History log of /sssd/src/providers/ldap/sdap_sudo.h
Revision Date Author Comments Expand
dea636af4d1902a081ee891f1b19ee2f8729d759 20-Jun-2016 Pavel Březina <pbrezina@redhat.com>

DP: Switch to new interface Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

/sssd/Makefile.am /sssd/src/providers/ad/ad_access.c /sssd/src/providers/ad/ad_access.h /sssd/src/providers/ad/ad_autofs.c /sssd/src/providers/ad/ad_common.h /sssd/src/providers/ad/ad_id.c /sssd/src/providers/ad/ad_id.h /sssd/src/providers/ad/ad_init.c /sssd/src/providers/ad/ad_subdomains.c /sssd/src/providers/ad/ad_subdomains.h /sssd/src/providers/ad/ad_sudo.c /sssd/src/providers/backend.h /sssd/src/providers/data_provider/dp_custom_data.h /sssd/src/providers/data_provider/dp_iface.c /sssd/src/providers/data_provider/dp_iface.h /sssd/src/providers/data_provider/dp_target_auth.c /sssd/src/providers/data_provider/dp_target_autofs.c /sssd/src/providers/data_provider/dp_target_hostid.c /sssd/src/providers/data_provider/dp_target_id.c /sssd/src/providers/data_provider/dp_target_subdomains.c /sssd/src/providers/data_provider/dp_target_sudo.c /sssd/src/providers/data_provider_be.c /sssd/src/providers/data_provider_req.c /sssd/src/providers/data_provider_req.h /sssd/src/providers/ipa/ipa_access.c /sssd/src/providers/ipa/ipa_access.h /sssd/src/providers/ipa/ipa_auth.c /sssd/src/providers/ipa/ipa_auth.h /sssd/src/providers/ipa/ipa_autofs.c /sssd/src/providers/ipa/ipa_common.h /sssd/src/providers/ipa/ipa_hbac_common.c /sssd/src/providers/ipa/ipa_hostid.c /sssd/src/providers/ipa/ipa_hostid.h /sssd/src/providers/ipa/ipa_id.c /sssd/src/providers/ipa/ipa_id.h /sssd/src/providers/ipa/ipa_init.c /sssd/src/providers/ipa/ipa_selinux.c /sssd/src/providers/ipa/ipa_selinux.h /sssd/src/providers/ipa/ipa_subdomains.c /sssd/src/providers/ipa/ipa_subdomains.h /sssd/src/providers/ipa/ipa_subdomains_ext_groups.c /sssd/src/providers/ipa/ipa_subdomains_id.c /sssd/src/providers/ipa/ipa_subdomains_server.c /sssd/src/providers/ipa/ipa_sudo.c /sssd/src/providers/krb5/krb5_auth.c /sssd/src/providers/krb5/krb5_auth.h /sssd/src/providers/krb5/krb5_common.h /sssd/src/providers/krb5/krb5_init.c ldap_access.c ldap_auth.c ldap_common.c ldap_common.h ldap_id.c ldap_init.c sdap_access.h sdap_autofs.c sdap_autofs.h sdap_idmap.c sdap_online_check.c sdap_sudo.c sdap_sudo.h /sssd/src/providers/proxy/proxy.h /sssd/src/providers/proxy/proxy_auth.c /sssd/src/providers/proxy/proxy_client.c /sssd/src/providers/proxy/proxy_id.c /sssd/src/providers/proxy/proxy_init.c /sssd/src/providers/simple/simple_access.c /sssd/src/providers/simple/simple_access_check.c /sssd/src/responder/autofs/autofssrv_dp.c /sssd/src/responder/common/responder_dp.c /sssd/src/responder/ssh/sshsrv_dp.c /sssd/src/responder/sudo/sudosrv_dp.c /sssd/src/tests/cmocka/test_nested_groups.c /sssd/src/tests/simple_access-tests.c
cc2d77d5218c188119fa954c856e858cbde76947 20-Jun-2016 Pavel Březina <pbrezina@redhat.com>

Rename dp_backend.h to backend.h Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

