Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
path: root/pynslcd
Commit message (Collapse)AuthorAgeFilesLines
* Fix running pynslcd without uid optionArthur de Jong2021-11-141-3/+4
| | | | Fixes 65695aa
* Add pam_authc_ppolicy support in pynslcdArthur de Jong2019-10-132-3/+6
| | | | See https://bugs.debian.org/900253
* Correctly validate shadow requests and responsesArthur de Jong2019-09-081-3/+10
|
* Update Python interpreter in installed scriptsArthur de Jong2019-09-081-1/+2
| | | | | | | | Ensure that the Python interpreter that is passed to configure ends up in the shebang of the Python scripts. This allows one to pass PYTHON=python3 to configure to install the scripts using the Python 3 interpreter.
* Improve Python code styleArthur de Jong2019-09-0822-244/+319
| | | | | | This also adds a flake8 test that checks code style. Note that this test is not run by default because it requires network access to create the virtualenv with the test software.
* Add Python 3 supportArthur de Jong2019-09-0813-85/+129
| | | | | | | | | This ensures that both pynslcd and the command-line utilities work with Python3 as interpreter and runs some tests with all installed Python interpreters. This drops support for Python 2.6 and extends 5a84be2 to perform more testing with Python 3.
* Get files ready for 0.9.8 release0.9.8Arthur de Jong2017-06-261-1/+1
|
* Create pidfile directory in pynslcdArthur de Jong2017-06-253-9/+23
| | | | | This ensures that /var/run/nslcd is created (when it does not exist) when starting pynslcd.
* Add nss_uid_offset and nss_gid_offset to pynslcdArthur de Jong2017-06-253-9/+18
|
* Reorganise PAM search var building functionsArthur de Jong2017-06-141-2/+2
| | | | | | | | | | This moves the autzsearch_var_add(), autzsearch_vars_free(), autzsearch_var_get() and do_autzsearches() functions to the top of the file using more generic names and introduces search_vars_new() in prepartion of other similar searches. This also renames the remaining authzsearch functions to authz_search to be consistent with the pam_authz_search option.
* Query ethernet addresses in compact and long formatArthur de Jong2017-06-131-4/+5
| | | | | | | | | | | This ensures that when querying the address 0:18:8a:54:1a:8b both that format and 00:18:8a:54:1a:8b is searched for in LDAP. This was triggerred by the fact that ether_ntoa() on FreeBSD returns the long format while glibc uses the compact format. Since we are no longer using the libc version of ether_ntoa() we can also drop the compatibility implementation of ether_ntoa_r().
* Get files ready for 0.9.7 release0.9.7Arthur de Jong2016-08-141-2/+2
|
* Support ${var:offset:length} in pynslcdArthur de Jong2016-06-031-1/+29
|
* Fix pynslcd expression representationArthur de Jong2016-06-031-2/+2
| | | | | | The problem was that the ExpressionMapping string value did not include the quotes which will cause problems when printing the expression (e.g. when logging or dumping config, etc.).
* Work around bug in python-daemonArthur de Jong2015-07-191-2/+2
| | | See https://bugs.debian.org/792871
* Implement disable_enumerationAndrew Elble2015-05-014-1/+15
| | | | | | | | | | If this option is present, functions which cause all user/group entries to be loaded (getpwent(), getgrent()) from the directory will not succeed in doing so. This can dramatically reduce ldap server load in situations where there are a great number of users and/or groups. Applications that depend on being able to sequentially read all users and/or groups may fail to operate correctly. This option is not recommended for most configurations.
* Implement nss_getgrent_skipmembersArthur de Jong2015-04-202-4/+7
| | | | | | | This option allows skipping group member list retrieval to improve performance with very large groups. This option results in inconsistent group membership information being presented that may confuse some applications.
* Allow configuration of NSS and PAM namesArthur de Jong2015-01-192-4/+8
| | | | This introduces the --with-module-name configure option to allow building of NSS and PAM modules with different namespaces than ldap.
* Fix commentArthur de Jong2014-06-051-1/+1
|
* Get files ready for 0.9.3 release0.9.3Arthur de Jong2014-03-121-2/+2
|
* Support blanking the member attributeArthur de Jong2014-01-051-13/+16
| | | | | | This allows remapping the member attribute to an empty string which removes support for that attribute. This can reduce the number of search operations if the attribute is not used.
