Commits - SSSD/sssd

crypto-tests: Add unit test for s3crypt_sha512

Lukas Slebodnik • 6 years ago

46682a1

CRYPTO: Save prefix in s3crypt_sha512

Lukas Slebodnik • 6 years ago

89a05bd

SUDO: Create the socket with stricter permissions

Jakub Hrozek • 6 years ago

3a0397b

AUTOFS: remove timed event if related object is removed

Jakub Hrozek • 6 years ago

1199a0d

NSS: remove timed event if related object is removed

Sumit Bose • 7 years ago

83dfa4d

test_ca: add empty index.txt.attr file

Sumit Bose • 7 years ago

8eefaa7

TESTS: remove NSS test databases

Sumit Bose • 7 years ago

ab320f5

TESTS: replace hardcoded certificates

Sumit Bose • 7 years ago

609247a

TESTS: simple CA to generate certificates for test

Sumit Bose • 7 years ago

6c2fbd0

ipa: remove SYSDB_USER_CERT from sub-domain users

Sumit Bose • 7 years ago

24165eb

SYSDB_VIEWS: Remove sshPublicKey attribute when it's not set

Fabiano Fidêncio • 7 years ago

b5c3597

IPA: Remove sshPublicKey attribute when it's not set

Fabiano Fidêncio • 7 years ago

6c564d2

TESTS: Add regression tests to try if resolving root and ID 0 fails as expected

Jakub Hrozek • 7 years ago

dd40167

TESTS: Update zero nesting level test

Justin Stephenson • 7 years ago

bda8f9e

INTG_TESTS: Add one more test for filtered out users/groups

Fabiano Fidêncio • 7 years ago

f8a1a14

test_ldap.py: Add test for filter_{users,groups}

Lukas Slebodnik • 7 years ago

c1fc4d6

TESTS: Add wrappers to request a user or a group by ID

Jakub Hrozek • 7 years ago

5858644

intg: Fix python3 issues

Lukas Slebodnik • 7 years ago

81b54ec

TESTS: Add a module to call nss_sss's getgr* from tests

Jakub Hrozek • 7 years ago

3610e47

TESTS: Add a module to call nss_sss's getpw* from tests

Jakub Hrozek • 7 years ago

80a9266

TESTS: add a helper module with shared NSS constants

Jakub Hrozek • 7 years ago

7a2c419

TESTS: Fix pep8 errors in test_ts_cache.py

Jakub Hrozek • 7 years ago

5312432

TESTS: Remove unused import

Jakub Hrozek • 7 years ago

49269f9

TESTS: move helper fixtures to back up and restore a file to a utility module

Jakub Hrozek • 7 years ago

2778f40

intg: Add sample infopipe test in cwrap env

Lukas Slebodnik • 7 years ago

ceb5b5f

IFP: parse ping arguments in codegen

Pavel Březina • 7 years ago

263d643

intg: Install wrapper for getsockopt

Lukas Slebodnik • 7 years ago

dd8261a

intg: Install configuration for dbus daemon

Lukas Slebodnik • 7 years ago

3389d16

intg: Do not prefer builddir in PATH

Lukas Slebodnik • 7 years ago

80544b6

intg: Add sanity tests for pysss_nss_idmap

Lukas Slebodnik • 7 years ago

beb3ee7

intg: Create FakeAD class based on openldap

Lukas Slebodnik • 7 years ago

37ae7ea

ds_openldap: Extract functionality to protected methods

Lukas Slebodnik • 7 years ago

1de7d2a

intg: Return list for enumeration functions

Lukas Slebodnik • 7 years ago

d1c703f

sssd_ldb.py: Remove a leftover debug message

Lukas Slebodnik • 7 years ago

b5230c2

intg: Convert output of executed commands to strings

Lukas Slebodnik • 7 years ago

d2778a6

intg: Return strings from ctypes wrappers

Lukas Slebodnik • 7 years ago

f78c128

intg: Use bytes as input in ctypes

Lukas Slebodnik • 7 years ago