/sssd/Makefile.am /sssd/src/p11_child/p11_child_nss.c /sssd/src/providers/ad/ad_access.c /sssd/src/providers/ad/ad_gpo.c /sssd/src/providers/ad/ad_gpo_child.c /sssd/src/providers/ad/ad_srv.c /sssd/src/providers/ad/ad_subdomains.h /sssd/src/providers/backend.h /sssd/src/providers/be_dyndns.c /sssd/src/providers/be_ptask.c /sssd/src/providers/be_refresh.c /sssd/src/providers/data_provider_be.c /sssd/src/providers/data_provider_callbacks.c /sssd/src/providers/data_provider_fo.c /sssd/src/providers/ipa/ipa_auth.h /sssd/src/providers/ipa/ipa_dyndns.h /sssd/src/providers/ipa/ipa_subdomains.h /sssd/src/providers/ipa/selinux_child.c /sssd/src/providers/krb5/krb5_auth.h /sssd/src/providers/krb5/krb5_child.c /sssd/src/providers/krb5/krb5_common.c /sssd/src/providers/krb5/krb5_common.h ldap_access.c ldap_child.c ldap_common.h sdap.h sdap_access.c sdap_access.h sdap_async.h sdap_async_sudo.c sdap_autofs.c sdap_dyndns.c sdap_dyndns.h sdap_sudo.c sdap_sudo.h sdap_sudo_shared.h /sssd/src/providers/proxy/proxy.h /sssd/src/providers/proxy/proxy_child.c /sssd/src/providers/simple/simple_access.c /sssd/src/providers/simple/simple_access_check.c /sssd/src/tests/cmocka/test_be_ptask.c /sssd/src/tests/cmocka/test_data_provider_be.c
43bbf5b158ec3152806791ca49ae224ee978de24 19-Jan-2016 Pavel Březina <pbrezina@redhat.com>

SUDO: remove full_refresh_in_progress When we switched to be_ptask this variable has become obsolete. Reviewed-by: Sumit Bose <sbose@redhat.com>

895b8d884d0f5277e181fe1212ec0c0daaf3977d 15-Dec-2015 Pavel Březina <pbrezina@redhat.com>

SUDO: make sdap_sudo_handler static Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

cb235ec146f1ba81c211f8506736edea436be28a 15-Dec-2015 Pavel Březina <pbrezina@redhat.com>

SUDO: obtain host information when going online Resolves: https://fedorahosted.org/sssd/ticket/2672 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

1ab2b07c71da6c19c3855e390d10156d598c06a2 15-Dec-2015 Pavel Březina <pbrezina@redhat.com>

SUDO: built host filter inside sdap_sudo_refresh request Preparation for: https://fedorahosted.org/sssd/ticket/2672 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

a00c89f23bd50d4fd9cf24aa09037c997781b8c9 15-Dec-2015 Pavel Březina <pbrezina@redhat.com>

SUDO: set USN inside sdap_sudo_refresh request Reduce code duplication. Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

24eac34a8c1f0a284cb697e8d5c09ff049181691 15-Dec-2015 Pavel Březina <pbrezina@redhat.com>

SUDO: fix tevent style Rearrage and rename functions in sdap_async_sudo.c to obey tevent style and improve readability. Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

fc19031212369d69a9693ac8777ce1e61a16fe93 15-Dec-2015 Pavel Březina <pbrezina@redhat.com>

SUDO: simplify error handling This patch removes state->error and uses only ret instead since state->error was only duplication anyway. Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

00fea5c2aaa0277bea522d2f61de75699ee2ed49 15-Dec-2015 Pavel Březina <pbrezina@redhat.com>

SUDO: move refreshes from sdap_sudo.c to sdap_sudo_refresh.c sdap_sudo.c will contain only initialization and handlers. Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

a13cf3d295a4a6654dfa7e4193c0a2bc8bb78e92 15-Dec-2015 Pavel Březina <pbrezina@redhat.com>

SUDO: convert periodical refreshes to be_ptask This removes old sudo timer and simplyfies code a lot. It also allows to manage offline/online state. - Full and smart refresh are disabled when offline. - Full refresh is run immediately when sssd is back online. - Smart refresh is scheduled normally when sssd is back online. Resolves: https://fedorahosted.org/sssd/ticket/1943 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

dcb712782ed81cd19fc5d9a5dab37e50294d6f2e 18-Dec-2012 Pavel Březina <pbrezina@redhat.com>

sudo: do full refresh when data provider is back online https://fedorahosted.org/sssd/ticket/1689 Add a online callback if the first full refresh fails due to the provider beeing offline so we can perform the refresh as soon as possible.

