Commits - SSSD/sssd

sysdb-tests: Fix warning - incompatible pointer type

Pavel Reichl • 8 years ago

b27d20f

BUILD: Build libdlopen_test_providers.la as a dynamic library

Lukas Slebodnik • 8 years ago

0ae2161

BUILD: Speed up build of some tests

Lukas Slebodnik • 8 years ago

53219cc

sudo: use "higher value wins" when ordering rules

Pavel Březina • 8 years ago

aafd3f0

NSS: Fix memory leak netgroup

Pavel Reichl • 8 years ago

4a6cae7

NSS: Reset negcache after checking domains

Jakub Hrozek • 8 years ago

97a952f

responders: reset ncache after domains are discovered during startup

Jakub Hrozek • 8 years ago

8d7073a

ncache: Add sss_ncache_reset_repopulate_permanent

Jakub Hrozek • 8 years ago

37b653e

ncache: Silence critical error from filter_users when default_domain_suffix is set

Jakub Hrozek • 8 years ago

4d4d624

ncache: Fix sss_ncache_reset_permanent

Jakub Hrozek • 8 years ago

3717200

tests: Revert strcmp condition

Jakub Hrozek • 8 years ago

573c258

util-tests: Initialize boolean variable to default value

Lukas Slebodnik • 8 years ago

d0fd102

nfs idmap: fix infinite loop

Sumit Bose • 8 years ago

097edb7

cleanup task: Expire all memberof targets when removing user

Michal Židek • 8 years ago

b9d6c13

SYSDB: Add function to expire entry

Michal Židek • 8 years ago

00f165d

Makefile.am: Add missing AM_CFLAGS

Michal Židek • 8 years ago

dd3e97a

IPA: fix override with the same name

Sumit Bose • 8 years ago

cd126cd

IPA: Use search timeout, not enum timeout for searching overrides

Jakub Hrozek • 8 years ago

fe022b2

sssd_client: Do not use removed memory cache

Lukas Slebodnik • 8 years ago

6ef8bbe

sss_client: Fix underflow of active_threads

Lukas Slebodnik • 8 years ago

a956f71

LDAP: Fix leak of file descriptors

Lukas Slebodnik • 8 years ago

2136f71

BUILD: Accept krb5 1.14 for building the PAC plugin

Lukas Slebodnik • 8 years ago

836bc57

SSSDConfigTest: Test real config without config_file_version

Lukas Slebodnik • 8 years ago

7816654

SSSDConfigTest: Try load saved config

Lukas Slebodnik • 8 years ago

da097a7

SSSDConfig: Do not raise exception if config_file_version is missing

Michal Židek • 8 years ago

2fd0163

nss: fix UPN lookups for sub-domain users

Sumit Bose • 8 years ago

e412f49

GPO: fix memory leak

Pavel Reichl • 8 years ago

4a89c2e

SDAP: Relax POSIX check

Pavel Reichl • 8 years ago

a73c89f

Fix memory leak in sssdpac_verify()

Thomas Oulevey • 8 years ago

d6073c9

tests: check special characters in cleanup_groups

Pavel Reichl • 8 years ago

f252032

LDAP: Sanitize group dn before using in filter

Lukas Slebodnik • 8 years ago

28dff99

SPEC: Update spec file for krb5_local_auth_plugin

Lukas Slebodnik • 8 years ago

f230eda

IPA: Remove MPG groups if getgrgid was called before getpw()

Jakub Hrozek • 8 years ago

7cac506

SYSDB: Index the objectSIDString attribute

Jakub Hrozek • 8 years ago

676e804

CONFDB: Assume config file version 2 if missing

Michal Židek • 8 years ago

c35eb4a

SPEC: Workaround for build with rpm 4.13

Lukas Slebodnik • 8 years ago

7dd51b4

BUILD: Repair dependecies on deprecated libraries

Petr Cech • 8 years ago

4b5c6ec

sss_client: Update integrity check of records in mmap cache

Lukas Slebodnik • 8 years ago

fa4a7fb

SDAP: Remove user from cache for missing user in LDAP

Lukas Slebodnik • 8 years ago

d0d6956

Updating version for the 1.12.6 release

Jakub Hrozek • 8 years ago

d119324

Updating translations for the 1.12.5 release

Jakub Hrozek • 8 years ago

40f1824

subdomains: Inherit cleanup period and tokengroup settings from parent domain

Jakub Hrozek • 8 years ago

602eb71

UTIL: Inherit ignore_group_members

Jakub Hrozek • 8 years ago

27d8524

SDAP: Add sdap_copy_map_entry

Jakub Hrozek • 8 years ago

155e6c7

DP: Add a function to inherit DP options, if set

Jakub Hrozek • 8 years ago

37a8488

confdb: Add new option subdomain_inherit

Jakub Hrozek • 8 years ago

da2d33f

ldap: use proper sysdb name in groups_by_user_done()

