sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-03-19	Convert sdap_access to new error codes	Simo Sorce	1	-0/+1
	Also simplify sdap_access_send to avoid completely fake _send() routines.
2013-03-19	Use common error facility instead of sdap_result	Simo Sorce	1	-0/+3
	Simplifies and consolidates error reporting for ldap authentication paths. Adds 3 new error codes: ERR_CHPASS_DENIED - Used when password constraints deny password changes ERR_ACCOUNT_EXPIRED - Account is expired ERR_PASSWORD_EXPIRED - Password is expired
2013-03-05	Improve IS_SSSD_ERROR() macro	Simo Sorce	1	-2/+2
	We need to mask the first part with 0xFFFF or there is a slight chance an unrelated error code would match even if the upper part is not exactly equal to ERR_BASE but just has all it's bits and some more. Also make the macro more reasable by adding another helper macro for filtering the base. Finally compare err and ERR_LAST directly w/o masking err, or the comparison will always return true.
2013-03-04	Cleanup error message handling for krb5 child	Simo Sorce	1	-0/+5
	Use the new internal SSSD errors, to simplify error handling. Instead of using up to 3 different error types (system, krb5 and pam_status), collapse all error reporting into one error type mapped on errno_t. The returned error can contain either SSSD internal errors, kerberos errors or system errors, they all use different number spaces so there is no overlap and they can be safely merged. This means that errors being sent from the child to the parent are not pam status error messages anymore. The callers have been changed to properly deal with that. Also note that this patch removes returning SSS_PAM_SYSTEM_INFO from the krb5_child for kerberos errors as all it was doing was simply to make the parent emit the same debug log already emitted by the child, and the code is simpler if we do not do that.
2013-03-04	Use SSSD specific errors for offline auth	Simo Sorce	1	-0/+5
	This prevents reportin false errors when internal functions return a generic EINVAL or EACCES that should just be treated as internal errors.
2013-03-04	Add SSSD specific error codes and definitions	Simo Sorce	1	-0/+75
	This code adds a new range of error codes specific to SSSD, It also provides helper functions to print out error defintions like you can do with system error messages and the strerror() function. The sss_strerror() function can accept both the new sssd errors and system errno_t errors falling back to the system strerror() if the error code provide is not a valid SSSD error code.