sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2011-04-12	Never remove gecos from the sysdb cache	Stephen Gallagher	1	-0/+9
	Now that gecos can come from either the 'gecos' or 'cn' attributes, we need to ensure that we never remove it from the cache.
2011-04-12	Provide a configuration option to use systemd unit file	Jakub Hrozek	2	-0/+52
	https://fedorahosted.org/sssd/ticket/837
2011-04-12	The systemd unit file should not require DBus	Jakub Hrozek	1	-2/+0
	This patch fixes the provided systemd unit file so it is the same as the one Jóhann B. Guðmundsson provided in Red Hat Bugzilla #689853 except for hardcoded paths.
2011-04-12	Use safe alignment macros for in-tree SRV record parsing	Jakub Hrozek	1	-3/+3
	The in-tree SRV record parsing is used with very old c-ares libraries that don't implement the parsing themselves (c-ares < 1.7, used in e.g. RHEL5)
2011-04-12	Initialise rootdse to NULL if not available	Sumit Bose	1	-0/+1

2011-04-11	Initialise srv_opts even if rootDSE is missing	Sumit Bose	2	-46/+49

2011-04-11	Remove detection of duplicates from SRV result processing	Jakub Hrozek	1	-9/+0

2011-04-08	Read only rootDSE data if rootDSE is available	Sumit Bose	1	-20/+22

2011-04-08	Fix unchecked return values of pam_add_response	Jakub Hrozek	3	-7/+23
	https://fedorahosted.org/sssd/ticket/798
2011-04-08	Don't pass NULL to printf for TLS errors	Jakub Hrozek	5	-33/+57
	https://fedorahosted.org/sssd/ticket/643
2011-04-01	Do not attempt to resolve nameless servers	Jakub Hrozek	1	-1/+1
	The failover code is not strictly in charge of resolving. Its main function is to provide a server to connect to for a service. It is legal, although not currently used, to have a server that has no name (server->common == NULL). In this case, no resolving should be done and it is assumed that the failover user, which are the SSSD back ends in our case, would perform any resolving out of band, perhaps using the user_data attribute of fo_server structure.
2011-04-01	Only save members for successfully saved groups	Jakub Hrozek	1	-2/+17

2011-03-30	Fall back to cn if gecos is not available	Stephen Gallagher	1	-0/+9
	We were not fully compliant with section 5.3 of RFC 2307 which states: An account's GECOS field is preferably determined by a value of the gecos attribute. If no gecos attribute exists, the value of the cn attribute MUST be used. (The existence of the gecos attribute allows information embedded in the GECOS field, such as a user's telephone number, to be returned to the client without overloading the cn attribute. It also accommodates directories where the common name does not contain the user's full name.)
2011-03-28	Mark transaction as done when cancelled	Jakub Hrozek	1	-2/+8

2011-03-28	RFC2307: Ignore zero-length member names in group lookups	Stephen Gallagher	1	-0/+4

2011-03-28	Always complete the transaction in sdap_process_group_members_2307	Stephen Gallagher	1	-0/+11
	If the loop ran through at least one sdap_process_missing_member_2307() call and errored out later, we were not canceling the transaction.
2011-03-28	Fix typo in sdap_nested_group_process_step	Jakub Hrozek	1	-1/+1

2011-03-24	Return from functions in LDAP provider after marking request as failed	Jakub Hrozek	1	-1/+4

2011-03-24	sss_obfuscate: abort on ctrl+c	Stephen Gallagher	1	-0/+12
	There is a python bug (http://bugs.python.org/issue11236) where getpass.getpass() does not throw KeyboardInterrupt on ctrl+c. This workaround is the closest we can get: if we detect the control character in the string that we read, we'll cancel.
2011-03-24	sss_obfuscate: Avoid traceback on ctrl+d	Stephen Gallagher	1	-5/+9

