Commits - SSSD/sssd

IPA/AD/LDAP: Increase the initgrExpireTimestamp after finishing refresh request

Jakub Hrozek • 5 years ago

06fed80

DP/SYSDB: Move the code to set initgrExpireTimestamp to a reusable function

Jakub Hrozek • 5 years ago

75b6695

MAN: Amend the documentation for the background refresh

Jakub Hrozek • 5 years ago

1754e3e

IPA/AD/SDAP/BE: Generate refresh callbacks with a macro

Jakub Hrozek • 5 years ago

8f02770

BE/IPA/AD/LDAP: Initialize the refresh callback from a list to reduce logic duplication

Jakub Hrozek • 5 years ago

c3956d2

BE/IPA/AD/LDAP: Add inigroups refresh support

Jakub Hrozek • 5 years ago

159d1af

IPA: Implement background refresh for IPA domains

Jakub Hrozek • 5 years ago

468ee8b

AD: Implement background refresh for AD domains

Jakub Hrozek • 5 years ago

25b66e2

BE: Schedule the refresh interval from the finish time of the last run

Jakub Hrozek • 5 years ago

e1830ba

BE: Extend be_ptask_create() with control when to schedule next run after success

Jakub Hrozek • 5 years ago

b7110e0

BE: Send refresh requests in batches

Jakub Hrozek • 5 years ago

cb11886

BE: Pass in filter_type when creating the refresh account request

Jakub Hrozek • 5 years ago

87cd4ec

BE/LDAP: Split out a helper function from sdap_refresh for later reuse

Jakub Hrozek • 5 years ago

0ef02c9

BE: Change be_refresh_ctx_init to return errno and set be_ctx->refresh_ctx

Jakub Hrozek • 5 years ago

8a8b234

BE: Pass in attribute to look up with instead of hardcoding SYSDB_NAME

Jakub Hrozek • 5 years ago

5c60056

BE/LDAP: Call be_refresh_ctx_init() in the provider libraries, not in back end

Jakub Hrozek • 5 years ago

936b423

BE: Make be_refresh_ctx_init set up the periodical task, too

Jakub Hrozek • 5 years ago

c56e165

BE: Enable refresh for multiple domains

Jakub Hrozek • 5 years ago

6bd021d

BE: search with sysdb_search_with_ts_attr

Jakub Hrozek • 5 years ago

3ee57e7

SYSDB: Add sysdb_search_with_ts_attr

Jakub Hrozek • 5 years ago

bca2f94

IPA: Allow paging when fetching external groups

Jakub Hrozek • 5 years ago

0ca64be

ad: make ad_enabled_domains case insensitive

Pavel Březina • 5 years ago

0b6f144

ad: remove all subdomains if only master domain is enabled

Pavel Březina • 5 years ago

5605fa5

sysdb: add sysdb_list_subdomains()

Pavel Březina • 5 years ago

3c6c9d4

sysdb: read and interpret domain's enabled attribute

Pavel Březina • 5 years ago

b2cd4a7

ad: set enabled=false attribute for subdomains that no longer exists

Pavel Březina • 5 years ago

800d24d

sysdb: add sysdb_domain_set_enabled()

Pavel Březina • 5 years ago

0e16ec7

ad: remove subdomain that has been disabled through ad_enabled_domains from sysdb

Pavel Březina • 5 years ago

c9c2b60

nss: Fix command 'endservent' resetting wrong struct member

Samuel Cabrero • 5 years ago

9673ca8

ci: print node on which the test is being run

Pavel Březina • 5 years ago

85dab31

ci: rebase pull request on the target branch

Pavel Březina • 5 years ago

8003e32

ci: switch to new tooling and remove 'Read trusted files' stage

Pavel Březina • 5 years ago

f988c87

ci: enable sssd-ci for 1-16 branch

Pavel Březina • 5 years ago

23ad178

LDAP: failover does not work on non-responsive ldaps

Tomas Halman • 5 years ago

442cd65

util/find_uid.c: fixed race condition bug

Alexey Tikhonov • 5 years ago

fb50da2

util/find_uid.c: fixed debug message

Alexey Tikhonov • 5 years ago

7b3c8e8

CACHE: SSSD doesn't clear cache entries

Tomas Halman • 5 years ago

fb3f1af

negcache: add fq-usernames of know domains to all UPN neg-caches

Sumit Bose • 5 years ago

934341e

TESTS: Add a unit test for UPNs stored by sss_ncache_prepopulate

Jakub Hrozek • 5 years ago

05b37ac

util/tev_curl: Fix double free error in schedule_fd_processing()

