sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2009-12-10	Remove default for ldap_use_start_tls in IPA providers	Stephen Gallagher	1	-1/+1

2009-12-10	Add 'permit' and 'deny' access providers to SSSDConfig API	Stephen Gallagher	1	-0/+9

2009-12-09	Add missing options to sssd-ipa configuraion	Stephen Gallagher	1	-0/+72

2009-11-23	Add ldap_pwd_policy option	Sumit Bose	1	-0/+1

2009-11-20	Validate Kerberos credentials with local keytab	Sumit Bose	1	-1/+3

2009-11-20	Convert SSSDConfig API to ipachangeconf	Jakub Hrozek	1	-1/+2
	With this patch, SSSDConfigAPI is able to keep comments and ordering of sections. Fixes: #226
2009-11-18	Make the password field configurable in NSS	Jakub Hrozek	1	-0/+1
	Per the discussion on sssd-devel list, nss_sss should not return a hardcoded value but this should rather be configurable to allow whatever the OS or distribution thinks is the best for the particular case. Fixes: #266
2009-11-10	Add cleanup task	Simo Sorce	1	-0/+1

2009-11-05	Update midpoint refresh logic to be relative to cache timeout	Stephen Gallagher	1	-1/+1

2009-11-03	Rename sdap_id_map to sdap_attr_map	Simo Sorce	1	-0/+2
	Also start adding some infrastructure to use the USN counter when available. In particular add a place to add generic attrs mapping, ie attributes that are neither user nor group specific.
2009-11-03	Remove magic_private_groups from SSSDConfig API schema	Stephen Gallagher	1	-1/+0

2009-11-03	Make config_file_version a hidden setting in SSSDConfig API	Stephen Gallagher	1	-1/+0
	The config_file_version should never be changed by the API, so we will hide the option inside the SSSDConfig API and remove it from the schema. Guarantee that the config file is of the correct version
2009-10-29	Tidy up ipa options	Simo Sorce	2	-5/+1
	Do not replicate every and each option we may want to set in ipa. Just read out ldap and krb provider options (added reference in the manual too, and removed mention of ipa specific timeout values, use ldap options for that) Avoid calling auth module initialization twice, just pass the auth context to the chpass module too. Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be used for both users and groups. the user and group search bases can still be set separately if necessary but they are now optional and set to be identical to SDAP_SEARCH_BASE if not explicitly specified in the configuration.
2009-10-28	Fix sssd.api.conf with correct entry_cache_timeout	Stephen Gallagher	1	-2/+3
	Changeset 3a21103f61bf9b60256cc2d0da54b757b634319f moved the wrong option to the domain list, and also didn't update the unit tests.
2009-10-27	Move responsibility for entry expiration timeout	Simo Sorce	2	-2/+1
	The providers are now responsible for determining how long a cached entry is considered valid. The default is the same as before (600s)
2009-10-26	Add IPA conf template	Simo Sorce	1	-0/+9

2009-10-22	Add support for offline auth cache timeout	Stephen Gallagher	1	-0/+1
	This adds a new option (offline_credentials_expiration) to the [PAM] section of the sssd.conf If the user does not perform an online authentication within the timeout (in days), they will be denied auth once the timeout passes.
2009-10-22	Bring SSSDConfig API options up-to-date	Stephen Gallagher	2	-12/+48

2009-10-13	Add plugin configuration schema for proxy provider	Stephen Gallagher	1	-0/+7

2009-10-12	Add new SSSDConfig python API	Stephen Gallagher	4	-0/+104
	Also adds unit tests for the SSSDConfig API