5860e321d82d007a5b7f4a1ff9a3893156e22b19 18-Dec-2012 Pavel Březina <pbrezina@redhat.com>

sudo: schedule another full refresh in short interval if the first fails https://fedorahosted.org/sssd/ticket/1689 If the first full refresh of sudo rules fails because the data provider is offline, we will schedule another one in 2, 4, ... minutes.

260366c37cafab011cf48760eaf04282098ef800 18-Dec-2012 Pavel Březina <pbrezina@redhat.com>

add sdap_sudo_schedule_refresh() Reduces amount of code duplication.

fb67530ec34740a18f56ff56614898d2bdaee36f 24-Oct-2012 Pavel Březina <pbrezina@redhat.com>

sudo: do not fail if usn value is zero but full refresh is completed https://fedorahosted.org/sssd/ticket/1596 In case that LDAP server contains zero sudo rules, the full refresh completes succussfully and stores current USN value (= 0). But then smart refresh will fail because it takes USN=0 as invalid value.

5f73b623fc72e3b9b3590420825f30e618b4d4dd 29-Jun-2012 Pavel Březina <pbrezina@redhat.com>

sudo ldap provider: load host filter configuration on init We need to load host information during provider initialization. Currently it loads only values from configuration files, but it is implemented as an asynchrounous request as it will later try to autodetect these settings (which will need to contact DNS).

7b74632f498dd1edf69294b597a4d92ec6d73b9f 29-Jun-2012 Pavel Březina <pbrezina@redhat.com>

sudo ldap provider: pass sudo_ctx instead of id_ctx I had to create a new context structure to store additional information such as ip addresses and hostnames.

4684d427e7e10642ceff62128c3d22db87872c4c 29-Jun-2012 Pavel Březina <pbrezina@redhat.com>

sudo ldap provider: return number of downloaded rules in sdap_sudo_refresh_recv()

f143937efc6cbb1eb84042979c83dd5b3f23a40c 29-Jun-2012 Pavel Březina <pbrezina@redhat.com>

sudo ldap provider: find highest USN

c407643004a02566e35a864ba0d8b0c0f88d9d67 29-Jun-2012 Pavel Březina <pbrezina@redhat.com>

sudo ldap provider: add new timer API

72985dbeba2d2eb8bc94d9ce62424aa6045c03cb 29-Jun-2012 Pavel Březina <pbrezina@redhat.com>

sudo ldap provider: provide API for full refresh

751a7930d5af7c1a3c36936e3c5b9205189c6b92 29-Jun-2012 Pavel Březina <pbrezina@redhat.com>

sudo ldap provider: give sdap_sudo_refresh_send() search and purge filters

5d00ee0e07dea78806df780db69e94900e5bb8c0 04-Feb-2012 Jakub Hrozek <jhrozek@redhat.com>

Move BUILD_SUDO outside the generic LDAP source files Avoid #ifdefs in the general part of the code

7a571a9d9be35360cc0f283fcd8124bda11ebf51 27-Jan-2012 Pavel Březina <pbrezina@redhat.com>

SUDO Integration - prepare data provider for new responder commands https://fedorahosted.org/sssd/ticket/1143

efe918d7cb27a6ac5901748fc1f5879e3296c012 17-Jan-2012 Pavel Březina <pbrezina@redhat.com>

SUDO Integration - wrap data provider with tevent_req https://fedorahosted.org/sssd/ticket/1110

8ce0509f582935655ee2b5ad81c5905be9ef5a02 20-Dec-2011 Pavel Březina <pbrezina@redhat.com>

SUDO Integration - be_sudo_req removed from sudo_ctx

e9eeb4302e0e426c6cc1a4e65b95a6f7066e80b9 16-Dec-2011 Pavel Březina <pbrezina@redhat.com>

SUDO integration - LDAP provider