O_CLOEXEC when opening the cache. | |||||
2012-06-18 | Do not send SIGPIPE on disconnection | Shantanu Goel | 1 | -6/+21 | |
Note we set MSG_NOSIGNAL to avoid having to fiddle with signal masks but also do not want to die in case SIGPIPE gets raised and the application does not handle it. | |||||
2012-06-18 | Set return errno to the value prior to calling close(). | Shantanu Goel | 1 | -2/+2 | |
2012-06-15 | SSS_CLIENT: Fix uninitialized value error | Stephen Gallagher | 1 | -1/+1 | |
This would cause a crash if we jump to the done: label before it has been allocated. | |||||
2012-06-14 | Provide "service filter" for SELinux context | Jan Zeleny | 1 | -0/+20 | |
At this moment we will support only asterisk, designating "all services". https://fedorahosted.org/sssd/ticket/1360 | |||||
2012-05-31 | SSH: Don't abort connection in sss_ssh_knownhostsproxy when DNS records are ↵ | Jan Cholasta | 1 | -36/+49 | |
missing https://fedorahosted.org/sssd/ticket/1356 | |||||
2012-05-31 | SSH: Supress error message output in sss_ssh_knownhostsproxy | Jan Cholasta | 2 | -15/+8 | |
2012-05-29 | Revert the client packet length, too, after reverting the packet protocol | Jakub Hrozek | 1 | -1/+1 | |
2012-05-25 | NSS: Restore original protocol for getservbyport | Stephen Gallagher | 1 | -2/+3 | |
When fixing an endianness bug, we changed the protocol unnecessarily. | |||||
2012-05-25 | Send 16bit protocol numbers from the sss_client | Jakub Hrozek | 1 | -6/+7 | |
https://fedorahosted.org/sssd/ticket/1348 | |||||
2012-05-22 | Always use positional arguments in translatable strings | Stephen Gallagher | 1 | -2/+2 | |
https://fedorahosted.org/sssd/ticket/1336 | |||||
2012-05-03 | AUTOFS: remove unused assignments | Jakub Hrozek | 1 | -1/+0 | |
Also changes setautomntent_send so that is only return NULL in case the tevent_req creation fails. | |||||
2012-05-02 | PAM_SSS: report error code if write fails | Jakub Hrozek | 1 | -2/+2 | |
clang had reported this as "value of ret is never used", I think it would be nice to report a meaningful error message. | |||||
2012-04-24 | SSH: Add support for hashed known_hosts | Jan Cholasta | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1203 | |||||
2012-04-20 | Convert read and write operations to sss_atomic_read | Jakub Hrozek | 2 | -27/+27 | |
https://fedorahosted.org/sssd/ticket/1209 | |||||
2012-04-18 | autofs: Raise the maximum key length to PATH_MAX | Jakub Hrozek | 1 | -2/+4 | |
https://fedorahosted.org/sssd/ticket/1300 | |||||
2012-04-18 | sudo api: check sss_status instead of errnop in sss_sudo_send_recv_generic() | Pavel Březina | 1 | -2/+4 | |
2012-04-18 | pam_sss: improve error handling in SELinux code | Jakub Hrozek | 1 | -3/+5 | |
2012-04-05 | Use HTML_TIMESTAMP instead of HTML_FOOTER_DESCRIPTION | Jakub Hrozek | 1 | -3/+4 | |
https://fedorahosted.org/sssd/ticket/1271 | |||||
2012-03-28 | Silence Coverity warning in the autofs test tool | Jakub Hrozek | 1 | -8/+22 | |
https://fedorahosted.org/sssd/ticket/1237 | |||||
2012-03-26 | AUTOFS: fix copy-and-paste bug in the autofs client | Jakub Hrozek | 1 | -1/+1 | |
2012-03-20 | SSH: Fix infinite loop in sss_ssh_knownhostsproxy | Jan Cholasta | 1 | -6/+9 | |
https://fedorahosted.org/sssd/ticket/1268 | |||||
2012-03-19 | sss_client: shared memory cache group map support | Simo Sorce | 3 | -0/+268 | |
2012-03-19 | sss_client: shared memory cache passwd map support | Simo Sorce | 3 | -0/+262 | |
2012-03-19 | sss_client: Add common shared memory cache utils | Simo Sorce | 2 | -0/+334 | |
2012-03-15 | SSH: Canonicalize host name and do reverse DNS lookup in sss_ssh_knownhostsproxy | Jan Cholasta | 1 | -26/+38 | |
https://fedorahosted.org/sssd/ticket/1245 | |||||
2012-03-15 | SSH: Allow clients to explicitly specify host alias | Jan Cholasta | 4 | -6/+25 | |
This change removes the need to canonicalize host names on the responder side - the relevant code was removed. | |||||
2012-03-09 | Fixed resource leak in ssh client code | Jan Zeleny | 1 | -0/+1 | |
2012-03-09 | Fixed uninitialized pointer in SSH authorized keys client | Jan Zeleny | 1 | -1/+1 | |
2012-03-09 | Fixed uninitialized pointer in SSH known host proxy | Jan Zeleny | 1 | -1/+1 | |
2012-03-09 | Use of unininitialized value in sss_sudo_parse_response | Pavel Březina | 1 | -0/+2 | |
https://fedorahosted.org/sssd/ticket/1231 | |||||
2012-03-09 | Two memory leaks in sss_sudo_get_values | Pavel Březina | 1 | -1/+4 | |
https://fedorahosted.org/sssd/ticket/1235 | |||||
2012-03-08 | Only free returned values on success | Jakub Hrozek | 1 | -3/+3 | |
https://fedorahosted.org/sssd/ticket/1237 | |||||
2012-03-08 | Autofs: operate on contents of double-pointer, not address | Jakub Hrozek | 1 | -3/+3 | |
https://fedorahosted.org/sssd/ticket/1234 | |||||
2012-02-27 | SSH: Remove unused --file option of sss_ssh_knownhostsproxy | Jan Cholasta | 1 | -5/+0 | |
2012-02-27 | SSH: Add more debugging messages | Jan Cholasta | 2 | -4/+18 | |
2012-02-27 | AUTOFS: speed up the client by requesting multiple entries at once | Jakub Hrozek | 1 | -44/+160 | |
https://fedorahosted.org/sssd/ticket/1166 | |||||
2012-02-26 | SSH: Manage global known_hosts file in the responder | Jan Cholasta | 1 | -78/+2 | |
https://fedorahosted.org/sssd/ticket/1193 | |||||
2012-02-26 | SSH: Continue connecting to SSH server even when SSSD is not running in ↵ | Jan Cholasta | 1 | -112/+85 | |
sss_ssh_knownhostsproxy Additionally, don't drop the connection when the sss_ssh_knownhostsproxy process receives a signal. https://fedorahosted.org/sssd/ticket/1179 https://fedorahosted.org/sssd/ticket/1184 | |||||
2012-02-26 | SSH: Refactor responder and client common code | Jan Cholasta | 4 | -177/+72 | |
2012-02-23 | pam_sss: keep selinux optional | Simo Sorce | 1 | -0/+6 | |
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com> | |||||
2012-02-23 | nss_group: Cache the result from sssd when the glibc provided buffer is too ↵ | Simo Sorce | 1 | -8/+145 | |
small. | |||||
2012-02-14 | Refactor sss_result into sss_sudo_result | Pavel Březina | 5 | -36/+38 | |
https://fedorahosted.org/sssd/ticket/1159 |