[PATCH] Send a message to the user if the login is delayed
by Sumit Bose
Hi,
if the option offline_failed_login_delay is set the authentication is
denied for the specified number of minutes if the user the given a wrong
password for offline_failed_login_attempts times. This patch sends a
message to the user telling him when a new authentication will be
accepted.
bye,
Sumit
14 years, 2 months
[PATCH] Add some more .gitignore entries
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
config.rpath: Automatically generated autoconf/libtool file
.pyc, .pyo: Compiled python file
.pydevproject: Python project file from Eclipse.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAktsKRQACgkQeiVVYja6o6MQXwCfXqYqvxs4tBLFJdN0QtZhcZ83
UioAnRFzE8m7gr6oqPBpne7fRZnOZpbV
=MDxw
-----END PGP SIGNATURE-----
14 years, 2 months
[PATCH] Add mandatory flag to SSSD config schema
by Stephen Gallagher
Also add list_mandatory_options() to both SSSDService and
SSSDDomain objects.
There is a new list_options_with_mandatory() function that will
return a longer tuple than list_options(), including the mandatory
flag directly.
list_options() will still return the shorter tuple, for
backwards-compatibility.
This feature will allow authconfig (a consumer of the SSSDConfig API) to
produce a simpler interface listing only the mandatory options for each
provider. This should result in a less confusing GUI.
14 years, 2 months
[PATCH] Added option to use libcrypto from OpenSSL instead of NSS.
by George McCollister
crypto_sha512crypt.c is a clone of nss_sha512crypt.c with the exception that all usage of NSS and related libraries has been switched to libcrypto. I renamed nss_sha512crypt.h to sha512crypt.h since it is common to both crypto_sha512crypt.c and nss_sha512crypt.c. Note that the random number generator is not seeded manually and thus relies on seeding done automatically by libcrypto. On some systems without /dev/urandom seeding may not be performed. See http://www.openssl.org/docs/crypto/RAND_add.html.
Signed-off-by: George McCollister <georgem(a)novatech-llc.com>
---
server/Makefile.am | 28 ++-
server/configure.ac | 14 +-
server/db/sysdb_ops.c | 2 +-
server/responder/pam/pam_LOCAL_domain.c | 2 +-
server/util/crypto_sha512crypt.c | 380 +++++++++++++++++++++++++++++++
server/util/nss_sha512crypt.h | 4 -
server/util/sha512crypt.h | 4 +
7 files changed, 423 insertions(+), 11 deletions(-)
create mode 100644 server/util/crypto_sha512crypt.c
delete mode 100644 server/util/nss_sha512crypt.h
create mode 100644 server/util/sha512crypt.h
14 years, 2 months
[PATCH] Reactivate old fd handling conditionally
by Sumit Bose
Hi,
this path reintroduces the old way of handling the file description of a
LDAP connection if the connection callback is not available.
Using the old way we cannot handle LDAP referrals and I think we should
generate a DEBUG message if ldap_referrals is set to 'true' and add a
hint to the man page. Do you agree? I didn't put these changes in the
patch to make the review easier because if can be compared line by line
with commit 7c8f422495347e6ff829246ebf5d7faad9f6d160 'Use ldap
connection callbacks to get file descriptors'.
bye,
Sumit
14 years, 2 months
[PATCH] Internationalize help messages
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I discovered this while working on https://fedorahosted.org/sssd/ticket/389.
We are not currently translating the help messages printed when 'sssd
- --help' (or similar) is run.
This patch depends on the "Enable debug_timestamps by default" patch.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAktoedoACgkQeiVVYja6o6OT4gCdG5olOACApFewLDZhUSxPByAo
BYYAoKbUqkcPbyE8PVld6sat+GGe00ig
=Z/Aq
-----END PGP SIGNATURE-----
14 years, 2 months
