sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-01-23	TOOLS: Use file descriptor to avoid races when creating a home directory	Jakub Hrozek	1	-3/+3
	When creating a home directory, the destination tree can be modified in various ways while it is being constructed because directory permissions are set before populating the directory. This can lead to file creation and permission changes outside the target directory tree, using hard links. This security problem was assigned CVE-2013-0219 https://fedorahosted.org/sssd/ticket/1782
2013-01-15	tests: unit test for sysdb_remove_attrs	Jakub Hrozek	1	-0/+45

2013-01-15	tests: add unit test for sysdb_get_new_id	Jakub Hrozek	1	-1/+20

2013-01-15	tests: test sysdb_initgroups	Jakub Hrozek	1	-0/+48

2013-01-15	tests: adda a unit test for test_sysdb_search_groups	Jakub Hrozek	1	-0/+29

2013-01-15	tests: unit test for test_sysdb_search_users	Jakub Hrozek	1	-0/+31

2013-01-15	tests: add a unit test for sysdb_netgroup_base_dn	Jakub Hrozek	1	-0/+23

2013-01-15	Add domain arguments to sysdb ssh functions	Simo Sorce	1	-2/+4

2013-01-15	Add domain arguments to sysdb services functions	Simo Sorce	1	-15/+9
	also fix sysdb_svc_add declarations
2013-01-15	Add domain argument to sysdb autofs functions	Simo Sorce	1	-8/+13

2013-01-15	Add domain argument to sysdb_remove_attrs()	Simo Sorce	1	-4/+4

2013-01-15	Add domain argument to sysdb_has/set_enumerated()	Simo Sorce	1	-5/+3

2013-01-15	Add domain arg to sysdb_search/delete_netgroup()	Simo Sorce	1	-1/+2

2013-01-15	Add domain argument to sysdb_delete_group()	Simo Sorce	1	-5/+8
	Also remove sysdb_delete_domgroup()
2013-01-15	Add domain argument to sysdb_delete_user()	Simo Sorce	1	-5/+8
	Also remove sysdb_delete_domuser()
2013-01-15	Add domain to sysdb_delete_custom	Simo Sorce	1	-1/+1

2013-01-15	Add domain argument to sysdb_search_custom()	Simo Sorce	1	-1/+3
	Also changes sysdb_search_custom_by_name()
2013-01-15	Add domain argument to sysdb_store_custom()	Simo Sorce	1	-1/+1

2013-01-15	Add domain argument to sysdb_cache_auth()	Simo Sorce	1	-4/+8

2013-01-15	Add domain argument to sysdb_cache_password()	Simo Sorce	1	-1/+1

2013-01-15	Add domain arg to sysdb group member functions	Simo Sorce	1	-6/+10

2013-01-15	Add domain argument to sysdb_store_group()	Simo Sorce	1	-9/+12
	Also remove sysdb_store_domgroup()
2013-01-15	Add domain argument to sysdb_store_user()	Simo Sorce	1	-9/+14
	Also remove sysdb_store_domuser()
2013-01-15	Add domain arguments to sysdb_add_inetgroup fns.	Simo Sorce	1	-2/+2

2013-01-15	Add domain arguments to sysdb_add_group functions.	Simo Sorce	1	-7/+9

2013-01-15	Add domain argument to sysdb_add_user()	Simo Sorce	1	-2/+2

2013-01-15	Add domain argument to sysdb_add_basic_user()	Simo Sorce	1	-0/+1

2013-01-15	Add domain argument to sysdb_set_netgroup_attr()	Simo Sorce	1	-1/+1

2013-01-15	Add domain argument to sysdb_set_group_attr()	Simo Sorce	1	-12/+12

2013-01-15	Add domain argument to sysdb_set_user_attr()	Simo Sorce	1	-3/+4

2013-01-15	Add domain arg to sysdb_search_netgroup_by_name()	Simo Sorce	1	-0/+1

2013-01-15	Add domain to sysdb_search_group_by_gid()	Simo Sorce	1	-1/+24
	Also remove unused sysdb_search_domgroup_by_gid()
2013-01-15	Add domain to sysdb_search_group_by_name()	Simo Sorce	1	-3/+4
	Also remove unused sysdb_search_domgroup_by_name()
2013-01-15	Add domain to sysdb_search_user_by_uid()	Simo Sorce	1	-1/+2
	Also remove unused sysdb_search_domuser_by_uid()
2013-01-15	Add domain to sysdb_search_user_by_name()	Simo Sorce	1	-3/+4
	Also remove unused sysdb_search_domuser_by_name()
2013-01-15	Add domain argument to sysdb_get_user_attr()	Simo Sorce	1	-2/+2

2013-01-15	Add domain option to sysdb_get/netgr/attrs() fns	Simo Sorce	1	-3/+3

2013-01-15	Pass domain to sysdb_enum<pw/gr>ebt() functions	Simo Sorce	1	-0/+2

2013-01-15	Pass domain to sysdb_get<pwu/grg><id() functions	Simo Sorce	1	-0/+2

2013-01-15	Pass domain to sysdb_get<pw/gr>nam() functions	Simo Sorce	1	-8/+20
	Also allows us to remove sysdb_subdom_get<pw/gr>nam() wrappers and restore fqnames proper value in subdomains, by testing for a parent domain being present or not.
2013-01-15	Make sysdb_domain_dn() require a domain.	Simo Sorce	1	-1/+1

2013-01-15	Make sysdb_netgroup_dn() require a domain explictly.	Simo Sorce	1	-2/+4

2013-01-15	Make sysdb_group_dn() require a domain explictly.	Simo Sorce	1	-2/+4

2013-01-15	Make sysdb_user_dn() require a domain explictly.	Simo Sorce	1	-2/+4

2013-01-15	Refactor single domain initialization	Simo Sorce	3	-9/+9
	Bring it out of sysdb, which will slowly remove internal dependencies on domains and instead will always require them to be passed by callers.
2013-01-10	Change pam data auth tokens.	Simo Sorce	1	-5/+8
	Use the new authtok abstraction and interfaces throught the code.
2013-01-10	Code can only check for cached passwords	Simo Sorce	1	-4/+2
	Make it clear to the API users that we can not take arbitrary auth tokens. We can only take a password for now so simplify and clarify the interface.
2013-01-08	Remove dead netgroup functions	Simo Sorce	1	-264/+0

2013-01-08	Refactor gid handling in the PAC responder	Sumit Bose	1	-21/+36
	Instead of using a single array of gid-domain_pointer pairs, Simo suggested to use a gid array for each domain an store it with a pointer to the domain.
2013-01-08	Add tests for get_gids_from_pac()	Sumit Bose	1	-0/+256