sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2012-01-27	SYSDB: Add sysdb routines for manipulating service entries	Stephen Gallagher	1	-0/+2

2012-01-18	SUDO: include the sources in the IPA provider, too	Jakub Hrozek	1	-0/+6

2012-01-17	Add a new Makefile target to build RPMs with the experimental flag	Jakub Hrozek	1	-4/+16

2012-01-17	Export libsss_sudo as a separate package	Jakub Hrozek	1	-7/+29

2012-01-17	SUDO Integration - periodical update of rules in data provider	Pavel Březina	1	-0/+2
	https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period)
2012-01-09	util: add murmurhash3 hash function	Simo Sorce	1	-1/+3

2011-12-20	PAM: make initgroups timeout work across multiple clients	Stephen Gallagher	1	-0/+2
	Instead of timing out the initgroups lookup on a per-cctx basis, we will maintain a hash table of recently-seen users and use this instead. This will allow SSSD to handle user's logging into multiple services simultaneously more graciously, as well as playing nicer with SSH (which makes calls to PAM both before and after a fork). https://fedorahosted.org/sssd/ticket/1063
2011-12-19	Move child_common routines to util	Stephen Gallagher	1	-7/+7

2011-12-19	Add common SIGCHLD handling for providers.	Pavel Zuna	1	-2/+9

2011-12-16	SUDO Integration - pseudo client for testing	Pavel Březina	1	-0/+15

2011-12-16	SUDO Integration - responder	Pavel Březina	1	-0/+17

2011-12-16	SUDO integration - LDAP provider	Pavel Březina	1	-1/+3

2011-12-16	SUDO Integration - LDAP provider - save sudo rules functions	Jakub Hrozek	1	-0/+4

2011-12-16	SUDO Integration - sysdb interface	Jakub Hrozek	1	-0/+4

2011-12-16	SUDO integration - client common interface	Pavel Březina	1	-0/+1

2011-12-16	sss_utf8_tolower utility function+unit tests	Jakub Hrozek	1	-1/+2

2011-12-05	Allow using Glib for UTF8 support	Stephen Gallagher	1	-7/+12

2011-11-28	Add -fno-strict-aliasing	Stephen Gallagher	1	-1/+2

2011-11-23	Fix broken build due to commit of IPA netgroup support	Stephen Gallagher	1	-0/+1

2011-11-23	Added IPA account info handler	Jan Zeleny	1	-0/+1
	Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider.
2011-11-23	Added support for fetching netgroups in IPA provider	Jan Zeleny	1	-0/+1

2011-11-22	Set more strict permissions on keyring	Simo Sorce	1	-0/+1
	We want to confine access to the keyring to the current process and not let root easily peek into the keyring contents.
2011-11-18	RESPONDER: Ensure that all input strings are valid UTF-8	Stephen Gallagher	1	-2/+4

2011-10-14	BUILDSYS: Fix --without-manpages	Stephen Gallagher	1	-1/+7
	We weren't honoring the --without-manpages option, and this was causing builds to break. Note: 'make dist[check]' will not work if you have configured with --without-manpages because it will not be able to pre-generate the translation files necessary for tarball release.
2011-10-07	SYSDB: New source file for sysdb upgrade routines	Stephen Gallagher	1	-0/+1

