summaryrefslogtreecommitdiff
path: root/pynslcd
AgeCommit message (Collapse)Author
2014-10-04remove non-nslcd stuffLuke Shumaker
2014-06-05Fix commentArthur de Jong
2014-03-12Get files ready for 0.9.3 releaseArthur de Jong
2014-01-05Support blanking the member attributeArthur de Jong
This allows remapping the member attribute to an empty string which removes support for that attribute. This can reduce the number of search operations if the attribute is not used.
2013-10-25Also run invalidators on initial connectArthur de Jong
This also invalidates the caches configured with reconnect_invalidate on the first successful search. This should handle the case more gracefully where caches were filled with negative hits before nslcd was running.
2013-09-15Remove unneeded importsArthur de Jong
2013-08-25Handle failure of getpeercred more gracefullyArthur de Jong
2013-08-25Rearrange Python importsArthur de Jong
2013-08-21Have pynslcd handle mapped userPasswordArthur de Jong
This fixes an error that could occur when the userPassword was retrieved from LDAP and insufficient privileges were available for reading the attribute.
2013-08-18Fix rootpwmodpw handling in pynslcdArthur de Jong
2013-08-18Fix not logging passwords in pynslcd (7108b1f)Arthur de Jong
2013-08-18Rename isvalidname() to is_valid_name() in pynslcdArthur de Jong
2013-08-18Do not log passwords in pynslcdArthur de Jong
2013-08-18-n switch for pynslcdArthur de Jong
2013-08-17Use retrieve_by, group_by and group_columns in the cacheArthur de Jong
This removes custom retrieve() functions and Query classes from the database modules and uses retrieve_sql retrieve_by, group_by and group_columns to make a custom retrieval query. In the cache module this completely replaces how the query grouping is done. The Query class is now only used inside the cache and the CnAliasedQuery, RowGrouper and related classed have been removed.
2013-08-17Make Cache a context managerArthur de Jong
2013-08-17Give cache tables friendlier namesArthur de Jong
This also defined the tables for netgroup storage.
2013-08-17Explicitly define tables used for cacheArthur de Jong
This introduces the tables property in the Cache object that is used to define the used tables. This also fixes the storing of mulit-valued attributes in the cache.
2013-08-17Move cache table creation to modulesArthur de Jong
This also moves the creation of a SQLite database connection to a _get_connection() function to ensure the cache is only created when the caches are instantiated.
2013-07-30Fix missing part of d659e83Arthur de Jong
2013-07-29Use cleaner import and get rid of uid2dn function in pynslcdArthur de Jong
2013-07-29Handle the nss_min_uid option in pynslcdArthur de Jong
2013-07-29Handle the nss_initgroups_ignoreusers option in pynslcdArthur de Jong
2013-07-29Fix handling of pam_password_prohibit_message in pynslcdArthur de Jong
2013-07-29Implement config request handling in pynslcdArthur de Jong
This allows the PAM module to request the pam_password_prohibit_message option for denying password change.
2013-07-28Implement PAM session handling in pynslcdArthur de Jong
Just like in nslcd this doesn't actually do anything with the session ids except generating them.
2013-07-28Properly handle start_tls in pynslcdArthur de Jong
2013-07-26Fix errors in invalidator changesArthur de Jong
This fixes a few typos and an omission in the configuration file parsing code.
2013-07-26Rename nscd_invalidate option to reconnect_invalidateArthur de Jong
This also renames the internal nscd module to invalidator for both nslcd and pynslcd. The new invalidator module is now no longer nscd-specific.
2013-07-26Allow invalidating the nfsidmap cacheArthur de Jong
This introduces an nfsidmap value for nscd_invalidate which will cause the nfsidmap -c command to be run.
2013-07-26Fix nscd cache flushing bug in pynslcdArthur de Jong
The pynslcd implementation would always clear the passwd nscd cache regardless of the provided map.
2013-05-10Ignore errors in opening NSS moduleArthur de Jong
2013-04-12Python style changesArthur de Jong
This tries to conform more closely to PEP8. Imports have been checked and, if used only once, moved closer to the use to avoid potential import loops. This also includes a few other minor changes, like using __main__ for utility scripts and variable renames to avoid name clashes.
2013-04-12Raise an error with a missing old password on password modificationArthur de Jong
2013-04-12Fix getting caller's uid on password change (pynslcd)Arthur de Jong
2013-04-05Include the usermod.py file in the distributionArthur de Jong
2013-03-30Update the shadowLastChange on password change in pynslcdArthur de Jong
2013-03-30Implement password modification in pynslcdArthur de Jong
2013-03-30Handle user modification requests in pynslcdArthur de Jong
Similar to the nslcd implementation, this currently only covers modifying the homeDirectory and loginShell attributes.
2013-03-30Rename authentication function and return connectionArthur de Jong
2013-03-30Mark unsupported pynslcd configuration optionsArthur de Jong
2013-03-29Detect and handle connection failure and recoveryArthur de Jong
Logs a connection recovery message and run a nscd cache invalidation if configured.
2013-03-29Start the nscd invalidator process if neededArthur de Jong
2013-03-29Parse the nscd_invalidate optionArthur de Jong
2013-03-29Functionality for clearing the nscd cache in pynslcdArthur de Jong
2013-03-29Switch to using os.environ instead of os.putenv()Arthur de Jong
The os.putenv() call doesn't update os.environ and Python documentation recommends using os.environ.
2013-03-29Rename validate_request to validateArthur de Jong
2013-03-29Also perform authentication search using LDAPSearch classArthur de Jong
2013-03-24Implement a nss_nested_groups configuration optionArthur de Jong
This option can be used in both nslcd and pynslcd to enable recursive group member lookups. By default the functionality is disabled. This also updates the documentation.
2013-03-24Implement support for nested groups in pynslcdArthur de Jong