summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2011-08-01Change the default value of ldap_tls_cacert in IPA providerJakub Hrozek1-1/+1
2011-08-01Add rule validator to libipa_hbacStephen Gallagher4-1/+190
2011-08-01Remove incorrect private variableStephen Gallagher1-1/+1
2011-08-01Wrong paramater to sysdb_attrs_add_uint32Jakub Hrozek1-1/+1
2011-08-01Require matched version and release for libipa_hbacStephen Gallagher1-0/+1
2011-07-29Converge accept_fd_handler and accept_priv_fd_handlerStephen Gallagher1-85/+50
2011-07-29Fix incorrect NULL check in ipa_hbac_common.cStephen Gallagher1-1/+1
2011-07-29Fix memory leak in ipa_hbac_evaluate_rulesStephen Gallagher1-0/+1
2011-07-29Add vetoed_shells optionJohn Hodrien6-1/+27
2011-07-29sss_client: avoid leaking file descriptorsSimo Sorce2-0/+15
2011-07-29UTF8 HBAC testJakub Hrozek1-0/+117
2011-07-29libipa_hbac: Support case-insensitive comparisons with UTF8Stephen Gallagher5-17/+111
2011-07-27Handle allocation error in python HBAC bindingsJakub Hrozek1-0/+3
2011-07-27Remove dead code from python HBAC bindingsJakub Hrozek1-4/+0
2011-07-27Explicitly ignore groups with gidNumber=0Jakub Hrozek2-11/+18
2011-07-27Set gidNumber of non-posix groups to 0 even on updatesJakub Hrozek1-8/+44
2011-07-27silence compilation warnings on RHEL5pbrezina1-12/+13
2011-07-21Fix indexing of skipped groupsJakub Hrozek1-2/+4
2011-07-21fo_get_server_name() getter for a server nameJakub Hrozek6-4/+32
2011-07-21Rename fo_get_server_name to fo_get_server_str_nameJakub Hrozek7-11/+11
2011-07-21Only print server address if one is availableJakub Hrozek1-0/+7
2011-07-21Do not add a NULL host parsed from LDAP URIJakub Hrozek1-1/+8
2011-07-13Fix python HBAC bindings for python <= 2.4Jakub Hrozek7-85/+315
2011-07-13Fixes for python HBAC bindingsJakub Hrozek2-12/+105
2011-07-13Use ares_search instead of ares_query for hostname resolutionJakub Hrozek1-1/+1
2011-07-13Remove unused krb5_service structure memberJakub Hrozek3-7/+1
2011-07-11Check DNS records before updatingJakub Hrozek4-25/+470
2011-07-11Allow returning arbitrary address from resolv_hostent as stringJakub Hrozek2-3/+10
2011-07-11Split reading resolver family order into a separate functionJakub Hrozek3-23/+52
2011-07-11Do not hardcode default resolver timeoutJakub Hrozek2-1/+3
2011-07-11Escape IP address in kdcinfoJakub Hrozek2-14/+36
2011-07-11Move IP adress escaping from the LDAP namespaceJakub Hrozek5-14/+14
2011-07-08Allow NULL memctx in sysdb_custom_subtree_dnStephen Gallagher1-3/+11
2011-07-08Add LDAP access control based on NDS attributesSumit Bose9-3/+253
2011-07-08Add support for experimental featuresSumit Bose2-0/+10
2011-07-08Provide python bindings for the HBAC evaluator libraryJakub Hrozek4-4/+2243
2011-07-08Treat NULL or empty rhost as unknownStephen Gallagher2-11/+25
2011-07-08Add ipa_hbac_treat_deny_as optionStephen Gallagher6-2/+42
2011-07-08Add ipa_hbac_refresh optionStephen Gallagher7-1/+38
2011-07-08Add new HBAC lookup and evaluation routinesStephen Gallagher3-125/+400
2011-07-08Remove old HBAC implementationStephen Gallagher2-1595/+1
2011-07-08Add helper functions for looking up HBAC rule componentsStephen Gallagher7-0/+2622
2011-07-08Add HBAC evaluator and testsStephen Gallagher7-2/+1062
2011-07-08Add helper function msgs2attrs_arrayStephen Gallagher2-0/+33
2011-07-05ipa_dyndns: Use sockaddr_storage for storing IP addressesJakub Hrozek1-12/+17
2011-07-05Call ldap_install_tls() on ldaps connectionsSumit Bose1-0/+15
2011-07-01Replace system() function with fork and execl call.Matthew Ife1-22/+30
2011-07-01Do not access state after tevent_req_done() is called.Sumit Bose1-10/+16
2011-07-01Do not attempt to close() a file descriptor < 0Stephen Gallagher1-1/+3
2011-06-30Use ldap_init_fd() instead of ldap_initialize() if availableSumit Bose6-38/+435