sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-06-21	failover: return error when SRV lookup returned only duplicates	Pavel Březina	1	-0/+1
	https://fedorahosted.org/sssd/ticket/1947 Otherwise we risk that the meta server is removed from the server list, but without a chance to return, because there may be no fo_server with srv_data = meta. Also if state->meta->next is NULL (it is still orphaned because we try to errornously expand it without invoking collapse first), state->out will be NULL and SSSD will crash. New error code: ERR_SRV_DUPLICATES
2013-06-14	KRB: Handle preauthentication error correctly	Ondrej Kos	1	-0/+1
	https://fedorahosted.org/sssd/ticket/1873 KRB preauthentication error was later mishandled like authentication error.
2013-05-03	Refactor dynamic DNS updates	Jakub Hrozek	1	-0/+3
	Provides two new layers instead of the previous IPA specific layer: 1) dp_dyndns.c -- a very generic dyndns layer on the DP level. Its purpose it to make it possible for any back end to use dynamic DNS updates. 2) sdap_dyndns.c -- a wrapper around dp_dyndns.c that utilizes some LDAP-specific features like autodetecting the address from the LDAP connection. Also converts the dyndns code to new specific error codes.
2013-04-10	DNS sites support - SRV lookup plugin interface	Pavel Březina	1	-0/+2
	https://fedorahosted.org/sssd/ticket/1032 Introduces two new error codes: - ERR_SRV_NOT_FOUND - ERR_SRV_LOOKUP_ERROR Since id_provider is authoritative in case of SRV plugin choise, ability to override the selected pluging during runtime is not desirable. We rely on the fact that id_provider is initialized before all other providers, thus the plugin is set correctly.
2013-03-20	correct order in error_to_str table	Pavel Březina	1	-1/+1
	Also fixed typo.
2013-03-19	Convert sdap_access to new error codes	Simo Sorce	1	-0/+1
	Also simplify sdap_access_send to avoid completely fake _send() routines.
2013-03-19	Use common error facility instead of sdap_result	Simo Sorce	1	-0/+3
	Simplifies and consolidates error reporting for ldap authentication paths. Adds 3 new error codes: ERR_CHPASS_DENIED - Used when password constraints deny password changes ERR_ACCOUNT_EXPIRED - Account is expired ERR_PASSWORD_EXPIRED - Password is expired
2013-03-04	Cleanup error message handling for krb5 child	Simo Sorce	1	-1/+6
	Use the new internal SSSD errors, to simplify error handling. Instead of using up to 3 different error types (system, krb5 and pam_status), collapse all error reporting into one error type mapped on errno_t. The returned error can contain either SSSD internal errors, kerberos errors or system errors, they all use different number spaces so there is no overlap and they can be safely merged. This means that errors being sent from the child to the parent are not pam status error messages anymore. The callers have been changed to properly deal with that. Also note that this patch removes returning SSS_PAM_SYSTEM_INFO from the krb5_child for kerberos errors as all it was doing was simply to make the parent emit the same debug log already emitted by the child, and the code is simpler if we do not do that.
2013-03-04	Use SSSD specific errors for offline auth	Simo Sorce	1	-0/+5
	This prevents reportin false errors when internal functions return a generic EINVAL or EACCES that should just be treated as internal errors.
2013-03-04	Add SSSD specific error codes and definitions	Simo Sorce	1	-0/+41
	This code adds a new range of error codes specific to SSSD, It also provides helper functions to print out error defintions like you can do with system error messages and the strerror() function. The sss_strerror() function can accept both the new sssd errors and system errno_t errors falling back to the system strerror() if the error code provide is not a valid SSSD error code.