* Also run invalidators on initial connectArthur de Jong2013-10-251-2/+6
| | | | | | This also invalidates the caches configured with reconnect_invalidate on the first successful search. This should handle the case more gracefully where caches were filled with negative hits before nslcd was running.
* Remove unneeded importsArthur de Jong2013-09-152-2/+0
|
* Handle failure of getpeercred more gracefullyArthur de Jong2013-08-251-9/+9
|
* Rearrange Python importsArthur de Jong2013-08-254-5/+6
|
* Have pynslcd handle mapped userPasswordArthur de Jong2013-08-213-4/+17
| | | | | | This fixes an error that could occur when the userPassword was retrieved from LDAP and insufficient privileges were available for reading the attribute.
* Fix rootpwmodpw handling in pynslcdArthur de Jong2013-08-181-2/+2
|
* Fix not logging passwords in pynslcd (7108b1f)Arthur de Jong2013-08-181-1/+1
|
* Rename isvalidname() to is_valid_name() in pynslcdArthur de Jong2013-08-184-7/+7
|
* Do not log passwords in pynslcdArthur de Jong2013-08-181-1/+8
|
* -n switch for pynslcdArthur de Jong2013-08-181-3/+10
|
* Use retrieve_by, group_by and group_columns in the cacheArthur de Jong2013-08-179-160/+229
| | | | | | | | | | This removes custom retrieve() functions and Query classes from the database modules and uses retrieve_sql retrieve_by, group_by and group_columns to make a custom retrieval query. In the cache module this completely replaces how the query grouping is done. The Query class is now only used inside the cache and the CnAliasedQuery, RowGrouper and related classed have been removed.
* Make Cache a context managerArthur de Jong2013-08-171-0/+6
|
* Give cache tables friendlier namesArthur de Jong2013-08-179-61/+74
| | | | This also defined the tables for netgroup storage.
* Explicitly define tables used for cacheArthur de Jong2013-08-178-14/+35
| | | | | | | This introduces the tables property in the Cache object that is used to define the used tables. This also fixes the storing of mulit-valued attributes in the cache.
* Move cache table creation to modulesArthur de Jong2013-08-1712-177/+193
| | | | | | This also moves the creation of a SQLite database connection to a _get_connection() function to ensure the cache is only created when the caches are instantiated.
* Fix missing part of d659e83Arthur de Jong2013-07-301-2/+2
|
* Use cleaner import and get rid of uid2dn function in pynslcdArthur de Jong2013-07-292-12/+5
|
* Handle the nss_min_uid option in pynslcdArthur de Jong2013-07-292-4/+16
|
* Handle the nss_initgroups_ignoreusers option in pynslcdArthur de Jong2013-07-292-1/+9
|
* Fix handling of pam_password_prohibit_message in pynslcdArthur de Jong2013-07-292-2/+2
|
* Implement config request handling in pynslcdArthur de Jong2013-07-293-3/+49
| | | | This allows the PAM module to request the pam_password_prohibit_message option for denying password change.
* Implement PAM session handling in pynslcdArthur de Jong2013-07-281-2/+61
| | | | | Just like in nslcd this doesn't actually do anything with the session ids except generating them.
* Properly handle start_tls in pynslcdArthur de Jong2013-07-281-0/+4
|
* Fix errors in invalidator changesArthur de Jong2013-07-262-2/+2
| | | | | This fixes a few typos and an omission in the configuration file parsing code.
* Rename nscd_invalidate option to reconnect_invalidateArthur de Jong2013-07-265-19/+19
| | | | | This also renames the internal nscd module to invalidator for both nslcd and pynslcd. The new invalidator module is now no longer nscd-specific.
* Allow invalidating the nfsidmap cacheArthur de Jong2013-07-262-16/+18
| | | | This introduces an nfsidmap value for nscd_invalidate which will cause the nfsidmap -c command to be run.
* Fix nscd cache flushing bug in pynslcdArthur de Jong2013-07-261-1/+1
| | | | | The pynslcd implementation would always clear the passwd nscd cache regardless of the provided map.
* Ignore errors in opening NSS moduleArthur de Jong2013-05-101-1/+4
|
* Python style changesArthur de Jong2013-04-129-39/+36
| | | | | | | This tries to conform more closely to PEP8. Imports have been checked and, if used only once, moved closer to the use to avoid potential import loops. This also includes a few other minor changes, like using __main__ for utility scripts and variable renames to avoid name clashes.