Alexey Tikhonov • 5 years ago

37718f8

BUILD: fix libpython handling in Python3.8

Sumit Bose • 5 years ago

8f45a02

CI: use python3-pep8 on Fedora 31 and later

Sumit Bose • 5 years ago

3a92a87

tests: fix enctypes in test_copy_keytab

Sumit Bose • 5 years ago

9b8c66d

knownhostsproxy: friendly error msg for NXDOMAIN

Branen Salmon • 5 years ago

7fe2b44

LDAP: Return the error message from the extended operation password change also on failure

Jakub Hrozek • 5 years ago

4ab1b75

DP: add NULL check to be_ptask_{enable|disable}

Sumit Bose • 5 years ago

cb94d00

SUDO: Allow defaults sudoRole without sudoUser attribute

Samuel Cabrero • 5 years ago

2173201

sdap: inherit SDAP_SASL_MECH if not set explicitly

Sumit Bose • 5 years ago

373b113

SDAP: allow GSS-SPNEGO for LDAP SASL bind as well

Sumit Bose • 5 years ago

f5d031b

PAM: Also cache SSS_PAM_PREAUTH

Jakub Hrozek • 5 years ago

0a637ff

winbind idmap plugin: update struct idmap_domain to latest version

Sumit Bose • 5 years ago

e673478

intg: add test for password prompt configuration

Sumit Bose • 5 years ago

558b543

getsockopt_wrapper: add support for PAM clients

Sumit Bose • 5 years ago

efefac9

PAM: add initial prompting configuration

Sumit Bose • 5 years ago

c91c6dd

pam_sss: use configured prompting

Sumit Bose • 5 years ago

ca65bfd

authtok: add dedicated type for 2fa with single string

Sumit Bose • 5 years ago

d453f92

pam: introduce prompt_config struct

Sumit Bose • 5 years ago

ceb4c8e

ipa: ipa_getkeytab don't call libnss_sss

Sumit Bose • 5 years ago

b927dc7

krb5: Lookahead resolving of host names

Tomas Halman • 5 years ago

ec0c31a

ci/sssd.supp: getpwuid() leak suppression

Alexey Tikhonov • 5 years ago

b05f98e

TESTS: moved cwrap/test_negcache to cmocka tests

Alexey Tikhonov • 5 years ago

5bba0d3

negcache_files: got rid of large array on stack

Alexey Tikhonov • 5 years ago

cc6d16a

responder/negcache: avoid calling nsswitch NSS API

Alexey Tikhonov • 5 years ago

8ba8b71

Util: added facility to load nss lib syms

Alexey Tikhonov • 5 years ago

33ac11f

krb5: Silence an error message if no cache entries have ccache stored but renewal is enabled

Jakub Hrozek • 5 years ago

23fb7ea

SYSDB: Index the ccacheFile attribute

Jakub Hrozek • 5 years ago

7d8b28a

krb5: Do not use unindexed objectCategory in a search filter

Jakub Hrozek • 5 years ago

e4dd284

Providers: Delay online check on startup

Tomas Halman • 5 years ago

dab5562

KCM: Fall back to using the first ccache if the default does not exist

Jakub Hrozek • 5 years ago

6c568c9

sudo: format runas attributes to correct output name

Pavel Březina • 5 years ago

3a18e33

ipa: store sudo runas attribute with internal fqname

Pavel Březina • 5 years ago

5ad7f5e

IPA: Use dereference for host groups even if the configuration disables dereference

Jakub Hrozek • 5 years ago

2c97edb

SDAP: Add sdap_has_deref_support_ex()

Jakub Hrozek • 5 years ago

eaceb6a

AD: Allow configuring auto_private_groups per subdomain or with subdomain_inherit

