| Age | Commit message (Collapse) | Author |
|---|
|
This test checks whether the proposed remaining time to sleep is
reasonable.
|
|
This probes the system for available clocks to see if they can be
reliably used to get a monotonic-like timer (the test doesn't verify the
monotonic part, just usability).
|
|
This avoids problems with system clock changes (though there are some
safeguards in place to avoid waiting too long on clock changes).
Thanks to John Sullivan for pointing this out.
We can't easily use CLOCK_MONOTONIC_RAW or CLOCK_MONOTONIC_COARSE even
on platforms that define the clock because we can get runtime errors.
CLOCK_MONOTONIC seems to work on all tested platforms that provide it.
|
|
|
|
|
|
Use the same mechanism in tio_skipall() as in tio_read(), except use a
different timeout value.
|
|
This changes the function to accept a file descriptor, an event and
timeout parameter directly instead of a confusing flag.
|
|
The tio_read() function will read past its buffer and return garbadge to
the calling function if the call to read() was interrupted by a signal.
The likelyhood of read() being interupted is low because previously a
call to poll() has determined that data is available to be read.
Thanks to John Sullivan for pointing this out.
See:
https://bugzilla.redhat.com/show_bug.cgi?id=1003011
|
|
See:
https://bugzilla.redhat.com/show_bug.cgi?id=1003011
|
|
When the NSS modules closes the connection and skips any remaining
result data, wait for up to 500 msec to read any available data.
See:
https://bugzilla.redhat.com/show_bug.cgi?id=1003011
|
|
With the smaller buffers some password hashes would be truncated.
|
|
|
|
|
|
This adds the commit id, improves the line wrapping and also gets rid of
the external dependency.
|
|
|
|
|
|
This uses the AX_PYTHON_MODULE test to check for availability of used
Python modules. All third-party modules and modules that are not a
builtin for Python 2.5 are tested.
This also splits the tests for the utils and pynslcd.
|
|
|
|
|
|
This replaces e0491d2 to run xmlto from the man directory. This handles
the case more gracefully if xmlto is not available.
|
|
|
|
This fixes an error that could occur when the userPassword was retrieved
from LDAP and insufficient privileges were available for reading the
attribute.
|
|
When nslcd receives the SIGUSR1 signal it will retry connecting to
unavailable LDAP servers sooner.
This signal can for example be sent when (re)stablishing a network
connection.
|
|
This implements and documents handling of the SIGUSR1 signal in nslcd to
reset the reconnect_sleeptime and reconnect_retrytime timers to re-check
availability of the LDAP server.
|
|
This implemens a myldap_immediate_reconnect() function that resets the
reconnect timer to retry failing connections to the LDAP server upon the
next search.
This can be used to cut the reconnect_sleeptime and reconnect_retrytime
sleeping periodss short if we have some indication that the LDAP server
is available again.
|
|
This also returns everything except the password hash from the shadow
database to non-root users (nothing was returned before). This allows
non-root users to do PAM authentication in some configurations.
On some systems there is a setgid executable that is allowed to read
/etc/shadow for authentication by e.g. screensavers. Returning no shadow
information will cause pam_unix to deny authorisation in common
configurations.
See:
http://bugs.debian.org/706913
|
|
|
|
There is a potential memory leak if the old password is saved multiple
times. Furthermore, PAM_NEW_AUTHTOK_REQD is only allowed as a result of
the authorisation phase, not the authentication phase so there is no use
in checking.
|
|
|
|
|
|
|
|
|
|
This runs a somewhat limited pylint run against the source files. It
should at least catch some issues.
|
|
|
|
|
|
|
|
This introduces a -n, --nofork option that skips the deamonising step on
start-up. This may be required for running nslcd from upstart.
See:
https://bugs.launchpad.net/bugs/806761
|
|
|
|
|
|
|
|
This fixes most of the existing caching functionality. Cache expiry,
negative hits and entries going away remain to be implemented.
|
|
|
|
This removes custom retrieve() functions and Query classes from the
database modules and uses retrieve_sql retrieve_by, group_by and
group_columns to make a custom retrieval query.
In the cache module this completely replaces how the query grouping is
done. The Query class is now only used inside the cache and the
CnAliasedQuery, RowGrouper and related classed have been removed.
|
|
|
|
This also defined the tables for netgroup storage.
|
|
This introduces the tables property in the Cache object that is used to
define the used tables.
This also fixes the storing of mulit-valued attributes in the cache.
|
|
This also moves the creation of a SQLite database connection to a
_get_connection() function to ensure the cache is only created when the
caches are instantiated.
|
|
|
|
|
|
|
