sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2011-07-08	Remove old HBAC implementation	Stephen Gallagher	2	-1595/+1

2011-07-08	Add helper functions for looking up HBAC rule components	Stephen Gallagher	7	-0/+2622

2011-07-08	Add HBAC evaluator and tests	Stephen Gallagher	7	-2/+1062

2011-07-08	Add helper function msgs2attrs_array	Stephen Gallagher	2	-0/+33
	This function converts a list of ldb_messages into a list of sysdb_attrs.
2011-07-05	ipa_dyndns: Use sockaddr_storage for storing IP addresses	Jakub Hrozek	1	-12/+17
	https://fedorahosted.org/sssd/ticket/915
2011-07-05	Call ldap_install_tls() on ldaps connections	Sumit Bose	1	-0/+15

2011-07-01	Replace system() function with fork and execl call.	Matthew Ife	1	-22/+30
	This is much more selinux friendly as it allows policy makers to call nscd_domtrans to transition to nscd_t instead of giving more access to the system via the corcmd_exec_bin macro. Modified-by: Simo Sorce <ssorce@redhat.com> Signed-off-by: Simo Sorce <ssorce@redhat.com>
2011-07-01	Do not access state after tevent_req_done() is called.	Sumit Bose	1	-10/+16

2011-07-01	Do not attempt to close() a file descriptor < 0	Stephen Gallagher	1	-1/+3
	Coverity 10886
2011-06-30	Use ldap_init_fd() instead of ldap_initialize() if available	Sumit Bose	6	-38/+435

2011-06-30	Use name based URI instead of IP address based URIs	Sumit Bose	2	-38/+3

2011-06-30	Add sdap_call_conn_cb() to call add connection callback directly	Sumit Bose	2	-0/+40

2011-06-30	Add sockaddr_storage to sdap_service	Sumit Bose	5	-0/+62

2011-06-27	fix typos	Simo Sorce	1	-5/+5

2011-06-24	Fall back to polling when inotify fails	Jan Zeleny	1	-28/+68

2011-06-21	Log nsupdate message	Jakub Hrozek	1	-0/+3
	https://fedorahosted.org/sssd/ticket/893
2011-06-16	Test NULL server hostname in fail over tests	Jakub Hrozek	1	-8/+16

2011-06-16	Provide TTL structure names for c-ares < 1.7	Jakub Hrozek	2	-0/+11
	https://fedorahosted.org/sssd/ticket/898 In c-ares 1.7, the upstream renamed the addrttl/addr6ttl structures to ares_addrttl/ares_addr6ttl so they are in the ares_ namespace. Because they are committed to stable ABI, the contents are the same, just the name changed -- so it is safe to just #define the new name for older c-ares version in case the new one is not detected in configure time.
2011-06-16	Do not check pwdAttribute	Sumit Bose	1	-9/+0
	It is not safe to check pwdAttribute to see if server side password policies are active. Only if a LDAP_CONTROL_PASSWORDPOLICYRESPONSE is present the bind response we can assume that there is a server side password policy.
2011-06-15	Switch resolver to using resolv_hostent and honor TTL	Jakub Hrozek	10	-276/+401

2011-06-15	Resolve hosts by name from DNS into resolv_hostent	Jakub Hrozek	1	-0/+254

2011-06-15	Resolve hosts by name from files into resolv_hostent	Jakub Hrozek	1	-0/+92

2011-06-15	Add new resolv_hostent data structure and utility functions	Jakub Hrozek	2	-0/+200

2011-06-15	Fix proxy provider return code for secondary missing groups	Sumit Bose	1	-1/+3

2011-06-15	Add missing libsss_util to proxy provider	Sumit Bose	1	-0/+1

2011-06-15	Unit test for parge_args	Jakub Hrozek	1	-0/+58

2011-06-15	Make parse_args skip extra spaces	Jakub Hrozek	1	-16/+24
	https://fedorahosted.org/sssd/ticket/871
2011-06-15	Fix two typos	Sumit Bose	1	-2/+3

2011-06-15	Delete cached ccache file if password is expired	Sumit Bose	1	-8/+63

2011-06-02	Non-posix group processing - ldap provider and nss responder	Jan Zeleny	3	-31/+90

2011-06-02	Non-posix group processing - sysdb changes	Jan Zeleny	3	-23/+32

2011-06-02	Added sysdb_attrs_get_bool() function	Jan Zeleny	2	-0/+24

2011-06-02	Escape IPv6 IP addresses in the IPA provider	Jakub Hrozek	1	-4/+26
	https://fedorahosted.org/sssd/ticket/880
2011-06-02	Use escaped IP addresses in LDAP provider	Jakub Hrozek	1	-6/+56

2011-06-02	Add a utility function to escape IPv6 address for use in URIs	Jakub Hrozek	2	-0/+11

2011-06-02	Add utility function to return IP address as string	Jakub Hrozek	4	-17/+31

2011-06-02	Add online callback only once for TGT renewal	Sumit Bose	1	-25/+44

2011-05-31	Ensure that SSSD always Requires: the primary-arch sssd-client	Stephen Gallagher	1	-1/+1
	https://bugzilla.redhat.com/show_bug.cgi?id=709333
2011-05-31	Fix typo in initgroups negative cache check	Stephen Gallagher	1	-1/+1

2011-05-31	Changing default to Default for consistency	Kaushik Banerjee	1	-1/+1

2011-05-27	Add more detail to ldap_uri manpage entry	Stephen Gallagher	1	-1/+13

2011-05-25	Sanitize username during initgroups call	Sumit Bose	1	-1/+7

2011-05-25	Separate return paths for success and failure in sdap_nested_group_check_cache	Jakub Hrozek	1	-6/+10

2011-05-24	Make "password" the default for ldap_default_authtok_type	Stephen Gallagher	2	-1/+4

2011-05-24	Fix uninitialized scalar variable in sdap_nested_group_check_cache	Jakub Hrozek	1	-2/+4
	https://fedorahosted.org/sssd/ticket/878
2011-05-24	Fix uninitialized pointer read in sdap_x_deref_parse_entry	Jakub Hrozek	1	-1/+1
	https://fedorahosted.org/sssd/ticket/877
2011-05-24	Fix bad comparison in sdap_has_deref_support	Jakub Hrozek	1	-1/+1
	https://fedorahosted.org/sssd/ticket/876
2011-05-23	Import config.h earlier	Stephen Gallagher	3	-5/+3
	On RHEL 5 and other older platforms, failing to set _GNU_SOURCE early would cause some functions - such as strndup() - to be unavailable.
2011-05-23	Include string.h in sss_cli.h	Sumit Bose	1	-0/+1
	Since memcpy() is used in sss_cli.h it should be declared here, too.
2011-05-23	Build sssd utils as a libtool helper library	Stephen Gallagher	1	-88/+98
	This will speed up the build, as we are not recompiling the same sources multiple times for different binaries. These objects will now be built once and then statically linked in.