summaryrefslogtreecommitdiff
path: root/Makefile.am
AgeCommit message (Collapse)AuthorFilesLines
2012-07-10pac responder: limit access by checking UIDsSumit Bose1-1/+16
A check for allowed UIDs is added in the common responder code directly after accept(). If the platform does not support reading the UID of the peer but allowed UIDs are configured, access is denied. Currently only the PAC responder sets the allowed UIDs for a socket. The default is that only root is allowed to access the socket of the PAC responder. Fixes: https://fedorahosted.org/sssd/ticket/1382
2012-07-06AD: Add manpages and SSSDConfig entriesStephen Gallagher1-0/+1
2012-07-06AD: Add AD access-control providerStephen Gallagher1-0/+2
This patch adds support for checking whether a user is expired or disabled in AD.
2012-07-06AD: Add AD identity providerStephen Gallagher1-0/+42
This new identity provider takes advantage of existing code for the LDAP provider, but provides sensible defaults for operating against an Active Directory 2008 R2 or later server.
2012-07-06KRB5: Create a common init routine for krb5_child optionsStephen Gallagher1-1/+3
This will reduce code duplication between the krb5, ipa and ad providers
2012-06-29sudo ldap provider: load host filter configuration on initPavel Březina1-0/+1
We need to load host information during provider initialization. Currently it loads only values from configuration files, but it is implemented as an asynchrounous request as it will later try to autodetect these settings (which will need to contact DNS).
2012-06-29sudo ldap provider: add new timer APIPavel Březina1-0/+1
2012-06-29sudo provider: remove old timerPavel Březina1-2/+0
2012-06-29sudo ldap provider: move async routines to sdap_async_sudo.cPavel Březina1-0/+1
2012-06-29sudo responder: discard in-memory cachePavel Březina1-1/+0
2012-06-29libsss_sudo: bump version to 2:0:1Pavel Březina1-1/+1
2012-06-25Build pac responder tests only if pac responder is buildSumit Bose1-2/+6
2012-06-21Add support for ID rangesSumit Bose1-0/+1
2012-06-21PAC client: add krb5 authdata pluginSumit Bose1-0/+21
2012-06-21PAC responder: test suiteJan Zeleny1-1/+18
2012-06-21PAC responder: add some utility functionsJan Zeleny1-0/+1
2012-06-21PAC responder: add basic infrastructureSumit Bose1-0/+21
This adds only the basic outline of the PAC responder, it won't support any operations, it will just start and initialize itself.
2012-06-14Add a credential cache back end structureJakub Hrozek1-0/+3
To be able to add support for new credential cache types easily, this patch creates a new structure sss_krb5_cc_be that defines common operations with a credential cache, such as create, check if used or remove.
2012-06-14Add a krb5_child test toolJakub Hrozek1-0/+24
https://fedorahosted.org/sssd/ticket/1127
2012-06-13LDAP: Add support for AD chain matching extension in initgroupsStephen Gallagher1-0/+1
2012-06-13LDAP: Add support for AD chain matching extension in group lookupsStephen Gallagher1-0/+1
2012-05-31SSSDConfig: Make default config and schema file locations configurableStephen Gallagher1-5/+27
https://fedorahosted.org/sssd/ticket/1008
2012-05-31SSSDConfig: Make SSSDConfig a packageStephen Gallagher1-3/+3
We were polluting the primary Python space with several dependencies. We will now install them their own directory/module.
2012-05-14Fix libsss_hbac library versionSumit Bose1-1/+1
2012-05-14Rename struct dom_sid to struct sss_dom_sidSumit Bose1-1/+1
To avoid conflicts with struct dom_sid used by samba the sss_ prefix is added to the struct used by libsss_idmap.
