summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2010-04-12sysdb: convert sysdb_enumpwentSimo Sorce4-259/+144
2010-04-12sysdb: convert sysdb_get_user_attrSimo Sorce6-293/+160
2010-04-12sysdb: convert sysdb_getgrgidSimo Sorce4-263/+160
2010-04-12sysdb: convert sysdb_getgrnamSimo Sorce10-394/+253
2010-04-12sysdb: convert sysdb_getpwuidSimo Sorce4-265/+146
2010-04-12sysdb: convert sysdb_getpwnamSimo Sorce12-623/+415
2010-04-12sysdb: add automatic transactions where neededSimo Sorce1-7/+47
Only functions that do multiple operations need explicit transactions as ldb_add/ldb_modify/ldb_delete already start transactions automatically intenrally.
2010-04-12sysdb: remove async transactionsSimo Sorce2-157/+0
not used anymore
2010-04-12Remove remaining use of sysdb_transaction_sendSimo Sorce5-723/+205
2010-04-12Use the sysdb synchronous transaction functionsSimo Sorce7-424/+104
2010-04-12proxy: complete conversion to synchronous sysdbSimo Sorce1-1113/+428
This makes proxy use only synchronous functions again.
2010-04-12sysdb: add synchronous transaction functionsSimo Sorce2-14/+37
2010-04-12tests: remove use of asynchronus transactionsSimo Sorce1-502/+86
now all calls are synchronous
2010-04-12sysdb: remove sysdb_check_handleSimo Sorce1-90/+0
not used anymore
2010-04-12sysdb: convert sysdb_cache_authSimo Sorce4-264/+136
2010-04-12sysdb: convert sysdb_search_groupsSimo Sorce4-410/+151
2010-04-12sysdb: delete sysdb_delete_groupSimo Sorce6-321/+109
2010-04-12sysdb: convert sysdb_delete_userSimo Sorce6-356/+115
2010-04-12sysdb: convert sysdb_search_usersSimo Sorce3-169/+72
2010-04-12sysdb remove sldb_request_send, not used anymoreSimo Sorce1-125/+0
2010-04-12sysdb: convert sysdb_asq_searchSimo Sorce4-358/+140
2010-04-12sysdb: convert sysdb_store_customSimo Sorce4-258/+93
2010-04-12sysdb: convert sysdb_search_customSimo Sorce4-371/+229
2010-04-12sysdb: convert sysdb_cache_passwordSimo Sorce6-209/+62
2010-04-12sysdb: convert sysdb_mod/add/remove_group_memberSimo Sorce4-628/+117
2010-04-12sysdb: convert sysdb_store/add(_basic)_groupSimo Sorce6-850/+294
2010-04-12sysdb: convert sysdb_store/add(_basic)_userSimo Sorce6-891/+430
2010-04-12sysdb: convert sysdb_get_new_idSimo Sorce2-397/+136
2010-04-12sysdb: convert sysdb_set_entry/user/group_attrSimo Sorce7-589/+144
2010-04-12sysdb: convert sysdb_search_group_by_name/gidSimo Sorce4-596/+277
2010-04-12sysdb: convert sysdb_search_user_by_name/uidSimo Sorce4-616/+219
2010-04-12sysdb: convert sysdb_search_entry and sysdb_delete_recursiveSimo Sorce5-456/+121
2010-04-12sysdb: convert sysdb_delete_customSimo Sorce3-147/+36
2010-04-12sysdb: use sysdb_delete_entry in recursive deleteSimo Sorce1-58/+8
2010-04-12sysdb: convert sysdb_delete_entryStephen Gallagher9-430/+101
2010-04-12sysdb: start conversion from async to syncSimo Sorce1-0/+4
allow nesting during transition
2010-04-12Support docdir and abs_builddirStephen Gallagher1-0/+1
Old versions of autoconf (before 2.60) did not include support for the docdir and abs_builddir variables. This patch emulates support for them. Fixes https://fedorahosted.org/sssd/ticket/422
2010-04-08Updating IT translationGuido Grazioli1-135/+160
2010-04-08SELinux login managementJakub Hrozek11-0/+434
Adds a new option -Z to sss_useradd and sss_usermod. This option allows user to specify the SELinux login context for the user. On deleting the user with sss_userdel, the login mapping is deleted, so subsequent adding of the same user would result in the default login context unless -Z is specified again. MLS security is not supported as of this patch.
2010-04-08Move SELinux related functions into its own moduleJakub Hrozek4-60/+86
Fix whitespace errors
2010-04-07Adding Russion TranslationDmitry Drozdov2-0/+861
2010-04-06Protect against check-and-open race conditionsStephen Gallagher3-30/+79
There is a small window between running lstat() on a filename and opening it where it's possible for the file to have been modified. We were protecting against this by saving the stat data from the original file and verifying that it was the same file (by device and inode) when we opened it again, but this is an imperfect solution, as it is still possible for an attacker to modify the permissions during this window. It is much better to simply open the file and test on the active file descriptor. Resolves https://fedorahosted.org/sssd/ticket/425 incidentally, as without the initial lstat, we are implicitly accepting symlinks and only verifying the target file.
2010-04-06Make sss_userdel check for logged in usersJakub Hrozek3-3/+154
sss_userdel now warns if the deleted user was logged in at the time of deletion. Also adds a new parameter --kick to userdel that kills all user processes before actually deleting ther user. Fixes: #229
2010-04-06Add userdel_cmd paramJakub Hrozek6-0/+104
Fixes: #231
2010-03-31Do not revert options to defaults in SSSDConfig.get_domain()Stephen Gallagher1-1/+1
There was a faulty check in get_domain() that led to the *_provider options being re-added, sometimes after options related to them had already been set. If those options had a default value, they would be overwritten by the default. Fixes: https://fedorahosted.org/sssd/ticket/441
2010-03-31Add regression test for https://fedorahosted.org/sssd/ticket/441Stephen Gallagher2-0/+6
2010-03-31Fix typo in ldap_id_use_start_tls option descriptionStephen Gallagher1-1/+1
2010-03-25Allow arbitrary-length PAM messagesStephen Gallagher7-43/+55
The PAM standard allows for messages of any length to be returned to the client. We were discarding all messages of length greater than 255. This patch dynamically allocates the message buffers so we can pass the complete message. This resolves https://fedorahosted.org/sssd/ticket/432
2010-03-25Add a test for domain_to_basedn()Sumit Bose1-0/+47
2010-03-25Fix LDAP search paths for IPA HBACSumit Bose6-43/+84
- use domain_to_basedn() to construct LDAP search paths for IPA HBAC - move domain_to_basedn() to a separate file to simplify the build of a test