af8e4e1

intg: Use bytes for value of attributes in ldif

Lukas Slebodnik • 7 years ago

c378159

intg: Fix creating of slapd configuration

Lukas Slebodnik • 7 years ago

abadba4

intg: Use bytes with hash function

Lukas Slebodnik • 7 years ago

12b484c

intg: Avoid using iteritems for dictionary

Lukas Slebodnik • 7 years ago

cbbb0b0

intg: Avoid using xrange in tests

Lukas Slebodnik • 7 years ago

feeed4a

intg: Fix python2,3 urllib

Lukas Slebodnik • 7 years ago

e3f4456

intg: prevent "TypeError: must be type, not classobj"

Lukas Slebodnik • 7 years ago

364516c

AD: do not allocate temporary data on long living context

Sumit Bose • 7 years ago

ee6f816

AD: sdap_get_ad_tokengroups_done() allocate temporary data on state

Sumit Bose • 7 years ago

6d13568

sysdb: sanitize search filter input

Sumit Bose • 7 years ago

e45e50e

sysdb-tests: Add test for sysdb_search_object_by_id

Lukas Slebodnik • 7 years ago

e358dd7

SYSDB: Update filter for get object by id

Lukas Slebodnik • 7 years ago

353853d

sysdb-tests: Add test for sysdb_search_object_by_name

Lukas Slebodnik • 7 years ago

4814454

sysdb: Search also aliases in sysdb_search_object_by_name

Lukas Slebodnik • 7 years ago

64ef6ab

cache_req: add object by id

Pavel Březina • 7 years ago

f84055e

krb5: call krb5_auth_cache_creds() if a password is available

Sumit Bose • 7 years ago

3546e6c

test_memory_cache: Regression test for #3571

Lukas Slebodnik • 7 years ago

979a474

TESTS: Extend code coverage for murmurhash3

Lukas Slebodnik • 7 years ago

6c87576

pysss_murmur: Allow to have NUL character in python bindings

Lukas Slebodnik • 7 years ago

a1a9988

intg: Prefer locally built python modules

Lukas Slebodnik • 7 years ago

f42c3a9

intg: Let python paths be configurable

Lukas Slebodnik • 7 years ago

1dab4d3

intg: Fix pep8 warnings in config.py template

Lukas Slebodnik • 7 years ago

9eac319

mmap_cache: make checks independent of input size

Sumit Bose • 7 years ago

1b70f42

CLIENT: Fix warning Wstringop-overflow

Lukas Slebodnik • 7 years ago

913a312

SIFP: Suppress warning Wstringop-truncation

Lukas Slebodnik • 7 years ago

7808080

CRYPTO: Suppress warning Wstringop-truncation

Lukas Slebodnik • 7 years ago

f5be352

pysss: Suppress warning Wincompatible-pointer-types

Lukas Slebodnik • 7 years ago

0ec8ef3

pysss: Drop unused parameter

Lukas Slebodnik • 7 years ago

0ebf75b

AD: Suppress warning Wincompatible-pointer-types with sasl callbacks

Lukas Slebodnik • 7 years ago

20cd829

dyndns_tests: Fix unit test with missing features in nsupdate

Lukas Slebodnik • 7 years ago

806f166

SYSDB: Read the ldb_message from loop's index counter when reading subdomain UPNs

Jakub Hrozek • 7 years ago

76957f0

SYSDB: Fix sysdb_search_by_name() for looking up groups in MPG domains

Jakub Hrozek • 7 years ago

00cc9f8

libnfsidmap: Use public plugin header file if available

Lukas Slebodnik • 7 years ago

f8a54b9

MAN: Improve enumeration documentation

Jakub Hrozek • 7 years ago

a18da25

MAN: Document that auth and access IPA and AD providers rely on id_provider being set to the same type

Jakub Hrozek • 7 years ago

7a93d0f

nss: Fix invalid enum nss_status return values.