Sumit Bose • 8 years ago

edc1538

Skip enumeration requests in IPA and AD providers as well

Jakub Hrozek • 8 years ago

62e595a

DP: Set extra_value to NULL for enum requests

Jakub Hrozek • 8 years ago

2dfb4ed

PROXY: Do not register signal with SA_SIGINFO

Lukas Slebodnik • 8 years ago

45429eb

PROXY: proxy_child should work in non-root mode

Lukas Slebodnik • 8 years ago

d3ff187

Download complete groups if ignore_group_members is set with tokengroups

Jakub Hrozek • 8 years ago

44f35a0

krb5: new option krb5_map_user

Pavel Reichl • 8 years ago

c494e10

libwbclient-sssd: update interface to version 0.12

Sumit Bose • 8 years ago

d788ec2

SDAP: Remove unnecessary argument from sdap_save_user

Lukas Slebodnik • 8 years ago

cd4e784

SDAP: Set initgroups expire attribute at the end

Lukas Slebodnik • 8 years ago

9ae6567

nss: Do not ignore default vaue of SYSDB_INITGR_EXPIRE

Lukas Slebodnik • 8 years ago

521eb7c

test_nss_srv: Use right function for storing time_t

Lukas Slebodnik • 8 years ago

21431d9

Add unit tests for initgroups

Jakub Hrozek • 8 years ago

c3d7e06

tests: Add a getpwnam-by-UPN test

Jakub Hrozek • 8 years ago

17f2f1c

tests: ncache_hit must be an int to test UPNs

Jakub Hrozek • 8 years ago

eb6be4e

negcache: Soften condition for expired entries

Lukas Slebodnik • 8 years ago

be4569c

MAN: refresh_expired_interval also supports users and groups

Jakub Hrozek • 8 years ago

3d34569

LDAP: warn about lockout option being deprecated

Pavel Reichl • 8 years ago

1590f8d

IPA: do not fail if view name lookup failed on older versions

Sumit Bose • 8 years ago

0f85298

SDAP: use DN to update entry

Sumit Bose • 8 years ago

39e33e3

LDAP: return after tevent_req_error

Jakub Hrozek • 8 years ago

fec528a

SELINUX: Avoid disconnecting disconnected handle

Jakub Hrozek • 8 years ago

2ed3ac5

SPEC: Fix cyclic dependencies between sssd-{krb5,}-common

Lukas Slebodnik • 9 years ago

79d0c56

IPA: allow initgroups by UUID for FreeIPA users

Sumit Bose • 9 years ago

3b00bcd

NSS: check for overrides before calling backend

Sumit Bose • 9 years ago

a4a447b

IPA: do not add domain name unconditionally

Sumit Bose • 9 years ago

226224c

IPA: search for overrides during initgroups in sever mode

Sumit Bose • 9 years ago

eaf6568

IPA: enhance ipa_initgr_get_overrides_send()