2011-09-08	Improve documentation of libipa_hbac	Stephen Gallagher	1	-0/+1

2011-09-06	sss_debuglevel - change the debug levels on the fly	Pavel Březina	1	-1/+9
	https://fedorahosted.org/sssd/ticket/950
2011-09-02	Add option to specify the kerberos replay cache dir	Stephen Gallagher	1	-0/+4
	Adds a configure option to set the distribution default as well as an sssd.conf option to override it. https://fedorahosted.org/sssd/ticket/980
2011-08-25	New DEBUG facility - unit tests	Pavel Březina	1	-0/+11
	https://fedorahosted.org/sssd/ticket/925
2011-08-15	sdap_async_accounts.c split	Jan Zeleny	1	-2/+6
	The file has been split in three: sdap_async_users.c sdap_async_groups.c sdap_async_initgroups.c https://fedorahosted.org/sssd/ticket/864
2011-08-08	Rename sssd.conf to sssd-example.conf	Stephen Gallagher	1	-1/+1
	This file should not be installed by default. It leads to user confusion. We will instead install it as documentation. Fix incorrect example of entry_cache_nowait_percentage
2011-08-01	Add rule validator to libipa_hbac	Stephen Gallagher	1	-1/+1
	https://fedorahosted.org/sssd/ticket/943
2011-07-29	libipa_hbac: Support case-insensitive comparisons with UTF8	Stephen Gallagher	1	-1/+2

2011-07-13	Fix python HBAC bindings for python <= 2.4	Jakub Hrozek	1	-1/+3
	Several parts of the HBAC python bindings did not work with old Python versions, such as the one shipped in RHEL5. The changes include: * a compatibility wrapper around python set object * PyModule_AddIntMacro compat macro * Py_ssize_t compat definition * Do not use PyUnicode_FromFormat * several function prototypes and structures used to have "char arguments where they have "const char *" in recent versions. This caused compilation warnings this patch mitigates by using the discard_const hack on python 2.4
2011-07-08	Provide python bindings for the HBAC evaluator library	Jakub Hrozek	1	-3/+18

2011-07-08	Add new HBAC lookup and evaluation routines	Stephen Gallagher	1	-1/+2

2011-07-08	Add helper functions for looking up HBAC rule components	Stephen Gallagher	1	-0/+6

2011-07-08	Add HBAC evaluator and tests	Stephen Gallagher	1	-1/+27

2011-06-15	Add missing libsss_util to proxy provider	Sumit Bose	1	-0/+1

2011-05-23	Build sssd utils as a libtool helper library	Stephen Gallagher	1	-88/+98
	This will speed up the build, as we are not recompiling the same sources multiple times for different binaries. These objects will now be built once and then statically linked in.
2011-05-23	Build SSSD plugins without a version number	Stephen Gallagher	1	-5/+5
	The version is both fake and unused, so we'll stop creating the versioned file and use only the unversioned .so. This is safe to do for now because all of the plugins are built at the same time as the interface.
2011-05-06	Add support for openldap24 package on RHEL 5.7	Sumit Bose	1	-2/+3

2011-05-04	Cache cleaning tool	Jan Zeleny	1	-1/+9

2011-04-12	Provide a configuration option to use systemd unit file	Jakub Hrozek	1	-3/+12
	https://fedorahosted.org/sssd/ticket/837
2011-02-11	Make 'make check' look nice again	Sumit Bose	1	-3/+8
	With current libldb releases 'make check' will print a lot of 'unable to dlopen' messages although the test will succeed. This patch place the memberof module into a directory of its own to avoid these messages. Additionally this patch introduces TESTS_ENVIRONMENT which allows us to remove the SYSDB_TEST preprocessor definition.
2011-02-11	Fix module registration with newer LDB libraries.	Stephen Gallagher	1	-0/+1

2010-12-23	Build and install translated man pages by default	Sumit Bose	1	-3/+0

2010-12-22	Make manual pages translatable	Jakub Hrozek	1	-37/+10
	Utilizes PO4A to extract translatable strings from Docbook XML sources and allows translators to submit ordinary .PO files. PO4A then generates translated Docbook documents that can be used to generate translated end user documentation. https://fedorahosted.org/sssd/ticket/297
2010-12-20	Serialize requests of the same user in the krb5 provider	Sumit Bose	1	-0/+2

2010-12-08	Bye, bye, ipa_timerules	Sumit Bose	1	-20/+0
	It was decided that IPA HBAC will move to a different format to specify time ranges in access control rules. The evaluation based on the old format is not needed anymore.