summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-07-20on startup have the gid option default to the primary group of the specified ↵Arthur de Jong
user and load the user's supplementary groups git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1723 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-20add an LDIF version of the ldapns.schema schema fileArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1722 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-15avoid setting tls_randfile twice and remove fixed FIXME (fixed in r1717)Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1721 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-15set the pynslcd process name if possibleArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1720 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-15support getting pam_password_prohibit_message from configuration (but don't ↵Arthur de Jong
handle it yet) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1719 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-15rename internal pam_authz_search to pam_authz_searchesArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1718 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-15properly set most LDAP options from configurationArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1717 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-11also check pam_password_prohibit_message in pam_sm_authenticate() because ↵Arthur de Jong
Solaris does authentication before pam_sm_chauthtok() (thanks Ted Cheng) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1716 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-08implement a pam_password_prohibit_message nslcd.conf option to deny password ↵Arthur de Jong
change introducing a NSLCD_ACTION_CONFIG_GET request thanks to Ted Cheng git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1715 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-08remove duplicate getting of LDAP_OPT_DIAGNOSTIC_MESSAGE (should have been ↵Arthur de Jong
part of r1639) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1714 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-07-07ensure that cache.py is installed (thanks Jon Severinsson)Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1713 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-06-29get files ready for 0.8.10 releaseArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1707 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-06-29update from latest automakeArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1706 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-06-17minor documentation touch-upsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1705 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-06-15install the default configuration file with reduced permissions (further ↵Arthur de Jong
protection for CVE-2009-1073) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1704 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-06-15log successful password change in nslcd and correctly terminate protocol on ↵Arthur de Jong
password change failure git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1703 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-06-15fix problem with returning wrong error code when changing password with ↵Arthur de Jong
wrong old password (thanks Anton Helwart) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1702 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-25reword section on bug reporting and add a reference to the ignorecase option ↵Arthur de Jong
on the case sensitivity section git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1701 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-25include list of required libraries and do not put information on AUTHORS ↵Arthur de Jong
file on the patch requirements git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1700 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-20get files ready for 0.8.9 releaseArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1695 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-20implement extra range checking of all numeric valuesArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1694 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-18get rid of a few compiler warnings on FreeBSDArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1693 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-11provide a compatibility version of struct spwd for systems without itArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1690 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-11fix fallback definition of SUN_LEN() (fixes r1686)Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1688 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-09provide a compatibility definition of SUN_LEN() for systems that lack itArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1686 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-09remove duplicate debug from log messageArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1685 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-04implement PAM authorisation check using pam_authz_search optionArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1684 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-04ignore user-supplied DN for PAM requests and don't send it backArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1683 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-04move expression handling to own moduleArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1682 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-04ensure search also works without attribute mapArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1681 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-04small code style improvementsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1680 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-04allow the pam_authz_search option to be specified multiple timesArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1679 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-04don't try to close _SC_OPEN_MAX file descriptorArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1678 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-05-02move all PAM_AUTHTOK_RECOVERY_ERR compatibility definitions to ↵Arthur de Jong
compat/pam_compat.h git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1677 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-04-29documentation touch-upsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1673 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-04-27get files ready for 0.8.8 releaseArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1662 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-04-27add a schema file that some people use for PAMArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1660 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-04-26split the functionality to read everything from the stream into a separate ↵Arthur de Jong
function and don't assume we use non-blocking IO (fix r1637) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1659 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-04-26support alternative unknown user responseArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1658 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-04-22get files ready for 0.8.7 releaseArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1653 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-04-09update files from recent automakeArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1649 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-03-23increase buffer for pam_authz_search as suggested by Chris J ArgesArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1643 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-03-16support the upper and lower functions in attribute mapping expressionsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1642 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-03-16refactor some of the attribute mapping code to introduce a mapping instance ↵Arthur de Jong
that does the hard work and support the lower() and upper() attribute mapping functions git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1641 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-03-16implement a getpeercred() functionArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1640 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-03-16always try to log the ldap error, the diagnostic message and errno if ↵Arthur de Jong
available in a consistent format git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1639 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-03-16put both tio_skip() and tio_close() within if (fixes r1637) and clarify ↵Arthur de Jong
documentation of one part of the code git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1638 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-03-14read any remaining available data from the stream when closing the ↵Arthur de Jong
connection in a normal way to prevent Broken pipe messages in nslcd git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1637 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-03-14ensure that we don't try to read more than SSIZE_MAX bytesArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1636 ef36b2f9-881f-0410-afb5-c4e39611909c
2012-03-13document the fact that each thread opens it's own connection (patch by Chris ↵Arthur de Jong
Hiestand) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1635 ef36b2f9-881f-0410-afb5-c4e39611909c