summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2011-12-05Ignore NULL-terminator when checking UTF8-validityStephen Gallagher2-4/+4
Glib fails if the NULL-terminator is included when a length is specified.
2011-12-05Fixed an error in macro for merging double linked listsJan Zeleny1-1/+1
2011-12-05Allow using Glib for UTF8 supportStephen Gallagher6-42/+206
2011-11-30Use dereference during IPA provider initgroupsJakub Hrozek1-40/+149
https://fedorahosted.org/sssd/ticket/1099
2011-11-29Fix two small bugs in group dereferencingJakub Hrozek1-2/+5
2011-11-29Add ipa_hbac_support_srchost option to IPA providerJan Zeleny9-36/+165
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
2011-11-29IPA migration fixesJakub Hrozek3-97/+141
* use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924
2011-11-29Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek5-11/+43
2011-11-29RESPONDER: Refactor DP requests into tevent_req styleStephen Gallagher6-427/+641
2011-11-29LDAP: Try next failover server on any errorStephen Gallagher1-9/+5
2011-11-28Fixed logically dead code in netgroup processingJan Zeleny1-1/+1
2011-11-28Fixed uninitialized pointer read in netgroups processingJan Zeleny1-0/+6
2011-11-28sss_cli.h - fix: function declaration after the header guardPavel Březina1-2/+2
2011-11-28Fixed a typo in sysdb_upgrade_07() declarationJan Zeleny1-1/+1
2011-11-25Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA providerJakub Hrozek4-4/+18
This was causing a segfault during HBAC processing and any ID lookups except for netgroups
2011-11-23Added IPA account info handlerJan Zeleny3-1/+373
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider.
2011-11-23Added support for fetching netgroups in IPA providerJan Zeleny1-0/+992
2011-11-23New IPA ID contextJan Zeleny3-22/+37
2011-11-23Added and modified options for IPA netgroupsJan Zeleny6-31/+199
2011-11-23Modified sdap_parse_search_base()Jan Zeleny4-16/+14
2011-11-23Renamed some LDAP routinesJan Zeleny6-41/+49
These were renamed just ot make sure they are not mistook for IPA netgroup functions.
2011-11-22Set more strict permissions on keyringSimo Sorce2-1/+28
We want to confine access to the keyring to the current process and not let root easily peek into the keyring contents.
2011-11-22Fixed unchecked value of setenv() in check_and_export_options()Jan Zeleny1-2/+5
https://fedorahosted.org/sssd/ticket/1080
2011-11-22Cleanup: Remove unused parametersJakub Hrozek36-185/+84
2011-11-22SYSDB: Make ENOENT log messages less threateningStephen Gallagher1-16/+54
Previously, they were reported with the prefix "Error:" which caused confusion among end-users while debugging.
2011-11-21Fix FTBFS related to -Werror=format-securityKrzysztof Klimonda2-2/+2
2011-11-18RESPONDER: Ensure that all input strings are valid UTF-8Stephen Gallagher6-0/+49
2011-11-18Prevent printing NULL in several places of LDAP providerJakub Hrozek2-5/+9
2011-11-11Use one transaction instead of two during RFC2307bis group processingJakub Hrozek1-31/+55
https://fedorahosted.org/sssd/ticket/1054
2011-11-11Squash transactions in sdap_initgr_common_storeJakub Hrozek1-6/+25
https://fedorahosted.org/sssd/ticket/1053
2011-11-10configAPI: Fix removing in old domain when saving a new domainJakub Hrozek1-2/+2
2011-11-10Typo fixesMarko Myllynen2-2/+2
Fix few trivial types reported by Yuri.
2011-11-10SBUS: Fix DEBUG log matchingStephen Gallagher1-7/+8
This log message should only be displayed at the most verbose of log levels. Since it didn't match, it was resulting in a Coverity error warning of the printing of an uninitialized value (fd).
2011-11-10Fix typos in manual pagesYuri Chornoivan4-4/+4
2011-11-08LDAP: Remove redundant groups from the lookup listStephen Gallagher1-23/+0
2011-11-07Fixed empty loginShell in proxy providerJan Zeleny1-4/+32
https://fedorahosted.org/sssd/ticket/892
2011-11-07Fixed possible resource leak in create_mail_spool()Jan Zeleny1-9/+9
https://fedorahosted.org/sssd/ticket/1071
2011-11-07Fixed possible resource leak in get_uid_from_pid()Jan Zeleny1-4/+10
https://fedorahosted.org/sssd/ticket/1069
2011-11-07Use correct state struct in sdap_initgr_rfc2307bis_next_baseJakub Hrozek1-2/+3
2011-11-07Fix segfault in sdap_get_initgr_userJakub Hrozek1-1/+2
2011-11-02Periodic translation file updateStephen Gallagher38-9992/+29305
2011-11-02SYSDB: add index for nameAliasStephen Gallagher3-1/+97
2011-11-02Handle group renaming correctlyJan Zeleny1-2/+7
https://fedorahosted.org/sssd/ticket/1040
2011-11-02Support to request canonicalization in LDAP/IPA providerJan Zeleny10-1/+45
https://fedorahosted.org/sssd/ticket/957
2011-11-02Add support to request canonicalization on krb AS requestsJan Zeleny10-6/+68
https://fedorahosted.org/sssd/ticket/957
2011-11-02Add wrapper for krb5_get_init_creds_opt_set_canonicalizeJan Zeleny3-0/+14
2011-11-02Fixes debug-tests.c coverity issues: NEGATIVE_RETURNS, FORWARD_NULLPavel Březina1-49/+140
https://fedorahosted.org/sssd/ticket/1046
2011-11-02RESPONDER: Fix segfault in sss_packet_send()Stephen Gallagher1-0/+5
There are several places (all error-handling) where sss_cmd_done() is called with no response packet created. As a short-term solution, we need to check whether the packet is NULL and simply return EINVAL. client_send() (the consumer) will then forcibly disconnect the client (which will return PAM_SYSTEM_ERR to the client).
2011-11-02LDAP: Add support for multiple search bases for group enumerationStephen Gallagher4-24/+101
2011-11-02LDAP: Add support for multiple search bases for user enumerationStephen Gallagher4-8/+49