Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Get files ready for 0.9.6 release0.9.6Arthur de Jong2015-06-1410-17/+120
|
* Correctly insert emtpy lines in ChangeLogArthur de Jong2015-06-141-1/+1
|
* Manual page improvementsArthur de Jong2015-06-131-11/+11
|
* Also fix signed integer bug in binsid2id()Arthur de Jong2015-06-132-2/+2
| | | This should have been part of d217632.
* Fixed signed 32bit overflow bug on 32bit systemsGeoffrey McRae2015-06-111-14/+18
|
* Allow configuration values longer than 63 charactersJed Liu2015-05-241-2/+2
|
* Provide innetgr function on SolarisArthur de Jong2015-05-091-6/+63
| | | | | | | | This implements a function in the Solaris version of the NSS module to check if a specifc netgroup triplet is part of a netgroup. This also avoids a compiler warning and includes improvements and testing by Mark R Bannister.
* Implement disable_enumerationAndrew Elble2015-05-018-4/+53
| | | | | | | | | | If this option is present, functions which cause all user/group entries to be loaded (getpwent(), getgrent()) from the directory will not succeed in doing so. This can dramatically reduce ldap server load in situations where there are a great number of users and/or groups. Applications that depend on being able to sequentially read all users and/or groups may fail to operate correctly. This option is not recommended for most configurations.
* Implement nss_getgrent_skipmembersArthur de Jong2015-04-206-10/+43
| | | | | | | This option allows skipping group member list retrieval to improve performance with very large groups. This option results in inconsistent group membership information being presented that may confuse some applications.
* Avoid signal race condition on start-upArthur de Jong2015-04-162-3/+4
| | | | | | | This only restores the signal mask after signal handlers are in place and the daemon has completely daemonised to avoid a race condition in the start-up phase of nslcd where a signal could be sent to nslcd causing it to quit or fail to write information to the parent process.
* Get files ready for 0.9.5 release0.9.5Arthur de Jong2015-03-2910-18/+244
|
* Use correct PIC arg for non-GCC compilersTim Rice2015-03-235-6/+17
|
* Update files from latest automakeArthur de Jong2015-03-231-2/+7
|
* Fix for networks lookup under SolarisArthur de Jong2015-03-221-1/+1
| | | | This fixes a byte order issue when nscd is running.
* Add checks to configureArthur de Jong2015-03-221-0/+2
| | | | This adds tests for a function and type used in the code.
* ENODATA is missing on FreeBSDArthur de Jong2015-03-221-1/+5
| | | | FreeBSD doesn't have ENODATA so we use ENOATTR instead.
* Remove use of irs-nss.hArthur de Jong2015-03-222-9/+0
| | | | This was a compatibility leftover from the nss_ldap days.
* Prevent numer overflow in test_clockArthur de Jong2015-03-221-3/+3
|
* Various small fixes when using --with-module-nameArthur de Jong2015-03-224-11/+19
| | | | | | | This updates the test framework to support --with-module-name, ensures that exports.map is rebuilt when configure is re-ran, fixes parsing of nsswitch.conf (to determine what to return for passwd lookups) and fixes the check for _nss_ldap_version.
* Also support platforms without TLSArthur de Jong2015-03-221-0/+7
| | | | | | | This disables the use of thread-local storage in the NSS module when it is not available in libc. This results in the get*ent() functions not being thread-safe. However, on most platforms they are not expected to be thread-safe anyway.
* Document that multiple URIs can be specifiedDalibor Pospíšil2015-03-201-2/+3
| | | | | | | Update nslcd.conf man page that multiple URIs can be set by using more uri lines or more URIs defined on one uri line. https://bugzilla.redhat.com/show_bug.cgi?id=1204195
* Fix formatting of size_t valuesPatrick McLean2015-03-144-14/+14
| | | | | | | | In several places the code used a %d format to print a size_t variable. On amd64 at least size_t is an unsigned long, so use %lu instead. An alternative would be to use %ud for size_t and %zd fo ssize_t but not all platforms seem to support that formatter.
* Avoid comparison of static array to null pointerPatrick McLean2015-03-112-6/+6
| | | | | | | There are several places where a static length array in a struct is compared to a null pointer. These comparisons will always be false, since an array in a struct is not actually a pointer, so they can be removed.