Carlos O'Donell • 7 years ago

7d917d8

krb5: show error message for krb5_init_context() failures

Sumit Bose • 7 years ago

dbe5414

WATCHDOG: Restart providers with SIGUSR2 after time drift

Victor Tapia • 7 years ago

e8fc2e9

TESTS: Order list of entries in some lists

Michal Židek • 7 years ago

cadef04

NSS: Use nss_ctx as memory context in set_netgr_lifetime()

Fabiano Fidêncio • 7 years ago

e2ee9ff

LDAP: Add support for rhost access control

Alexey Kamenskiy • 7 years ago

5b6157d

MAN: GPO Security Filtering limitation

Michal Židek • 7 years ago

15164e9

SYSTEMD: Clean pid file in corner cases

Lukas Slebodnik • 7 years ago

4ae0295

sudo: always use srv_opts from id context

Pavel Březina • 7 years ago

1154c9e

CI: Ignore source file generated by systemtap

Lukas Slebodnik • 7 years ago

465246a

DP: Fix the output type used in dp_req_recv_ptr()

Fabiano Fidêncio • 7 years ago

70db052

IPA: sanitize name in override search filter

Sumit Bose • 7 years ago

f9f627d

BUILD: Accept krb5 1.16 for building the PAC plugin

Sumit Bose • 7 years ago

09ba77f

GPO: Don't use freed LDAPURLDesc if domain for AD DC cannot be found

Jakub Hrozek • 7 years ago

d3f5675

intg: Fix execution with dbus-1.11.18

Lukas Slebodnik • 7 years ago

ff2ff94

CI: Use dnf 2.x for installation of packages in fedora

Lukas Slebodnik • 7 years ago

0984355

SPEC: Fix detecting of minor release

Lukas Slebodnik • 7 years ago

b788aaa

CONFIG: Fix schema for try_inotify

Lukas Slebodnik • 7 years ago

69e61a5

pysss_nss_idmap: Fix typos in python documentation

Lukas Slebodnik • 7 years ago

0d5e92b

pysss_nss_idmap: return same type as it is in module constants

Lukas Slebodnik • 7 years ago

76d0f90

ipa: make sure view name is initialized at startup

Sumit Bose • 7 years ago

6e4f971

MAN: Add sssd-systemtap man page

Justin Stephenson • 7 years ago

4cf74be

CONTRIB: Add DP Request analysis script

Justin Stephenson • 7 years ago

6e579bf

DP: Add Generic DP Request Probes

Justin Stephenson • 7 years ago

5df609b

TEST_NEGCACHE: Ensure root's uid and gid are always added to ncache

Fabiano Fidêncio • 7 years ago

7e48fb2

NEGCACHE: Add root's uid/gid to ncache

Fabiano Fidêncio • 7 years ago

90b4882

NEGCACHE: Descend to all subdomains when adding user/groups

Fabiano Fidêncio • 7 years ago

343f624

TEST_NEGCACHE: Test that "root" is always added to ncache

Fabiano Fidêncio • 7 years ago

cfc62a3

NEGCACHE: Always add "root" to the negative cache

Fabiano Fidêncio • 7 years ago

2ad3a17

NEGCACHE: Add some comments about each step of sss_ncache_prepopulate()

Fabiano Fidêncio • 7 years ago

1d3d2a8

IFP: fix typo in option name in man pages

Pavel Březina • 7 years ago

57e1ace

libwbclient: Change return code for wbcAuthenticateUserEx

Lukas Slebodnik • 7 years ago

260062d

intg: Increase startup timeouts for secrets

Lukas Slebodnik • 7 years ago

a5ce8c2

KRB5: Return invalid credentials internally when attempting to renew an expired TGT

Jakub Hrozek • 7 years ago

b74f671

LDAP_ID_CLEANUP: Use sysdb_search_*_by_timestamp()

Fabiano Fidêncio • 7 years ago

3c7e9fb

SYSDB: Introduce _search_{users,groups}_by_timestamp()

Fabiano Fidêncio • 7 years ago

83f0231

SYSDB_OPS: Invalidate a cache entry also in the ts_cache

Fabiano Fidêncio • 7 years ago

b783fbf

SYSDB_OPS: Mark an entry as expired also in the timestamp cache

Fabiano Fidêncio • 7 years ago

17f4825

SYSDB: Make the usage of the filter more generic for search_ts_matches()

