Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
path: root/pynslcd/cfg.py
Commit message (Collapse)AuthorAgeFilesLines
* Add pam_authc_ppolicy support in pynslcdArthur de Jong2019-10-131-1/+2
| | | | See https://bugs.debian.org/900253
* Improve Python code styleArthur de Jong2019-09-081-57/+79
| | | | | | This also adds a flake8 test that checks code style. Note that this test is not run by default because it requires network access to create the virtualenv with the test software.
* Add Python 3 supportArthur de Jong2019-09-081-21/+21
| | | | | | | | | This ensures that both pynslcd and the command-line utilities work with Python3 as interpreter and runs some tests with all installed Python interpreters. This drops support for Python 2.6 and extends 5a84be2 to perform more testing with Python 3.
* Create pidfile directory in pynslcdArthur de Jong2017-06-251-0/+12
| | | | | This ensures that /var/run/nslcd is created (when it does not exist) when starting pynslcd.
* Add nss_uid_offset and nss_gid_offset to pynslcdArthur de Jong2017-06-251-2/+4
|
* Implement disable_enumerationAndrew Elble2015-05-011-1/+2
| | | | | | | | | | If this option is present, functions which cause all user/group entries to be loaded (getpwent(), getgrent()) from the directory will not succeed in doing so. This can dramatically reduce ldap server load in situations where there are a great number of users and/or groups. Applications that depend on being able to sequentially read all users and/or groups may fail to operate correctly. This option is not recommended for most configurations.
* Implement nss_getgrent_skipmembersArthur de Jong2015-04-201-2/+3
| | | | | | | This option allows skipping group member list retrieval to improve performance with very large groups. This option results in inconsistent group membership information being presented that may confuse some applications.
* Handle the nss_min_uid option in pynslcdArthur de Jong2013-07-291-1/+1
|
* Handle the nss_initgroups_ignoreusers option in pynslcdArthur de Jong2013-07-291-1/+1
|
* Fix handling of pam_password_prohibit_message in pynslcdArthur de Jong2013-07-291-1/+1
|
* Rename nscd_invalidate option to reconnect_invalidateArthur de Jong2013-07-261-4/+4
| | | | | This also renames the internal nscd module to invalidator for both nslcd and pynslcd. The new invalidator module is now no longer nscd-specific.
* Allow invalidating the nfsidmap cacheArthur de Jong2013-07-261-1/+1
| | | | This introduces an nfsidmap value for nscd_invalidate which will cause the nfsidmap -c command to be run.
* Python style changesArthur de Jong2013-04-121-3/+2
| | | | | | | This tries to conform more closely to PEP8. Imports have been checked and, if used only once, moved closer to the use to avoid potential import loops. This also includes a few other minor changes, like using __main__ for utility scripts and variable renames to avoid name clashes.
* Mark unsupported pynslcd configuration optionsArthur de Jong2013-03-301-17/+16
|
* Parse the nscd_invalidate optionArthur de Jong2013-03-291-0/+11
|
* Implement a nss_nested_groups configuration optionArthur de Jong2013-03-241-1/+2
| | | | | | This option can be used in both nslcd and pynslcd to enable recursive group member lookups. By default the functionality is disabled. This also updates the documentation.
* fix default logging configuration setting in pynslcdArthur de Jong2013-03-091-1/+1
|
* handle the log configuration option in pynslcdArthur de Jong2013-02-231-1/+18
|
* support children search scope for systems that have itArthur de Jong2013-01-141-0/+4
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1917 ef36b2f9-881f-0410-afb5-c4e39611909c
* fix parsing of scope option in pynslcdArthur de Jong2013-01-141-2/+2
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1916 ef36b2f9-881f-0410-afb5-c4e39611909c
* to only set LDAP_OPT_X_SASL_NOCANON if the ↵Arthur de Jong2012-11-131-1/+1
| | | | | | sasl_canonicalize option is explicitly set in the configuration file git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1824 ef36b2f9-881f-0410-afb5-c4e39611909c
* change the default value of sasl_canonicalize to yes ↵Arthur de Jong2012-08-311-1/+1
| | | | | | (thanks Marcus Moeller) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1735 ef36b2f9-881f-0410-afb5-c4e39611909c
* introduce a sasl_canonicalize option that will now, by ↵Arthur de Jong2012-08-141-0/+11
| | | | | | default, disable reverse host name lookups in OpenLDAP git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1733 ef36b2f9-881f-0410-afb5-c4e39611909c
* support getting pam_password_prohibit_message from ↵Arthur de Jong2012-07-151-1/+2
| | | | | | configuration (but don't handle it yet) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1719 ef36b2f9-881f-0410-afb5-c4e39611909c
* rename internal pam_authz_search to pam_authz_searchesArthur de Jong2012-07-151-2/+2
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1718 ef36b2f9-881f-0410-afb5-c4e39611909c
* move expression handling to own moduleArthur de Jong2012-05-041-1/+2
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1682 ef36b2f9-881f-0410-afb5-c4e39611909c
* small code style improvementsArthur de Jong2012-05-041-18/+22
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1680 ef36b2f9-881f-0410-afb5-c4e39611909c
* allow the pam_authz_search option to be specified ↵Arthur de Jong2012-05-041-3/+2
| | | | | | multiple times git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1679 ef36b2f9-881f-0410-afb5-c4e39611909c
* user the logging framework, handle exceptions properly ↵Arthur de Jong2012-01-061-4/+3
| | | | | | and some cleanups git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1588 ef36b2f9-881f-0410-afb5-c4e39611909c
* support for reading the configuration file (not all ↵Arthur de Jong2011-12-281-11/+246
| | | | | | options are used though) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1581 ef36b2f9-881f-0410-afb5-c4e39611909c
* move the state variables (from command line) from the ↵Arthur de Jong2011-12-281-9/+1
| | | | | | configuration to the main module git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1580 ef36b2f9-881f-0410-afb5-c4e39611909c
* PEP8 fixesArthur de Jong2011-12-271-1/+2
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1573 ef36b2f9-881f-0410-afb5-c4e39611909c
* add an experimental (currently partial) Python ↵Arthur de Jong2010-12-291-0/+58
implementation of nslcd to see if we can get the same features with easier to maintain code git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1347 ef36b2f9-881f-0410-afb5-c4e39611909c