* Don't let the oom killer kill nslcdPatrick McLean2015-03-112-0/+24
| | | | | Adjust the Linux OOM (Out-Of-Memory) killer score by -1000 for nslcd so that it should not be killed.
* Allow configuration of NSS and PAM namesArthur de Jong2015-01-1922-199/+226
| | | | This introduces the --with-module-name configure option to allow building of NSS and PAM modules with different namespaces than ldap.
* Fix uninitialised variableMark R Bannister2015-01-191-1/+1
| | | | | This fixes a bug in the NSS library when encountering IPv6 addresses in the hosts map.
* Avoid accessing searches outside arrayArthur de Jong2015-01-191-1/+1
| | | | | | | Thanks David Binderma for pointing this out. Note that in practical situations this should not result in any errors due to the position of searches within the ldap_session struct.
* Document that rootpwmoddn needs to existArthur de Jong2014-11-021-0/+4
| | | See http://lists.arthurdejong.org/nss-pam-ldapd-users/2014/msg00166.html
* Fix format stringArthur de Jong2014-10-101-3/+3
| | | Thanks Jianhai Luan.
* Block signals sooner to avoid race conditionsArthur de Jong2014-10-041-11/+11
|
* uid_t/gid_t should be formatted as unsigned longJason Luan2014-09-304-20/+20
| | | | | | | | | mmkfilter_passwd_byuid()/mkfilter_group_bygid() get wrong filter string because "%d" will return negative when uid/gid larger than 2^31, and result to "Authentiction failure". This also changes the other places where uid_t or gid_t values are formatted.
* Fix issues with daemonisingArthur de Jong2014-09-281-14/+24
| | | | | | | | This fixes a problem with a buffer that could end up padded with garbage. This also clarifies the code a bit and adds extra logging for errors that could occur during daemonising.
* Minor comment spelling fixTim Harder2014-07-021-1/+1
|
* Check a socket's connectivity before trying to use itTim Harder2014-07-022-11/+38
| | | | | | | | | This alleviates some cases where multi-second lag occurs before a query returns due to some or all connections having been closed by the peer, e.g. a load balancer timing out old connections, but they are all tried before opening new connections. Tested and working on Linux.
* Fix copy-pastoArthur de Jong2014-07-021-2/+2
|
* Use other IP range for testsArthur de Jong2014-06-122-14/+14
| | | | | | This uses IP addresses from the RFC 5737 TEST-NET-1 range that is meant for use in documentation. This avoids issues with running the tests environments that also use the 10.0.0.0/8 range.
* Get files ready for 0.9.4 release0.9.4Arthur de Jong2014-06-0610-14/+185
|
* Return correct port number on SolarisArthur de Jong2014-06-061-2/+2
| | | | | | This is a small fix for when using nscd (which still does not seem to work completely). The port is stored in network byte order but should be printed in host byte order.
* Add missing include for FreeBSDArthur de Jong2014-06-061-1/+1
|
* Fix password modification by rootArthur de Jong2014-06-061-1/+1
| | | | This fixes 15fc13c.
* Clear proper buffer lengthArthur de Jong2014-06-061-2/+2
| | | | This fixes 3d29861.
* Fix code indentationArthur de Jong2014-06-061-1/+1
| | | | This fixes 2274b41.
* Update files from latest automakeArthur de Jong2014-06-062-175/+40
|
* Fix commentArthur de Jong2014-06-051-1/+1
|
* Introduce lookup_groupbyuser test commandArthur de Jong2014-06-054-2/+80
| | | | | | This command can be used to perform a lookup using getgrouplist() to present a list of returned numeric group ids. This can be used to avoid the additional lookups that are done with the id and groups commands.
* Clear buffers before free-ingArthur de Jong2014-05-173-1/+21
| | | | | This clears most buffers that may hold credentials at one point before free()ing the memory.
* Clarify code contributionArthur de Jong2014-05-081-4/+4
|
* Improve error logging of user login failuresArthur de Jong2014-05-041-2/+2
|
* Also extract policy controls on BIND failureArthur de Jong2014-05-041-10/+9
| | | | | | | | | This ensures that controls returned by an LDAP server as part of a failed BIND operation are also returned. This makes it possible to distinguish between a wrong password and an expired password. This also only logs the BIND operation result on DEBUG level (the error is logged later on).
* Use FreeBSD lib directory and SONAME on DragonflyArthur de Jong2014-05-041-2/+2
|