Fabiano Fidêncio • 7 years ago

7db486a

SYSDB: Internally expose sysdb_search_ts_matches()

Fabiano Fidêncio • 7 years ago

7080787

SYSDB: Return ERR_NO_TS when there's no timestamp cache present

Fabiano Fidêncio • 7 years ago

281ec8d

sss_cache: User/groups invalidation in domain cache

Petr Čech • 7 years ago

8f6b723

tests: update expired certificate

Sumit Bose • 7 years ago

a3f85d1

Revert "CI: Use /bin/sh as a CONFIG SHELL"

Lukas Slebodnik • 7 years ago

8d56ad9

CI: Do not use valgrind for dummy-child

Lukas Slebodnik • 7 years ago

365ab04

TESTS: Add unit tests for cfg validation

Michal Židek • 7 years ago

3c71db5

Suppres implicit-fallthrough from gcc 7

Lukas Slebodnik • 7 years ago

ff9d653

sssctl: Fix warning may be used uninitialized

Lukas Slebodnik • 7 years ago

fff723b

Revert "RESP: Provide a reusable request to fully resolve incomplete groups"

Lukas Slebodnik • 7 years ago

ce873f8

Revert "IFP: Only format the output name to the short version before output"

Lukas Slebodnik • 7 years ago

1ffb8cf

Revert "IFP: Resolve group names from GIDs if required"

Lukas Slebodnik • 7 years ago

d2c8118

IFP: Resolve group names from GIDs if required

Jakub Hrozek • 7 years ago

fea344e

IFP: Only format the output name to the short version before output

Jakub Hrozek • 7 years ago

2f6e333

RESP: Provide a reusable request to fully resolve incomplete groups

Jakub Hrozek • 7 years ago

f8a936a

SSSDConfig: Fix saving of debug_level

Lukas Slebodnik • 7 years ago

712f1cc

SSSDConfig: Handle integer parsing more leniently

Lukas Slebodnik • 7 years ago

facc24e

CONFIG: Add subdomain_homedir to config locations

Justin Stephenson • 7 years ago

27023bb

krb5: accept changed principal if krb5_canonicalize=True

Sumit Bose • 7 years ago

5d4e4b4

HBAC: Do not rely on originalMemberOf, use the sysdb memberof links instead

Jakub Hrozek • 7 years ago

e1dafa7

BUILD: Fix build without ssh

Lukas Slebodnik • 7 years ago

f46d147

BUILD: Link libwbclient with libdl

Lukas Slebodnik • 7 years ago

e5db3ea

DP: Reduce Data Provider log level noise

Justin Stephenson • 8 years ago

82a62c6

IFP: Use sized_domain_name to format the groups the user is a member of

Jakub Hrozek • 8 years ago

e18a537

Move sized_output_name() and sized_domain_name() into responder common code

Jakub Hrozek • 8 years ago

312defb

ssh tools: Split connect and communication phases

Simo Sorce • 8 years ago

47c80d6

ssh tools: Fix issues with multiple IP addresses

Simo Sorce • 8 years ago

078a82a

ssh tools: The ai structure is not an array,

Simo Sorce • 8 years ago

c4fb93a

LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT

Fabiano Fidêncio • 8 years ago

4540d9f

ad: handle forest root not listed in ad_enabled_domains

Sumit Bose • 8 years ago

4e23f53

utils: add sss_domain_is_forest_root()