Sumit Bose • 9 years ago

58a19d5

IPA: update initgr expire timestamp conditionally

Sumit Bose • 9 years ago

f643fad

IPA: do initgroups if extdom exop supports it

Sumit Bose • 9 years ago

24905d4

SDAP: Fix id mapping with disabled subdomains

Lukas Slebodnik • 9 years ago

2bf3267

sss_nss_idmap-tests: Use different prepared buffers for big endian

Lukas Slebodnik • 9 years ago

21d34cf

GPO: Do not ignore missing attrs for GPOs

Lukas Slebodnik • 9 years ago

7c8c34c

autofs: fix 'Cannot allocate memory' with FQDNs

Aron Parsons • 9 years ago

8f57c67

IPA: fix segfault in ipa_s2n_exop

Aron Parsons • 9 years ago

e31d5ba

IPA: allow initgroups by SID for AD users

Sumit Bose • 9 years ago

85287a6

simple-access-provider: make user grp res more robust

Pavel Reichl • 9 years ago

45a089a

IPA: check ghosts in groups found by uuid as well

Sumit Bose • 9 years ago

1b2119a

IPA: use sysdb_attrs_add_string_safe to add group member

Sumit Bose • 9 years ago

7752046

IPA: do not try to save override data for the default view

Sumit Bose • 9 years ago

3453e47

sysdb: Add cache_expire to the default sysdb_search_object_by_str_attr set

Jakub Hrozek • 9 years ago

c61b3f0

tests: Use cmocka-1.0+ API in test_sysdb_utils

Jakub Hrozek • 9 years ago

bdb7e7f

AD GPO: Always look up GPOs from machine domain

Stephen Gallagher • 9 years ago

b025f8a

AD: Always get domain-specific ID connection

Stephen Gallagher • 9 years ago

89a706a

AD: Clean up ad_access_gpo

Stephen Gallagher • 9 years ago

d7efa39

Option filter_users had no effect for retrieving sudo rules

Adam Tkac • 9 years ago

d008c23

selinux: Only call semanage if the context actually changes

Jakub Hrozek • 9 years ago

4d31f2c

selinux: Begin and end the transaction on the same nesting level

Jakub Hrozek • 9 years ago

9c695e3

selinux: Disconnect before closing the handle

Jakub Hrozek • 9 years ago

816d3cc

SDAP: Filter ad groups in initgroups

Lukas Slebodnik • 9 years ago

49895bb

SDAP: Extract filtering AD group to function

Lukas Slebodnik • 9 years ago

bdd031d

SDAP: Do not set gid 0 twice

Lukas Slebodnik • 9 years ago

cf70476

sudo: sanitize filter values

Pavel Březina • 9 years ago

2fb2a26

enumeration: fix talloc context

Pavel Březina • 9 years ago

81bb9be

GPO: Check return value of ad_gpo_store_policy_settings

Lukas Slebodnik • 9 years ago

5a4e7bf

CLIENT: Clear errno with enabled sss-default-nss-plugin

Lukas Slebodnik • 9 years ago

9e030a2

MAN: Update ppolicy description

Pavel Reichl • 9 years ago

b025247

LDAP: fix a typo in debug message

Pavel Reichl • 9 years ago

8dc685c

IPA: Deprecate the ipa_hbac_treat_deny_as option

Jakub Hrozek • 9 years ago

010c1c6

IPA: Only treat malformed HBAC rules as fatal if deny rules are enabled

Jakub Hrozek • 9 years ago

4df4754

IPA: Drop useless sysdb parameter

Jakub Hrozek • 9 years ago

a7c2e66

IPA: Use custom error codes when validating HBAC rules

Jakub Hrozek • 9 years ago

319f971

Resolv: re-read SRV query every time if its TTL is 0

Jakub Hrozek • 9 years ago

9dd8510

sdap: properly handle binary objectGuid attribute

Sumit Bose • 9 years ago

4619742

build: Only run cmocka tests if cmocka 1.0 or newer is available

Jakub Hrozek • 9 years ago

1acadc8

RPM: BuildRequire libcmocka >= 1.0

Jakub Hrozek • 9 years ago

2bbf29b

tests: convert all unit tests to cmocka 1.0 or later

Jakub Hrozek • 9 years ago

8d1ae1f

memberof: Do not create request with 0 attribute values

Lukas Slebodnik • 9 years ago

cbab37e

LDAP: remove unused code

Pavel Reichl • 9 years ago

f5c1ef1

GPO: error out instead of leaving array element uninitialized

Sumit Bose • 9 years ago

0d628f9

IPA: set EINVAL if dn can't be linearized

Pavel Reichl • 9 years ago

e8f5e13

IPA: make sure output variable is set

Sumit Bose • 9 years ago

ee3cd05

selinux: Handle setup with empty default and no configured rules

Jakub Hrozek • 9 years ago

4b6ee69

IPA idviews: check if view name is set

Sumit Bose • 9 years ago

2c7b61d

LDAP/AD: do not resolve group members during tokenGroups request

Sumit Bose • 9 years ago

b8d9eca

ipa_selinux: Fix warning may be used uninitialized

Lukas Slebodnik • 9 years ago

befd8f4

ipa: make sure extdom expo data is available

Sumit Bose • 9 years ago

052e37d

ipa: do not treat missing sub-domain users as error

Sumit Bose • 9 years ago

8d13b13

pam_initgr_check_timeout: add debug output

Sumit Bose • 9 years ago

d505e55

PAM: use the logon_name as the key for the PAM initgr cache

Sumit Bose • 9 years ago

e945799

test: Check ERR_LAST

Michal Zidek • 9 years ago

c82b150

DEBUG: Add missing strings for error messages

Michal Zidek • 9 years ago

b543766

MAN: libkrb5 and SSSD use different expansions

Pavel Reichl • 9 years ago

e66ff0a

NSS: Handle ENOENT when doing initgroups by UPN

Jakub Hrozek • 9 years ago

d8006ab

ldap_child: fix coverity warning

Pavel Reichl • 9 years ago

7e6f479

Log reason in debug message why ldb_modify failed

Lukas Slebodnik • 9 years ago

182675e

be_refresh: support groups

Pavel Březina • 9 years ago

0a26dd8

be_refresh: support users

Pavel Březina • 9 years ago

40f5e40

be_refresh: add sdap_refresh_init

Pavel Březina • 9 years ago

4c714a3

be_refresh: refactor netgroups refresh

Pavel Březina • 9 years ago

dd9dfa7

sdap_handle_acct_req_send: remove be_req

Pavel Březina • 9 years ago

4d0286e

be_refresh: refresh all domains in backend

Pavel Březina • 9 years ago

20b08bc

SDAP: fix minor neglect in is_account_locked()