Jakub Hrozek • 5 years ago

6f6b3b1

SYSDB: Inherit cached_auth_timeout from the main domain

Jakub Hrozek • 5 years ago

fedfc4f

GPO: Add option ad_gpo_ignore_unreadable

Michal Židek • 5 years ago

ad05801

krb5: Write multiple dnsnames into kdc info file

Tomas Halman • 5 years ago

c225ed7

Updating the version for 1.16.5

Jakub Hrozek • 5 years ago

f2f5539

Updating the translations for the 1.16.4 release

Jakub Hrozek • 5 years ago

4f47ff6

be: remember last good server's name instead of fo_server structure

Pavel Březina • 5 years ago

705fd73

TESTS: Add integration tests for auto_private_groups=hybrid

Jakub Hrozek • 5 years ago

64b855d

NSS: Add the hybrid-MPG mode

Jakub Hrozek • 5 years ago

c083df0

CACHE_REQ: Add cache_req_data_get_type()

Jakub Hrozek • 5 years ago

271544b

CONFDB/SYSDB: Add the hybrid MPG mode

Jakub Hrozek • 5 years ago

e09dffe

CONFDB: Read auto_private_groups as string, not bool

Jakub Hrozek • 5 years ago

e0c34a6

UTIL: Convert bool mpg to an enum mpg_mode

Jakub Hrozek • 5 years ago

e01473a

UTIL: Add a is_domain_mpg shorthand

Jakub Hrozek • 5 years ago

15f0177

sudo ipa: do not store rules without sudoHost attribute

Pavel Březina • 5 years ago

e2f00ae

sdap: use ldap_pwmodify_mode to change password

Pavel Březina • 5 years ago

0a52934

sdap: split password change to separate request

Pavel Březina • 5 years ago

8d6fa49

sdap: add ldap_pwmodify_mode option

Pavel Březina • 5 years ago

be591f0

sdap: add sdap_modify_passwd_send

Pavel Březina • 5 years ago

93a3a20

krb5_locator: Allow hostname in kdcinfo files

Tomas Halman • 5 years ago

96e4d71

Monitor: changed provider startup timeout

Alexey Tikhonov • 5 years ago

5b0bb56

ipa s2n: try to remove objects not found on the server

Sumit Bose • 5 years ago

3bed774

ipa s2n: do not add UPG member

Sumit Bose • 5 years ago

b424c8a

ipa s2n: fix typo

Sumit Bose • 5 years ago

c382167

ldap: make groups_get_handle_no_group() public

Sumit Bose • 5 years ago

19fbcd1

ldap: add users_get_handle_no_user()

Sumit Bose • 5 years ago

cca3394

negcache: avoid "is_*_local" calls in some cases

Alexey Tikhonov • 5 years ago

6ff0119

TESTS: Only use __wrap_sss_ncache_reset_repopulate_permanent to finish test if needed

Jakub Hrozek • 5 years ago

4c1b2d4

netgroups: honor cache_refresh_percent

Pavel Březina • 5 years ago

486b552

ci/sssd.supp: fixed c-ares-suppress-leak-from-init

Alexey Tikhonov • 5 years ago

2fb5be4

NEGCACHE: repopulate negative cache after get_domains

Sumit Bose • 5 years ago

faede6d

NEGCACHE: fix typo in debug message

Sumit Bose • 5 years ago

720907d

NEGCACHE: initialize UPN negative cache as well

Sumit Bose • 5 years ago

6bb46a6

ent_test: Update assertions for python 3.7.2

Lukas Slebodnik • 5 years ago

f441617

Revert "intg: Generate tmp dir with lowercase"