2011-03-24	Add host access control support	Pierre Ossman	10	-3/+184
	https://fedorahosted.org/sssd/ticket/746
2011-03-23	Check result of talloc_strdup() properly	Stephen Gallagher	1	-1/+1
	Coverity 10737
2011-03-23	Don't crash on error if _name parameter unspecified	Stephen Gallagher	1	-2/+2
	Coverity 10738
2011-03-23	Don't crash if we get a multivalued name without an origDN	Stephen Gallagher	1	-1/+3
	Coverity 10740 and 10739
2011-03-23	Add sysdb_attrs_primary_name_list() routine	Stephen Gallagher	3	-18/+81
	This routine will replace the use of sysdb_attrs_to_list() for any case where we're trying to get the name of the entry. It's a necessary precaution in case the name is multi-valued.
2011-03-23	Use sysdb_attrs_primary_name() in sdap_initgr_nested_store_group	Stephen Gallagher	1	-1/+3

2011-03-23	Use fake groups during IPA schema initgroups	Jakub Hrozek	1	-114/+418
	https://fedorahosted.org/sssd/ticket/822
2011-03-23	Add originalDN to fake groups	Jakub Hrozek	4	-5/+21

2011-03-23	RFC2307bis: Ignore aliases for groups	Stephen Gallagher	1	-14/+26
	Groups in ldap with multiple values for their groupname attribute will now be compared against the RDN of the entry to determine the "primary" group name. We will save only this primary group name to the ldb cache.
2011-03-23	RFC2307: Ignore aliases for groups	Stephen Gallagher	1	-23/+35
	Groups in ldap with multiple values for their groupname attribute will now be compared against the RDN of the entry to determine the "primary" group name. We will save only this primary group name to the ldb cache.
2011-03-23	Ignore aliases for users	Stephen Gallagher	1	-20/+26
	Users in ldap with multiple values for their username attribute will now be compared against the RDN of the entry to determine the "primary" username. We will save only this primary name to the ldb cache.
2011-03-23	Add sysdb_attrs_primary_name()	Stephen Gallagher	2	-0/+106
	This function will check a sysdb_attrs struct for the primary name of the entity it represents. If there are multiple entries, it will pick the one that matches the RDN. If none match, it will throw an error.
2011-03-23	Create sysdb_get_rdn() function	Stephen Gallagher	2	-13/+50
	This function takes a DN formatted string and returns the RDN value from it.
2011-03-22	Sanitize DN when searching the original DN in the cache	Sumit Bose	1	-1/+9

2011-03-17	Fix incorrect return value check	Stephen Gallagher	1	-1/+1

2011-03-17	Add support for krb5 access provider to SSSDConfig API	Stephen Gallagher	2	-1/+3

2011-03-15	Fix LDAP search filter for nested initgroups	Jakub Hrozek	1	-1/+1

2011-03-14	Fix one unlikely case of failure in sdap_id_op module	Jan Zeleny	1	-1/+3
	There can be an unlikely scenario when the first part of sdap_id_op_connect_done works fine and there is no need to mark backend offline. But right after the check, the memory allocation can fail in which case the backend needs to be marked offline along with disabled reconnecting.
2011-03-14	Require existence of username, uid and gid for user enumeration	Stephen Gallagher	1	-12/+18
	We will ignore users that do not have these three values.
2011-03-14	Require existence of GID number and name in group searches	Stephen Gallagher	3	-25/+42
	https://fedorahosted.org/sssd/ticket/824
2011-03-09	Run callbacks if server IP changes	Jakub Hrozek	3	-2/+20

2011-03-09	Release handle if not connected	Sumit Bose	1	-0/+1

2011-03-09	Change state of hash entry if netgroup cannot be parsed	Sumit Bose	1	-0/+2

2011-03-09	Update translation sources	Stephen Gallagher	6	-5108/+3296

2011-03-09	Add new translations from Transifex	Stephen Gallagher	4	-1/+16148

2011-03-08	Always expire host name resolution	Jakub Hrozek	1	-8/+7
	The previous version of the patch only expired a resolved host name if the port was being reset. We want to always expire it so we notice IP address changes even if the previous server is still up.
2011-03-08	Remove unused sysdb_attrs object	Jan Zeleny	1	-8/+0

2011-03-08	Remove unused be_check_online() SBUS call	Jan Zeleny	2	-50/+0

2011-03-07	Prevent segfault in failover code	Jakub Hrozek	1	-2/+3

2011-03-07	Refactor set_netgroup_entry()	Sumit Bose	1	-4/+7
	To avoid wrong or missing netgroup names in the getent_ctx destructor set_netgroup_entry() now takes the name out of the getent_ctx struct instead of using a separate argument.