Pavel Reichl • 9 years ago

371c5f4

SDAP: Lock out ssh keys when account naturally expires

Pavel Reichl • 9 years ago

8ebc054

UTIL: convert GeneralizedTime to unix time

Pavel Reichl • 9 years ago

3cace03

ldap_child: initialized ccname_file_dummy

Sumit Bose • 9 years ago

21c627f

selinux: Delete existing user mapping on empty default

Jakub Hrozek • 9 years ago

90efb3c

LDAP: unlink ccname_file_dummy if there is an error

Daniel Hjorth • 9 years ago

0b5036e

SDAP: enable change phase of pw expire policy check

Pavel Reichl • 9 years ago

d3f82e9

SDAP: refactor pwexpire policy

Pavel Reichl • 9 years ago

8b353dd

FO: Use SRV TTL in fail over code

Jakub Hrozek • 9 years ago

097f92a

resolv: Use the same default timeout for SRV queries as previously

Jakub Hrozek • 9 years ago

9d68909

PAM: check return value of confdb_get_string

Pavel Reichl • 9 years ago

45b7cad

PAM: warn all services about account expiration

Pavel Reichl • 9 years ago

09c9dfa

PAM: new option pam_account_expired_message

Pavel Reichl • 9 years ago

a81b2ae

PAM: do not reject abruptly

Pavel Reichl • 9 years ago

325a3a1

Updating the version for the 1.12.5 release

Jakub Hrozek • 9 years ago

c37e85b

Updating translations for the 1.12.4 release

Jakub Hrozek • 9 years ago

6e37fea

RESPONDERS: Warn to syslog about colliding objects

Lukas Slebodnik • 9 years ago

29b2fbe

LDAP: Handle ENOENT better in the cleanup task

Jakub Hrozek • 9 years ago

89caf3e

LDAP: Add better DEBUG messages to the cleanup task

Jakub Hrozek • 9 years ago

dcc7cee

GPO: Better debugging for gpo_child's mkdir

Jakub Hrozek • 9 years ago

2ce4203

CONFIGURE: Do not use macro AC_PROG_MKDIR_P twice

Lukas Slebodnik • 9 years ago

efb313c

Add missing new lines to debug messages

Lukas Slebodnik • 9 years ago

7bc69af

sbus_codegen: Port to python3

Lukas Slebodnik • 9 years ago

46020d2

Remove strict requirements of python2

Lukas Slebodnik • 9 years ago

d0a95d8

SSSDConfig: Port missing parts to python3

Lukas Slebodnik • 9 years ago

af8e913

SSSDConfig: Remove unused exception name

Lukas Slebodnik • 9 years ago

d36ff71

BUILD: Include python-test.py in the tarball

Jakub Hrozek • 9 years ago

42563a2

Python3 support in SSSD

Bohuslav Kabrda • 9 years ago

9687d7d

SELINUX: Check the return value of setuid and setgid

Jakub Hrozek • 9 years ago

dc13b1a

resolv: Fix a typo

Jakub Hrozek • 9 years ago

00ac96c

Add user_attributes to ifp section of API schema

Rob Crittenden • 9 years ago

cbc53f9

MONITOR: Fix double free

Lukas Slebodnik • 9 years ago

a5d8156

RESOLV: Add an internal function to read TTL from a DNS packet

Jakub Hrozek • 9 years ago

3149069

LDAP: Rename the _res output parameter to avoid clashing with libresolv in tests

Jakub Hrozek • 9 years ago

07d69e9

fill_id() fix LE/BE issue with wrong data type

Sumit Bose • 9 years ago

e3e6a3f

AD: use GC for SID requests as well

Sumit Bose • 9 years ago

8b61b99

ipa_s2n_save_objects: properly handle fully-qualified group names

Sumit Bose • 9 years ago

cc33fd2

MAN: amend sss_ssh_authorizedkeys

Pavel Reichl • 9 years ago

21266b6

IPA: Resolve IPA user groups' overrideDN in non-default view

Jakub Hrozek • 9 years ago

74d7087

LDAP: Add UUID when saving incomplete groups

Jakub Hrozek • 9 years ago

d18bd28

pysss: Fix double free

Lukas Slebodnik • 9 years ago

8e07662

