sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2012-08-01	Change refreshing of subdomains	Simo Sorce	1	-16/+20
	This patch keeps a local copy of the subdomains in the ipa subdomains plugin context. This has 2 advantages: 1. allows to check if anything changed w/o always hitting the sysdb. 2. later will allows us to dump this information w/o having to retrieve it again. The timestamp also allows to avoid refreshing too often.
2012-08-01	Add realm paramter to subdomain list	Simo Sorce	1	-3/+3
	This will be used later for setting domain_realm mappings in krb5.conf
2012-08-01	tests: Remove useless consts	Simo Sorce	1	-27/+15
	Declaring a bunch of structures as const and then wrapping all uses in discard_const_p() is a bit silly. Remove all these useless decorations.
2012-08-01	Change subdomain_info	Simo Sorce	1	-16/+22
	Rename the structure to use a standard name prefix so it is properly name-spaced, in preparation for changing the structure itself.
2012-08-01	Added unit test for sysdb_ssh.c	Michal Zidek	1	-0/+447

2012-08-01	Primary server support: basic support in failover code	Jan Zeleny	1	-6/+7
	Now there are two list of servers for each service. If currently selected server is only backup, then an event will be scheduled which tries to get connection to one of primary servers and if it succeeds, it starts using this server instead of the one which is currently connected to.
2012-07-27	tests: allow changing cwd in all tests	Pavel Březina	3	-0/+9

2012-07-18	Fixed: Uninitialized value in krb5_child-test if ccname was specified.	Michal Zidek	1	-1/+1
	https://fedorahosted.org/sssd/ticket/1411
2012-07-18	Fixed: Unchecked return value from dp_opt_set_int.	Michal Zidek	1	-1/+5

2012-07-10	Cast uid_t to unsigned long long in DEBUG messages	Jakub Hrozek	2	-5/+6

2012-07-10	pac responder: limit access by checking UIDs	Sumit Bose	1	-0/+178
	A check for allowed UIDs is added in the common responder code directly after accept(). If the platform does not support reading the UID of the peer but allowed UIDs are configured, access is denied. Currently only the PAC responder sets the allowed UIDs for a socket. The default is that only root is allowed to access the socket of the PAC responder. Fixes: https://fedorahosted.org/sssd/ticket/1382
2012-07-09	Add missing return value check	Stephen Gallagher	1	-1/+1
	Coverity #12782
2012-07-09	Avoid NULL-dereference in error-handling	Stephen Gallagher	1	-1/+3
	Coverity #12783
2012-07-09	Fix uninitialized value return	Stephen Gallagher	1	-1/+1
	Coverity #12786
2012-07-09	Fix incorrect return value in tests	Stephen Gallagher	1	-0/+2
	Coverity #12798
2012-07-09	heimdal: fix compile error in krb5-child-test	Rambaldi	1	-0/+4

2012-07-06	AD: Add AD identity provider	Stephen Gallagher	1	-0/+109
	This new identity provider takes advantage of existing code for the LDAP provider, but provides sensible defaults for operating against an Active Directory 2008 R2 or later server.
2012-06-29	TESTS: Print messages when LDAP options do not match	Stephen Gallagher	1	-2/+10

2012-06-26	libcrypto fully implemented	George McCollister	1	-6/+40
	Implemented working versions of the following functions for libcrypto: sss_base64_encode sss_base64_decode sss_hmac_sha1 sss_password_encrypt sss_password_decrypt test_encrypt_decrypt now expects EOK from libcrypto. test_hmac_sha1 now expects EOK from libcrypto. Added test_base64_encode to test base64 encoding implementation. Added test_base64_decode to test base64 decoding implementation. Signed-off-by: George McCollister <George.McCollister@gmail.com>
2012-06-21	PAC responder: test suite	Jan Zeleny	1	-0/+106

