Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2011-12-16 | SUDO Integration - pseudo client for testing | Pavel Březina | 1 | -0/+15 | |
2011-12-16 | SUDO Integration - responder | Pavel Březina | 1 | -0/+17 | |
2011-12-16 | SUDO integration - LDAP provider | Pavel Březina | 1 | -1/+3 | |
2011-12-16 | SUDO Integration - LDAP provider - save sudo rules functions | Jakub Hrozek | 1 | -0/+4 | |
2011-12-16 | SUDO Integration - sysdb interface | Jakub Hrozek | 1 | -0/+4 | |
2011-12-16 | SUDO integration - client common interface | Pavel Březina | 1 | -0/+1 | |
2011-12-16 | sss_utf8_tolower utility function+unit tests | Jakub Hrozek | 1 | -1/+2 | |
2011-12-05 | Allow using Glib for UTF8 support | Stephen Gallagher | 1 | -7/+12 | |
2011-11-28 | Add -fno-strict-aliasing | Stephen Gallagher | 1 | -1/+2 | |
2011-11-23 | Fix broken build due to commit of IPA netgroup support | Stephen Gallagher | 1 | -0/+1 | |
2011-11-23 | Added IPA account info handler | Jan Zeleny | 1 | -0/+1 | |
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider. | |||||
2011-11-23 | Added support for fetching netgroups in IPA provider | Jan Zeleny | 1 | -0/+1 | |
2011-11-22 | Set more strict permissions on keyring | Simo Sorce | 1 | -0/+1 | |
We want to confine access to the keyring to the current process and not let root easily peek into the keyring contents. | |||||
2011-11-18 | RESPONDER: Ensure that all input strings are valid UTF-8 | Stephen Gallagher | 1 | -2/+4 | |
2011-10-14 | BUILDSYS: Fix --without-manpages | Stephen Gallagher | 1 | -1/+7 | |
We weren't honoring the --without-manpages option, and this was causing builds to break. Note: 'make dist[check]' will not work if you have configured with --without-manpages because it will not be able to pre-generate the translation files necessary for tarball release. | |||||
2011-10-07 | SYSDB: New source file for sysdb upgrade routines | Stephen Gallagher | 1 | -0/+1 | |
2011-09-08 | Improve documentation of libipa_hbac | Stephen Gallagher | 1 | -0/+1 | |
2011-09-06 | sss_debuglevel - change the debug levels on the fly | Pavel Březina | 1 | -1/+9 | |
https://fedorahosted.org/sssd/ticket/950 | |||||
2011-09-02 | Add option to specify the kerberos replay cache dir | Stephen Gallagher | 1 | -0/+4 | |
Adds a configure option to set the distribution default as well as an sssd.conf option to override it. https://fedorahosted.org/sssd/ticket/980 | |||||
2011-08-25 | New DEBUG facility - unit tests | Pavel Březina | 1 | -0/+11 | |
https://fedorahosted.org/sssd/ticket/925 | |||||
2011-08-15 | sdap_async_accounts.c split | Jan Zeleny | 1 | -2/+6 | |
The file has been split in three: sdap_async_users.c sdap_async_groups.c sdap_async_initgroups.c https://fedorahosted.org/sssd/ticket/864 | |||||
2011-08-08 | Rename sssd.conf to sssd-example.conf | Stephen Gallagher | 1 | -1/+1 | |
This file should not be installed by default. It leads to user confusion. We will instead install it as documentation. Fix incorrect example of entry_cache_nowait_percentage | |||||
2011-08-01 | Add rule validator to libipa_hbac | Stephen Gallagher | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/943 | |||||
2011-07-29 | libipa_hbac: Support case-insensitive comparisons with UTF8 | Stephen Gallagher | 1 | -1/+2 | |
2011-07-13 | Fix python HBAC bindings for python <= 2.4 | Jakub Hrozek | 1 | -1/+3 | |
Several parts of the HBAC python bindings did not work with old Python versions, such as the one shipped in RHEL5. The changes include: * a compatibility wrapper around python set object * PyModule_AddIntMacro compat macro * Py_ssize_t compat definition * Do not use PyUnicode_FromFormat * several function prototypes and structures used to have "char arguments where they have "const char *" in recent versions. This caused compilation warnings this patch mitigates by using the discard_const hack on python 2.4 | |||||
2011-07-08 | Provide python bindings for the HBAC evaluator library | Jakub Hrozek | 1 | -3/+18 | |
