summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-03-29Also perform authentication search using LDAPSearch classArthur de Jong
2013-03-28Make the NSS tests dependant on the configuration of nsswitch.confArthur de Jong
2013-03-28Do not rely on printf() being able to print NULL stringsArthur de Jong
2013-03-28Fix manual page generationArthur de Jong
2013-03-28Fix comment for nss_nested_groups config optionArthur de Jong
2013-03-24Implement support for nested groupsArthur de Jong
2013-03-24Add tests for nested group functionalityArthur de Jong
This also includes some changes to the test directory contents that were for other tests and functionality.
2013-03-24Implement a nss_nested_groups configuration optionArthur de Jong
This option can be used in both nslcd and pynslcd to enable recursive group member lookups. By default the functionality is disabled. This also updates the documentation.
2013-03-24Implement support for nested groups in pynslcdArthur de Jong
2013-03-24Implement support for nested groups in nslcdArthur de Jong
This differs from the code provided by Steve Hill in that it avoids (recursively) performing parallel LDAP searches by queueing groups and check for extra members per queued group (in the forward lookup) or check for extra parents (for the user to groups lookup). For the reverse lookup handling the NSLCD_HANDLE macro could no longer be used because extra care should be taken to free the sets before returning and two search phases are needed.
2013-03-24Implement a mkfilter_group_bymemberdn() functionSteve Hill
This was part of a bigger change to implement nested groups, however most of the other parts were re-implemented differently. For the original changes, see: http://lists.arthurdejong.org/nss-pam-ldapd-users/2013/msg00034.html
2013-03-24Unpack the LDIF file to make diffs clearerArthur de Jong
2013-03-24spelling fixesArthur de Jong
2013-03-24fix service request loggingArthur de Jong
2013-03-19NSS: Return TRYAGAIN on zero-length bufferJakub Hrozek
One of our customers was running into a situation where glibc provided a zero buffer, which is a condition that is retriable and the nss module should return NSS_STATUS_TRYAGAIN not NSS_STATUS_UNAVAIL.
2013-03-11fix the text representation of shadow information for nscd on SolarisArthur de Jong
2013-03-11implement a lookup_shadow test command for use on systems that don't allow ↵Arthur de Jong
querying shadow via getent
2013-03-10fix a few compiler warningsArthur de Jong
2013-03-10guess the value for --with-pam-seclib-dir if it is not specifiedArthur de Jong
2013-03-10small portability fix in test_pamcmds.shArthur de Jong
2013-03-10only log protocol name if it is presentArthur de Jong
2013-03-10also support systems without bet_get_enum()Arthur de Jong
2013-03-09log hex value of action id to make debugging easierArthur de Jong
2013-03-09ensure consistent naming of DN variablesArthur de Jong
2013-03-09clean up imports and use ldap.filter.escape_filter_chars() directlyArthur de Jong
2013-03-09move get_connection function to search module as Connection class as ↵Arthur de Jong
subclass of ReconnectLDAPObject to automatically reconnect to the LDAP server
2013-03-09move Search class to search moduleArthur de Jong
2013-03-09fix default logging configuration setting in pynslcdArthur de Jong
2013-03-09fix the description of the tio_time_remaining() functionArthur de Jong
2013-03-09document the nscd_invalidate optionArthur de Jong
2013-03-09start the nscd invalidator and invalidate the nscd cache after reconnecting ↵Arthur de Jong
to the LDAP server after failure
2013-03-09implement parsing of the nscd_invalidate optionArthur de Jong
2013-03-09implement functionality to send a cache invalidation signal to nscdArthur de Jong
2013-03-09move signame() function to common.c to make it available to all modulesArthur de Jong
2013-03-03document the trimming expressions in the nslcd.conf(5) manual pageArthur de Jong
2013-03-03support trimming expressions with full shell glob matching in pynslcdArthur de Jong
2013-03-03add tests for trimming expressionsArthur de Jong
2013-03-03update the trimming expressions code to follow the new coding styleArthur de Jong
2013-03-03allow trimming expressions with ${foo#bar} syntax in nslcdThorsten Glaser
2013-03-03return the password policy bind information via PAMArthur de Jong
2013-03-03provide a basic replacement implementation of ldap_passwordpolicy_err2txt() ↵Arthur de Jong
for systems that don't have it
2013-03-03provide a replacement implementation of ldap_parse_passwordpolicy_control() ↵Arthur de Jong
for systems that don't have it
2013-03-03request and parse password policy controls when doing user authentication in ↵Arthur de Jong
nslcd
2013-03-03pass the session along to the do_bind() functionArthur de Jong
2013-03-03add some missing checks to the configure scriptArthur de Jong
2013-03-01log a more meaningful error in nslcd when trying to authenticate as ↵Arthur de Jong
administrator when rootpwmoddn is not set
2013-03-01move update_lastchange() function from shadow to pam codeArthur de Jong
2013-03-01move parsing to command line arguments to main bodyArthur de Jong
2013-03-01update TODO (setnetgrent() returns an error since r1874)Arthur de Jong
2013-02-27include information about when some of the options were addedArthur de Jong