PROXY: Fix use after free

Lukas Slebodnik • 9 years ago

31dd2a8

SELINUX: Set and reset umask when caling set_seuser from deamon code

Jakub Hrozek • 9 years ago

b8894eb

SELINUX: Call setuid(0)/setgid(0) to also set the real IDs to root

Jakub Hrozek • 9 years ago

6772568

IPA: Use attr's dom for users, too

Jakub Hrozek • 9 years ago

42aa915

IPA: process_members() add ghosts only once

Sumit Bose • 9 years ago

5a41c13

IPA: resolve IPA group-memberships for AD users

Sumit Bose • 9 years ago

e6aeb25

AD: support for AD site override

Pavel Reichl • 9 years ago

6992f20

AD: add new option ad_site

Pavel Reichl • 9 years ago

e2f4a87

sysdb: remove ghosts in all sub-domains as well

Sumit Bose • 9 years ago

20f4640

nss: fix SID lookups

Sumit Bose • 9 years ago

97c0a59

IPA: properly handle mixed-case trusted domains

Sumit Bose • 9 years ago

79a818a

views: fix GID overrride for mpg domains

Sumit Bose • 9 years ago

7407b22

Open the PAC socket from krb5_child before dropping root

Jakub Hrozek • 9 years ago

bfdd8d2

nss: Add original DN and memberOf to origbyname request

Sumit Bose • 9 years ago

dcc99fc

nss: refactor fill_orig()

Sumit Bose • 9 years ago

2eb7805

nss: make fill_orig() multi-value aware

Sumit Bose • 9 years ago

70ec6df

krb5: fix entry order in MEMORY keytab

Sumit Bose • 9 years ago

24df148

MAN: add dots as valid character in domain names

Pavel Reichl • 9 years ago

7a98103

MAN: dyndns_iface supports only one interface

Pavel Reichl • 9 years ago

6e9c11e

GPO: add systemd-user to gpo default permit list

Pavel Reichl • 9 years ago

66418c3

krb5_child: Return ERR_NETWORK_IO on KRB5_KDCREP_SKEW

Jakub Hrozek • 9 years ago

f5c3dcc

IPA: set SYSDB_INITGR_EXPIRE for RESP_USER_GROUPLIST

Sumit Bose • 9 years ago

5730f53

IPA: resolve missing members

Sumit Bose • 9 years ago

04455af

IPA: rename ipa_s2n_get_groups_send() to ipa_s2n_get_fqlist_send()

Sumit Bose • 9 years ago

161c2fa

IPA: process_members() optionally return missing members list

Sumit Bose • 9 years ago

87cc304

IPA: add missing break

Sumit Bose • 9 years ago

6b57aa0

IPA: make version check more precise

Sumit Bose • 9 years ago

1869e83

IPA: do not look up overrides on client with default view

Sumit Bose • 9 years ago

497e35d

IPA: ipa_resolve_user_list_send() take care of overrides

Sumit Bose • 9 years ago

626356e

sysdb: fix group members with overridden names

Sumit Bose • 9 years ago

907222a

IPA: resolve ghost members if a non-default view is applied

Sumit Bose • 9 years ago

4d9a6ca

IPA: add get_be_acct_req_for_user_name()

Sumit Bose • 9 years ago

3a6827a

GPO: Extract server hostname after connecting

Jakub Hrozek • 9 years ago

6cdefff

GPO: Don't use stdout for output in gpo_child

Jakub Hrozek • 9 years ago

fc62521

UTIL: Allow dup-ing child pipe to a different FD

Jakub Hrozek • 9 years ago

d31fba4

GPO: Set libsmb debugging to stderr

Jakub Hrozek • 9 years ago

9740d8a

logrotate: Fix warning file size changed while zipping

Lukas Slebodnik • 9 years ago

1d39190

spec: sifp requires sssd-dbus

Pavel Březina • 9 years ago

1ff2907

TESTS: Cover sysdb_gpo.c with unit tests

Jakub Hrozek • 9 years ago

e4eec97

GPO: Ignore ENOENT result from sysdb_gpo_get_gpo_result_setting()

Jakub Hrozek • 9 years ago

c60710d

SSSD / sssd

Commits 5771

SSSD / sssd

Source Code

Documentation

Commits 5771