2011-07-08 | Add new HBAC lookup and evaluation routines | Stephen Gallagher | 1 | -1/+2 | |
2011-07-08 | Add helper functions for looking up HBAC rule components | Stephen Gallagher | 1 | -0/+6 | |
2011-07-08 | Add HBAC evaluator and tests | Stephen Gallagher | 1 | -1/+27 | |
2011-06-15 | Add missing libsss_util to proxy provider | Sumit Bose | 1 | -0/+1 | |
2011-05-23 | Build sssd utils as a libtool helper library | Stephen Gallagher | 1 | -88/+98 | |
This will speed up the build, as we are not recompiling the same sources multiple times for different binaries. These objects will now be built once and then statically linked in. | |||||
2011-05-23 | Build SSSD plugins without a version number | Stephen Gallagher | 1 | -5/+5 | |
The version is both fake and unused, so we'll stop creating the versioned file and use only the unversioned .so. This is safe to do for now because all of the plugins are built at the same time as the interface. | |||||
2011-05-06 | Add support for openldap24 package on RHEL 5.7 | Sumit Bose | 1 | -2/+3 | |
2011-05-04 | Cache cleaning tool | Jan Zeleny | 1 | -1/+9 | |
2011-04-12 | Provide a configuration option to use systemd unit file | Jakub Hrozek | 1 | -3/+12 | |
https://fedorahosted.org/sssd/ticket/837 | |||||
2011-02-11 | Make 'make check' look nice again | Sumit Bose | 1 | -3/+8 | |
With current libldb releases 'make check' will print a lot of 'unable to dlopen' messages although the test will succeed. This patch place the memberof module into a directory of its own to avoid these messages. Additionally this patch introduces TESTS_ENVIRONMENT which allows us to remove the SYSDB_TEST preprocessor definition. | |||||
2011-02-11 | Fix module registration with newer LDB libraries. | Stephen Gallagher | 1 | -0/+1 | |
2010-12-23 | Build and install translated man pages by default | Sumit Bose | 1 | -3/+0 | |
2010-12-22 | Make manual pages translatable | Jakub Hrozek | 1 | -37/+10 | |
Utilizes PO4A to extract translatable strings from Docbook XML sources and allows translators to submit ordinary .PO files. PO4A then generates translated Docbook documents that can be used to generate translated end user documentation. https://fedorahosted.org/sssd/ticket/297 | |||||
2010-12-20 | Serialize requests of the same user in the krb5 provider | Sumit Bose | 1 | -0/+2 | |
2010-12-08 | Bye, bye, ipa_timerules | Sumit Bose | 1 | -20/+0 | |
It was decided that IPA HBAC will move to a different format to specify time ranges in access control rules. The evaluation based on the old format is not needed anymore. | |||||
2010-12-07 | Add support for FAST in krb5 provider | Sumit Bose | 1 | -0/+1 | |
2010-12-06 | Make sure that sss_obfuscate installs as executable | Stephen Gallagher | 1 | -1/+1 | |
2010-12-03 | Add support for automatic Kerberos ticket renewal | Sumit Bose | 1 | -0/+2 | |
2010-12-03 | Add krb5_renewable_lifetime option | Sumit Bose | 1 | -0/+1 | |
2010-11-24 | Print correct error messages for dp_err_to_string() | Stephen Gallagher | 1 | -1/+2 | |
All errnum values passed into this function throughout the code are PAM error codes, but we were passing them through strerror() to print them, which is only meaningful for ERRNO error codes. This patch changes dp_err_to_string() to use pam_strerror() and renames it to dp_pam_err_to_string() for clarity. https://fedorahosted.org/sssd/ticket/636 | |||||
2010-11-15 | Sanitize search filters in memberOf plugin | Stephen Gallagher | 1 | -1/+3 | |
2010-11-04 | Make handle_child_* request public | Sumit Bose | 1 | -1/+3 | |
I took the opportunity to move everything related to the handling of the krb5_child into a separate file and cleaned the interfaces and related structures a bit. | |||||
2010-11-04 | Add infrastructure for Kerberos access provider | Sumit Bose | 1 | -1/+3 | |
2010-10-26 | Always use uint32_t for UID/GID numbers | Jakub Hrozek | 1 | -0/+1 | |