Sumit Bose • 8 years ago

b5af4ce

UTIL: Store UPN suffixes when creating a new subdomain

Jakub Hrozek • 8 years ago

0a82491

MAN: minor typo fixes

René Genz • 8 years ago

e69c9c2

UTIL: Use max 15 characters for AD host UPN

Lukas Slebodnik • 8 years ago

fee7386

sbus: check connection for NULL before unregister it

Sumit Bose • 8 years ago

72da800

selinux: Do not fail if SELinux is not managed

Michal Židek • 8 years ago

31e4bc0

responders: do not leak selinux context on clients destruction

Pavel Březina • 8 years ago

cbb20c5

SSSDConfig: Python 3.6 invalid escape sequence deprecation fix

Ville Skyttä • 8 years ago

80e4d57

MAN: Mention sssd-secrets in "SEE ALSO" section

Lukas Slebodnik • 8 years ago

9d24fcb

config-check: Message when sssd.conf is missing

Michal Židek • 8 years ago

b35d7aa

test_secrets: Fail in child if sssd_secrets cannot start

Lukas Slebodnik • 8 years ago

e54ef60

UTIL: Sanitize newline and carriage return characters.

Victor Tapia • 8 years ago

59868a8

pam_sss: check conversation callback

Sumit Bose • 8 years ago

ba8e3f2

check_duplicate: check name member before using it

Sumit Bose • 8 years ago

c14980e

sdap_extend_map: make sure memory can be freed

Sumit Bose • 8 years ago

bb4b624

IPA_SUDO: Unused value fix

Petr Čech • 8 years ago

6e8536d

SUDO: Only store lowercased attribute value once

Jakub Hrozek • 8 years ago

d5ddca8

TESTS: Add to IPA DN test

Justin Stephenson • 8 years ago

db0c513

SUDO: Add skip_entry boolean to sudo conversions

Justin Stephenson • 8 years ago

c4c47ca

Partially revert "CONFIG: Use default config when none provided"

Lukas Slebodnik • 8 years ago

21fad04

SYSTEMD: Update journald drop-in file

Lukas Slebodnik • 8 years ago

14fe5a9

ldap_child: Fix use after free

Lukas Slebodnik • 8 years ago

7debfe2

gpo: Improve debug messages

Michal Židek • 8 years ago

9bf6c4b

GPO: Skip GPOs without gPCFunctionalityVersion

Michal Židek • 8 years ago

94903da

BUILD: Fix linking of test_wbc_calls

Lukas Slebodnik • 8 years ago

9e2190b

UTIL: Unset O_NONBLOCK for ldap connection

Lukas Slebodnik • 8 years ago

09d9394

WATCHDOG: Avoid non async-signal-safe from the signal_handler

Fabiano Fidêncio • 8 years ago

0606a71

SERVER: Set the process group during server_setup()

Fabiano Fidêncio • 8 years ago

442985a

libwbclient-sssd: wbcLookupSid() allow NULL arguments

Sumit Bose • 8 years ago

924122b

SECRETS: Add configurable payload size limit of a secret

Fabiano Fidêncio • 8 years ago

1d16609

SECRETS: Delete all secrets stored during "max_secrets" test

Fabiano Fidêncio • 8 years ago

4f72eaa

MAN: sssctl debug level

Michal Židek • 8 years ago

17c567f

KRB5: Advise the user to inspect the krb5_child.log if the child fails with a System Error

Jakub Hrozek • 8 years ago

eb730be

test_sssctl: Add an integration test for sssctl netgroup-show

Jakub Hrozek • 8 years ago

9a2b5de

sss_output_name: do not require fq name

Pavel Březina • 8 years ago

c61f9fe

MONITOR: Create pidfile after responders started

Victor Tapia • 8 years ago

12c3616

tests: sssctl user/group-show basic tests

Michal Židek • 8 years ago

d079a35

sssctl: Case insensitive filters

Michal Židek • 8 years ago

b252f88

sssctl: Search by alias

Michal Židek • 8 years ago

e336daf

common: Fix domain case sensitivity init

Michal Židek • 8 years ago

08c0b31

intg: Generate tmp dir with lowercase

Lukas Slebodnik • 8 years ago

d512426

sudo: do not store usn if no rules are found

Pavel Březina • 8 years ago

76e97af

STAP: Only print transaction statistics if the script caught some transactions

Jakub Hrozek • 8 years ago

e6c74de

Prevent use after free in fd_input_available

Carl Henrik Lunde • 8 years ago

fefdd70

SSH: Use default_domain_suffix for users' authorized keys

Jakub Hrozek • 8 years ago

2949fe5

SIFP: Fix warning format-security

Lukas Slebodnik • 8 years ago

0438628

UTIL: Fix compilation of sss_utf8 with libunistring

Lukas Slebodnik • 8 years ago

76e2df7

sssctl: Fix missing declaration

Lukas Slebodnik • 8 years ago

161ddc1

UTIL: Fix implicit declaration of function 'htobe32'