2012-06-15	KRB5: Auto-detect DIR cache support in configure	Stephen Gallagher	2	-0/+7
	We can't support the DIR cache features in systems with kerberos libraries older than 1.10. Make sure we don't build it on those systems.
2012-06-14	Use Kerberos context in KRB5_DEBUG	Jakub Hrozek	1	-10/+4
	Passing Kerberos context to sss_krb5_get_error_message will allow us to get better error messages.
2012-06-14	Add support for storing credential caches in the DIR: back end	Jakub Hrozek	2	-17/+95
	https://fedorahosted.org/sssd/ticket/974
2012-06-14	Add a credential cache back end structure	Jakub Hrozek	2	-50/+32
	To be able to add support for new credential cache types easily, this patch creates a new structure sss_krb5_cc_be that defines common operations with a credential cache, such as create, check if used or remove.
2012-06-14	Add a krb5_child test tool	Jakub Hrozek	1	-0/+551
	https://fedorahosted.org/sssd/ticket/1127
2012-06-08	sss_idmap: fix typo which prevents sub auth larger then 2^31	Sumit Bose	1	-0/+37
	A test to cover this is added as well.
2012-06-08	sss_idmap: add support for samba struct dom_sid	Sumit Bose	1	-2/+100
	The samba ndr libraries use struct dom_sid to handle SIDs. Since there is no public samba library which offers conversion from other representations, e.g. as string, this is added to libsss_idmap. To avoid compile-time or run-time dependency to any samba library or header file the definition of the struct is copied here.
2012-06-04	Fixed setting of debug level in test suite	Jan Zeleny	2	-4/+2

2012-05-31	Ghost members - various small changes	Jan Zeleny	1	-1/+1

2012-05-14	Rename struct dom_sid to struct sss_dom_sid	Sumit Bose	1	-8/+8
	To avoid conflicts with struct dom_sid used by samba the sss_ prefix is added to the struct used by libsss_idmap.
2012-05-11	SYSDB: Handle user and group renames better	Jakub Hrozek	1	-0/+143
	Fixes a regression in the local domain tools where sss_groupadd no longer detected a GID duplicate. The check for EEXIST is moved one level up into more high level function. The patch also adds the same rename support for users. I found it odd that we allowed a rename of groups but not users. There is a catch when storing a user -- his cached password would be gone. I think that renaming a user is such a rare operation that it's not severe, plus there is a warning in the logs.
2012-05-04	Fix endian issue in SID conversion	Sumit Bose	1	-1/+3
	Since the byte-order is only important when dealing with the binary SID the sub-auth values are stored in host order and are only converted while reading or writing the binary SID.
2012-05-01	Allow different SID representations in libidmap	Sumit Bose	1	-0/+206
	Besides as strings it is now possible to use binary SIDs or a struct containing all SID information. Functions to convert between these formats are added as well.
2012-04-24	UTIL: Add HMAC-SHA-1 function	Jan Cholasta	1	-0/+36

2012-04-24	Sysdb routines for subdomains	Jan Zeleny	1	-0/+232

2012-04-20	Test RFC2307bis and RFC2307 option maps	Jakub Hrozek	1	-0/+28
	https://fedorahosted.org/sssd/ticket/1281 Only user, group and autofs maps are different. Services and netgroups are using the same map.
2012-04-20	Move atomic io function to a separate module	Jakub Hrozek	1	-9/+9
	We'll be using it on various places of the SSSD. The function is in its own file to allow using just the one piece without having to drag in the whole util.c module.
2012-04-20	sss_atomic_io: Do not fail reads with EPIPE if there is not enough data to read	Jakub Hrozek	1	-0/+206
	Also adds a unit test for sss_atomic_io()
2012-03-29	Return correct resolv_status on resolver timeout	Jakub Hrozek	1	-11/+72
	https://fedorahosted.org/sssd/ticket/1274
2012-03-28	Remove old compatibility tests	Stephen Gallagher	1	-11/+1
	These are now replaced by the more accurate tests. This patch also drops the runtime option-count check, since we are always performing the more complete check at build-time.
2012-03-28	Add better tests for sdap_attr compability	Stephen Gallagher	3	-0/+69

2012-03-28	Add better dp_option tests	Stephen Gallagher	3	-0/+49

2012-03-26	Add idmap library	Sumit Bose	1	-0/+231

2012-02-29	Keep sysdb context in domain info struct	Sumit Bose	2	-18/+6

2012-02-24	Delete missing attributes from netgroups to be stored	Jan Zeleny	1	-1/+1
	https://fedorahosted.org/sssd/ticket/1136
2012-02-07	AUTOFS: IPA provider	Jakub Hrozek	1	-0/+2

2012-01-31	IPA: Add support for services lookups (non-enum)	Stephen Gallagher	1	-0/+1

2012-01-31	SYSDB: extend sysdb_store_service() to accept additional attributes	Stephen Gallagher	1	-4/+4

2012-01-27	SYSDB: Add indexes for servicePort and serviceProtocol	Stephen Gallagher	1	-0/+14

2012-01-27	SYSDB: Add sysdb routines for manipulating service entries	Stephen Gallagher	1	-0/+358