Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Get files ready for 0.9.1 release0.9.1Arthur de Jong2013-08-2510-264/+931
|
* Have a nicer way of generating the ChangeLogArthur de Jong2013-08-251-2/+5
| | | | | This adds the commit id, improves the line wrapping and also gets rid of the external dependency.
* Handle failure of getpeercred more gracefullyArthur de Jong2013-08-251-9/+9
|
* Only run pynslcd tests if it is enabledArthur de Jong2013-08-251-1/+4
|
* Add configure test for Python modulesArthur de Jong2013-08-252-7/+87
| | | | | | | | This uses the AX_PYTHON_MODULE test to check for availability of used Python modules. All third-party modules and modules that are not a builtin for Python 2.5 are tested. This also splits the tests for the utils and pynslcd.
* Rearrange Python importsArthur de Jong2013-08-256-7/+8
|
* Ignore SIGUSR2 for future compatibilityArthur de Jong2013-08-231-1/+1
|
* Add a test for the manual pagesArthur de Jong2013-08-233-9/+54
| | | | | This replaces e0491d2 to run xmlto from the man directory. This handles the case more gracefully if xmlto is not available.
* Update files from latest automakeArthur de Jong2013-08-232-6/+15
|
* Have pynslcd handle mapped userPasswordArthur de Jong2013-08-213-4/+17
| | | | | | This fixes an error that could occur when the userPassword was retrieved from LDAP and insufficient privileges were available for reading the attribute.
* Retry LDAP servers quickly after receiving SIGUSR1Arthur de Jong2013-08-214-14/+67
|\ | | | | | | | | | | | | | | When nslcd receives the SIGUSR1 signal it will retry connecting to unavailable LDAP servers sooner. This signal can for example be sent when (re)stablishing a network connection.
| * Handle SIGUSR1 by resetting the retry timerArthur de Jong2013-08-212-14/+41
| | | | | | | | | | | | This implements and documents handling of the SIGUSR1 signal in nslcd to reset the reconnect_sleeptime and reconnect_retrytime timers to re-check availability of the LDAP server.
| * Implement function for resetting reconnect timesArthur de Jong2013-08-212-0/+26
|/ | | | | | | | | | This implemens a myldap_immediate_reconnect() function that resets the reconnect timer to retry failing connections to the LDAP server upon the next search. This can be used to cut the reconnect_sleeptime and reconnect_retrytime sleeping periodss short if we have some indication that the LDAP server is available again.
* Return partial shadow information to non-root usersArthur de Jong2013-08-213-12/+11
| | | | | | | | | | | | | | This also returns everything except the password hash from the shadow database to non-root users (nothing was returned before). This allows non-root users to do PAM authentication in some configurations. On some systems there is a setgid executable that is allowed to read /etc/shadow for authentication by e.g. screensavers. Returning no shadow information will cause pam_unix to deny authorisation in common configurations. See: http://bugs.debian.org/706913
* Add cast to int when logging configuration summaryArthur de Jong2013-08-201-3/+3
|
* Small fix in NEW_AUTHTOK_REQD handlingArthur de Jong2013-08-181-1/+1
| | | | | | | There is a potential memory leak if the old password is saved multiple times. Furthermore, PAM_NEW_AUTHTOK_REQD is only allowed as a result of the authorisation phase, not the authentication phase so there is no use in checking.
* Fix rootpwmodpw handling in pynslcdArthur de Jong2013-08-181-2/+2
|
* Fix not logging passwords in pynslcd (7108b1f)Arthur de Jong2013-08-181-1/+1
|
* Update files from test environmentArthur de Jong2013-08-182-46/+62
|
* Improve error and help output of getent commandArthur de Jong2013-08-181-5/+15
|
* Run pylint as a testArthur de Jong2013-08-183-3/+295
| | | | | This runs a somewhat limited pylint run against the source files. It should at least catch some issues.