Lukas Slebodnik • 8 years ago

a70351f

SYSDB: Fixing of sudorule without a sudoUser

Petr Čech • 8 years ago

54f1760

BUILD: Fix a typo in inotify.m4

Jakub Hrozek • 8 years ago

495289c

tests: Add a test for group resolution with ldap_group_nesting_level=0

Jakub Hrozek • 8 years ago

a7be684

Qualify ghost user attribute in case ldap_group_nesting_level is set to 0

Jakub Hrozek • 8 years ago

e0b544e

ipa: Nested netgroups do not work

Michal Židek • 8 years ago

7de3387

SECRETS: Add allowed_sec_users_options

Fabiano Fidêncio • 8 years ago

9d4cc96

SECRETS: Fix secrets rule in the allowed sections

Fabiano Fidêncio • 8 years ago

2535993

IPA/AD: check auth ctx before using it

Sumit Bose • 8 years ago

37e070c

TESTS: Extending sysdb sudo store tests

Petr Čech • 8 years ago

143b1dc

SYSDB: Adding lowercase sudoUser form

Petr Čech • 8 years ago

88239b7

MONITOR: Do not set up watchdog for monitor

Jakub Hrozek • 8 years ago

2d88a12

BUILD: Fix linking with librt

Lukas Slebodnik • 8 years ago

a3b6688

ad_access_filter search for nested groups

Mike Ely • 8 years ago

e1c2aea

SYSDB: Augment sysdb_try_to_find_expected_dn to match search base as well

Jakub Hrozek • 8 years ago

956fdd7

SYSDB: Split sysdb_try_to_find_expected_dn() into smaller functions

Jakub Hrozek • 8 years ago

3f3dc8c

PAM: add pam_response_filter option

Sumit Bose • 8 years ago

74711db

PAM: add a test for filter_responses()

Sumit Bose • 8 years ago

0157678

LDAP/AD: resolve domain local groups for remote users

Sumit Bose • 8 years ago

c1f3b29

sdap: make some nested group related calls public

Sumit Bose • 8 years ago

f38c62f

sysdb: add parent_dom to sysdb_get_direct_parents()

Sumit Bose • 8 years ago

9a243dc

sssctl: Flags for command initialization

Michal Židek • 8 years ago

ec1829d

dlopen-test: Add check for untested libraries

Lukas Slebodnik • 8 years ago

7251859

dlopen-test: Move libraries to the right "sections"

Lukas Slebodnik • 8 years ago

a52c7df

dlopen-test: Add missing libraries to the check list

Lukas Slebodnik • 8 years ago

9b97226

dlopen-test: Use portable macro for location of .libs

Lukas Slebodnik • 8 years ago

a64409a

BUILD: Accept krb5 1.15 for building the PAC plugin

Lukas Slebodnik • 8 years ago

6a96323

BUILD: Fix installation without samba

Sorah Fukumori • 8 years ago

1fb3ccc

crypto-tests: Rename encrypt decrypt test case

Lukas Slebodnik • 8 years ago

579daa9

crypto-tests: Add unit test for sss_encrypt + sss_decrypt

Lukas Slebodnik • 8 years ago

8cb4136

libcrypto: Check right value of CRYPTO_memcmp

Lukas Slebodnik • 8 years ago

f4da46b

crypto: Port libcrypto code to openssl-1.1

Lukas Slebodnik • 8 years ago

81ebd05

SSSD / sssd

Commits 7369

SSSD / sssd

Source Code

Documentation

Commits 7369