Lukas Slebodnik • 5 years ago

688134e

test_ldap: Do not uses pytest fixtures as functions

Lukas Slebodnik • 5 years ago

0fb6543

test_files_provider: Do not use pytest fixtures as functions

Lukas Slebodnik • 5 years ago

2805121

NSS: Avoid changing the memory cache ownership away from the sssd user

Jakub Hrozek • 5 years ago

118c44f

krb5_locator: always use port 88 for master KDC

Sumit Bose • 5 years ago

1791eed

ldap: user get_ldap_conn_from_sdom_pvt() where possible

Sumit Bose • 5 years ago

f80dad6

ldap: prefer LDAP port during initgroups user lookup

Sumit Bose • 5 years ago

0b5a359

ldap: add get_ldap_conn_from_sdom_pvt

Sumit Bose • 5 years ago

8ffc64c

responder: fix domain lookup refresh timeout

Sumit Bose • 5 years ago

3824008

GPO: Allow customization of GPO_CROND per OS

Victor Tapia • 5 years ago

8ba4727

GPO: Add gpo_implicit_deny option

Michal Židek • 5 years ago

c96a382

CONFIG: add missing ldap attributes for validation

Thorsten Scherf • 5 years ago

5e70cf5

Added note about default value of ad_gpo_map_batch parameter

mateusz • 5 years ago

db06ec5

ssh: p11_child error message is too generic

Tomas Halman • 5 years ago

340de23

ssh: sssd_ssh fails completely on p11_child timeout

Tomas Halman • 5 years ago

31637fd

ad: replace ARRAY_SIZE with N_ELEMENTS

Sumit Bose • 5 years ago

911d7bb

utils: make N_ELEMENTS public

Sumit Bose • 5 years ago

0a27fba

lib/cifs_idmap_sss: fixed unaligned mem access

Alexey Tikhonov • 5 years ago

acce032

Fix error in hostname retrieval

Alexey Tikhonov • 5 years ago

d6ed04f

test_sss_cache: Add test case for wrong domain in parameter

Lukas Slebodnik • 5 years ago

3ec716b

sss_cache: Fail if unknown domain is passed in parameter

Lukas Slebodnik • 5 years ago

6c80847

NSS: Do not use deprecated header files

Lukas Slebodnik • 5 years ago

9e6a224

BUILD: Fix condition for building sssd-kcm man page

Lukas Slebodnik • 5 years ago

8f0a2ac

SSSDConfigTest: Remove usage of failUnless

Lukas Slebodnik • 5 years ago

3c0213f

SSSDConfig: Fix ResourceWarning unclosed file

Lukas Slebodnik • 5 years ago

07d7eea

SSSDConfigTest: Do not use assertEquals

Lukas Slebodnik • 5 years ago

b27ab9e

pyhbac-test: Do not use assertEquals

Lukas Slebodnik • 5 years ago

088eb54

test_sss_cache: Add test case for invalidating missing entries

Lukas Slebodnik • 5 years ago

7983826

sss_cache: Do not fail if noting was cached

Lukas Slebodnik • 5 years ago

498aaac

intg: Add test for sss_cache & shadow-utils use-case

Lukas Slebodnik • 5 years ago

0a27a47

sss_cache: Do not fail for missing domains

Lukas Slebodnik • 5 years ago

8e6c52f

nss: sssd returns '/' for emtpy home directories

Tomas Halman • 6 years ago

2879252

ipa: use only the global catalog service of the forest root

Sumit Bose • 6 years ago

74568bd

Revert "IPA: use forest name when looking up the Global Catalog"

Sumit Bose • 6 years ago

d33ec64

tests: increase p11_child_timeout

Sumit Bose • 6 years ago

19e6c50

tests: fix mocking krb5_creds in test_copy_ccache

Sumit Bose • 6 years ago

d1c9308

BUILD: Accept krb5 1.17 for building the PAC plugin

Sumit Bose • 6 years ago

9e85879

CI: Modify suppression file for c-ares-1.15.0

Lukas Slebodnik • 6 years ago

517fe07

INTG: Show extra test summary info with pytest

Lukas Slebodnik • 6 years ago

de7f877

test_pac_responder: Skip test if pac responder is not installed

Lukas Slebodnik • 6 years ago

e80e869

UTIL: Fix compilation with curl 7.62.0

Lukas Slebodnik • 6 years ago

4d3841c

LDAP: Log the encryption used during LDAP authentication

Sumit Bose • 6 years ago

1a7c6ab

LDAP: Only authenticate the auth connection if we need to look up user information

Jakub Hrozek • 6 years ago

7eb18ab

LDAP: minor refactoring in auth_send() to conform to our coding style

Jakub Hrozek • 6 years ago

876f1cb

nss: use enumeration context as talloc parent for cache req result

Pavel Březina • 6 years ago

720a423

pep8: Ignore W504 and W605 to silence warnings on Debian

Jakub Hrozek • 6 years ago

bca1935

sudo: respect case sensitivity in sudo responder

Pavel Březina • 6 years ago

2d92861

intg: flush the SSSD caches to sync with files

Sumit Bose • 6 years ago

3dc8853

SELINUX: Always add SELinux user to the semanage database if it doesn't exist

Jakub Hrozek • 6 years ago

e7e942c

miztake / SSSD / sssd

Commits 8609

miztake / SSSD / sssd

Source Code

Commits 8609