2012-05-11build: resolve link failureJan Engelhardt1-0/+1
libtool: link: gcc -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Werror-implicit-function-declaration -fno-strict-aliasing -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -Wl,--version-script -Wl,./src/providers/sssd_be.exports -o sssd_be src/providers/data_provider_be.o src/providers/data_provider_fo.o src/providers/data_provider_opts.o src/providers/data_provider_callbacks.o src/providers/fail_over.o src/resolv/async_resolv.o -Wl,--export-dynamic -lpam -lcares ./.libs/libsss_util.a -ltevent -ltalloc -lpopt -lldb -ldbus-1 -lpcre -lini_config -lcollection -ldhash -llber -lldap -ltdb -lunistring -lcrypto /usr/lib64/gcc/x86_64-suse-linux/4.7/../../../../x86_64-suse-linux/bin/ld: src/providers/data_provider_be.o: undefined reference to symbol 'dlsym@@GLIBC_2.2.5' /usr/lib64/gcc/x86_64-suse-linux/4.7/../../../../x86_64-suse-linux/bin/ld: note: 'dlsym@@GLIBC_2.2.5' is defined in DSO /lib64/libdl.so.2 so try adding it to the linker command line /lib64/libdl.so.2: could not read symbols: Invalid operation collect2: error: ld returned 1 exit status make[2]: *** [sssd_be] Error 1 Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2012-05-10LDAP: Handle very large Active Directory groupsStephen Gallagher1-0/+2
Active Directory 2008R2 allows only 1500 group members to be retrieved in a single lookup. However, when we hit such a situation, we can take advantage of the ASQ lookups, which are not similarly limited. With this patch, we will add any members found by ASQ that were not found by the initial lookup so we will end with a complete group listing. https://fedorahosted.org/sssd/ticket/783
2012-05-03LDAP: Add helper routines for ID-mappingStephen Gallagher1-2/+6
2012-05-03SYSDB: Add sysdb routines for ID-mappingStephen Gallagher1-0/+1
2012-05-03SSH: Add dp_get_host_send to common responder codeJakub Hrozek1-0/+1
Instead of using account_info request, creates a new ssh specific request. This improves code readability and will make the code more flexible in the future. https://fedorahosted.org/sssd/ticket/1176
2012-05-01Allow different SID representations in libidmapSumit Bose1-2/+4
Besides as strings it is now possible to use binary SIDs or a struct containing all SID information. Functions to convert between these formats are added as well.
2012-04-24UTIL: Add HMAC-SHA-1 functionJan Cholasta1-0/+2
2012-04-24Add ID operations in subdomainsJan Zeleny1-0/+1
2012-04-24Add s2n extended operationSumit Bose1-0/+1
2012-04-24Moved expand_homedir_template() from NSS responder to utility codeJan Zeleny1-0/+2
2012-04-24IPA: Add get-domains targetSumit Bose1-0/+2
2012-04-24Responder part of the subdomain retrieval workJan Zeleny1-1/+2
2012-04-24Add some utility functions for subdomainsJan Zeleny1-1/+2
2012-04-24Sysdb routines for subdomainsJan Zeleny1-0/+1
2012-04-20Fix linker issue with pam_sssStephen Gallagher1-0/+1
2012-04-20Install and uninstall all documentationPavel Březina1-3/+19
Every directory listed in SSSD_DOCS in Makefile.am will be installed as documentation.
2012-04-20Convert read and write operations to sss_atomic_readJakub Hrozek1-1/+6
https://fedorahosted.org/sssd/ticket/1209
2012-04-20Move atomic io function to a separate moduleJakub Hrozek1-0/+2
We'll be using it on various places of the SSSD. The function is in its own file to allow using just the one piece without having to drag in the whole util.c module.
2012-03-28Put dp_option maps in their own fileStephen Gallagher1-0/+3
There is no functional change due to this patch.
2012-03-28BUILDSYS: Create common libs for LDAP and KRB5 sourcesStephen Gallagher1-64/+48
This will eliminate the need for automake to build these files for each backend that consumes LDAP and KRB5 functionality (currently 'ldap', 'krb5' and 'ipa'; soon to include 'ad')
2012-03-26Add idmap librarySumit Bose1-3/+24
2012-03-19sss_client: shared memory cache group map supportSimo Sorce1-0/+1
2012-03-19sss_client: shared memory cache passwd map supportSimo Sorce1-0/+1
2012-03-19sss_client: Add common shared memory cache utilsSimo Sorce1-1/+4
2012-03-19nsssrv: shared memory cache server initializationSimo Sorce1-0/+5
generated by cgit (git 2.34.1) at 2024-11-18 06:17:32 +0000