summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2012-11-20LDAP: Only convert direct parents' ghost attribute to memberJakub Hrozek11-27/+91
2012-11-20SYSDB: Use the add_string convenience functions for managing ghost user attri...Jakub Hrozek1-24/+9
2012-11-20BUILD: Temporary workaround for Kerberos buildStephen Gallagher1-2/+3
2012-11-19Disable canonicalization during password changesSumit Bose1-2/+43
2012-11-19Fix compare_principal_realm() checkSumit Bose2-9/+9
2012-11-19Just use the service name with krb5_get_init_creds_password()Sumit Bose1-24/+2
2012-11-19LDAP: Make it possible to use full principal in ldap_sasl_authid againJakub Hrozek2-4/+21
2012-11-19LDAP: Checking the principal should not be considered fatalJakub Hrozek1-6/+10
2012-11-19LDAP: Provide a common sdap_set_sasl_options init functionJakub Hrozek4-91/+95
2012-11-19MAN: document the ldap_sasl_realm optionJakub Hrozek1-0/+13
2012-11-19Restart services with a delay in case they are restarted too oftenJakub Hrozek1-14/+59
2012-11-19Handle conversion to fully qualified usernamesSimo Sorce3-1/+98
2012-11-19Do not save HBAC rules in subdomain subtreeSumit Bose3-16/+32
2012-11-19Refactor the way subdomain accounts are savedSimo Sorce10-35/+167
2012-11-19Simplify writing db update functionsSimo Sorce1-421/+192
2012-11-19LDAP: Refactor saving ghost usersJakub Hrozek1-88/+99
2012-11-19LDAP: use the correct memory contextJakub Hrozek1-1/+1
2012-11-19LDAP: Fix saving empty groupsJakub Hrozek1-2/+4
2012-11-19LDAP: Allocate the temporary context on NULL, not memctxJakub Hrozek1-1/+1
2012-11-19SERVER: Check the return value of waitpidJakub Hrozek1-11/+27
2012-11-19Display more information on DB version mismatchOndrej Kos7-2/+70
2012-11-19SUDO: Fix wrong variable checkJakub Hrozek1-1/+1
2012-11-19LDAP: Remove double breakJakub Hrozek1-1/+0
2012-11-19SYSDB: Remove unused macrosJakub Hrozek1-15/+0
2012-11-18LDAP: Expire even non authenticated connectionsJakub Hrozek1-8/+11
2012-11-16Provide AM_COND_IF-combatible implementation for old automake systemsJakub Hrozek1-0/+15
2012-11-16fix -O3 variable may be uninitialized warningsPavel Březina2-6/+6
2012-11-16MAN: quotation fixOndrej Kos1-1/+1
2012-11-15sudo: store rules with no sudoHost attributePavel Březina1-0/+7
2012-11-15Add ignore_group_members option.Paul B. Henson9-18/+64
2012-11-15SUDO: Remove unused variableStephen Gallagher1-1/+0
2012-11-14sudo: print how many rules we are refreshing or returningPavel Březina1-3/+4
2012-11-14sudo: do not send domain name with usernamePavel Březina5-22/+11
2012-11-14sudo: support users from subdomainsPavel Březina4-60/+214
2012-11-14use tmp_ctx in sudosrv_get_sudorules_from_cache()Pavel Březina1-8/+20
2012-11-14sudo: fix missing parameter in two debug messagesPavel Březina1-3/+3
2012-11-14Run IPA subdomain provider if IPA ID provider is configuredSumit Bose4-7/+101
2012-11-14Always start PAC responder if IPA ID provider is configuredSumit Bose3-0/+84
2012-11-14Add string_in_list() and add_string_to_list() with testsSumit Bose3-0/+152
2012-11-13SYSDB: Do not touch the member attribute during conversion to ghost usersJakub Hrozek1-11/+0
2012-11-13TESTS: Fix a couple of debug-level settersJakub Hrozek3-3/+3
2012-11-12Include the auth_utils.h header in the distributionJakub Hrozek1-0/+1
2012-11-12Only build extract_and_send_pac on platforms that support itJakub Hrozek4-104/+138
2012-11-12KRB5: Rename variable to avoid shadowing a global declarationJakub Hrozek1-4/+4
2012-11-12backend: add PAC to the list of known clientsPavel Březina1-0/+2
2012-11-12subdomains: check request type on one place onlyPavel Březina1-6/+0
2012-11-12Do not always return PAM_SYSTEM_ERR when offline krb5 authentication failsJakub Hrozek3-18/+56
2012-11-10Store the original group DN in the subdomain user objectSumit Bose1-26/+58
2012-11-10Get lists of GIDs to be added and deleted and use themSumit Bose1-3/+89
2012-11-10Add pac_user_get_grp_info() to read current group membershipsSumit Bose2-0/+107