* Rename isvalidname() to is_valid_name() in pynslcdArthur de Jong2013-08-184-7/+7
|
* Run xmlto on manual pages as part of the testsArthur de Jong2013-08-181-0/+4
|
* Do not log passwords in pynslcdArthur de Jong2013-08-181-1/+8
|
* Implement an option to run in the foregroundArthur de Jong2013-08-184-5/+44
|\ | | | | | | | | | | | | | | This introduces a -n, --nofork option that skips the deamonising step on start-up. This may be required for running nslcd from upstart. See: https://bugs.launchpad.net/bugs/806761
| * Document -n, --nofork optionArthur de Jong2013-08-182-0/+24
| |
| * -n switch for pynslcdArthur de Jong2013-08-181-3/+10
| |
| * -n switch for nslcd (prevents process from forking)Caleb Callaway2013-08-181-2/+10
|/
* Improvements to pynslcd caching functionalityArthur de Jong2013-08-1715-354/+941
|\ | | | | | | | | This fixes most of the existing caching functionality. Cache expiry, negative hits and entries going away remain to be implemented.
| * Implement tests for caching functionalityArthur de Jong2013-08-173-3/+465
| |
| * Use retrieve_by, group_by and group_columns in the cacheArthur de Jong2013-08-179-160/+229
| | | | | | | | | | | | | | | | | | | | This removes custom retrieve() functions and Query classes from the database modules and uses retrieve_sql retrieve_by, group_by and group_columns to make a custom retrieval query. In the cache module this completely replaces how the query grouping is done. The Query class is now only used inside the cache and the CnAliasedQuery, RowGrouper and related classed have been removed.
| * Make Cache a context managerArthur de Jong2013-08-171-0/+6
| |
| * Give cache tables friendlier namesArthur de Jong2013-08-179-61/+74
| | | | | | | | This also defined the tables for netgroup storage.
| * Explicitly define tables used for cacheArthur de Jong2013-08-178-14/+35
| | | | | | | | | | | | | | This introduces the tables property in the Cache object that is used to define the used tables. This also fixes the storing of mulit-valued attributes in the cache.
| * Move cache table creation to modulesArthur de Jong2013-08-1712-177/+193
|/ | | | | | This also moves the creation of a SQLite database connection to a _get_connection() function to ensure the cache is only created when the caches are instantiated.
* Fix missing part of d659e83Arthur de Jong2013-07-301-2/+2
|
* Use cleaner import and get rid of uid2dn function in pynslcdArthur de Jong2013-07-292-12/+5
|
* Handle the nss_min_uid option in pynslcdArthur de Jong2013-07-292-4/+16
|
* Handle the nss_initgroups_ignoreusers option in pynslcdArthur de Jong2013-07-292-1/+9
|
* Fix handling of pam_password_prohibit_message in pynslcdArthur de Jong2013-07-292-2/+2
|
* Implement config request handling in pynslcdArthur de Jong2013-07-293-3/+49
| | | | This allows the PAM module to request the pam_password_prohibit_message option for denying password change.
* Implement PAM session handling in pynslcdArthur de Jong2013-07-281-2/+61
| | | | | Just like in nslcd this doesn't actually do anything with the session ids except generating them.
* Properly handle start_tls in pynslcdArthur de Jong2013-07-281-0/+4
|
* Have configure show --disable-utils by defaultArthur de Jong2013-07-281-1/+1
| | | | | Since the utils are automatically built if Python is available --disable is more appropriate a default then --enable.
* Have test_pycompile not write any pyc filesArthur de Jong2013-07-281-2/+35
| | | | | | | | We need to avoid writing pyc files because during make distcheck, the source directory is read-only. This also ensures that the test is skipped if the Python interpreter is not found.
* Dcoumentation updatesArthur de Jong2013-07-271-13/+14
| | | | | | This fixes a typo, clarifies the section on the LDAP schema values that are supported and updates the differences between nss-pam-ldapd and nss_ldap and pam_ldap.
* Test Python syntax on make checkArthur de Jong2013-07-262-2/+36
|
* Merge fixes for reconnect_invalidate optionArthur de Jong2013-07-264-3/+5
|\ | | | | | | The branch accidentally got merged before it was fully tested.
| * Fix errors in invalidator changesArthur de Jong2013-07-264-3/+5
| | | | | | | | | | This fixes a few typos and an omission in the configuration file parsing code.
* | Make cache invalidation more genericArthur de Jong2013-07-2615-90/+122
|\| | | | | | | | | This changes the nscd_invalidate option into a more generic reconnect_invalidate and also allows clearing the nfsidmap cache.