sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-597/+0
	Also update BUILD.txt
2010-02-16	Add test for number of options in IPA and LDAP backends	Jakub Hrozek	1	-5/+0

2010-02-16	Synchronize IPA and LDAP options	Jakub Hrozek	1	-2/+4

2010-02-12	Don't pass a variable as format to talloc_asprintf()	Martin Nagy	1	-1/+1
	This practice is not recommended and can also be dangerous.
2009-12-10	Consolidate code for splitting strings by separator	Jakub Hrozek	1	-3/+2
	There were two functions for parsing strings by a separator. This patch consolidates on the one previously used in confdb. This also allows stripping the tokens of whitespace. Fixes: #319
2009-11-25	In IPA, the realm is always the domain uppercased.	Simo Sorce	1	-2/+7

2009-11-25	Fix internal options numbers test	Simo Sorce	1	-12/+24
	Unfortunately since we changed the defines to an enum the preprocessor test stopped working. Turn tests into runtime tests that will abort the process.
2009-11-23	Read KDC info from file instead from environment	Sumit Bose	1	-9/+21
	Then name or IP adress of the KDC is written into the pubconf directory into a file named kdcinfo.REALM. The locator plugin will then read this file and pass the data to the kerberos libraries.
2009-11-20	Add initial failover support for ldap and ipa	Simo Sorce	1	-34/+131
	The retun values are still not directly used with ldap libraries that still do their own name resolution, but this patch introduces a very basic framework to have a multiple providers in one domain use and share a single failover service if they want to.
2009-11-20	Validate Kerberos credentials with local keytab	Sumit Bose	1	-0/+2

2009-11-13	Fix option name krb5_changepw_principal	Sumit Bose	1	-1/+1

2009-11-12	Fix inconsistent use of krb5_ccname_template	Sumit Bose	1	-1/+1

2009-11-10	Add cleanup task	Simo Sorce	1	-1/+2

2009-11-03	Rename sdap_id_map to sdap_attr_map	Simo Sorce	1	-2/+15
	Also start adding some infrastructure to use the USN counter when available. In particular add a place to add generic attrs mapping, ie attributes that are neither user nor group specific.
2009-11-02	set ipa_hostname if not given in config file	Sumit Bose	1	-0/+20

2009-10-29	Tidy up ipa options	Simo Sorce	1	-129/+141
	Do not replicate every and each option we may want to set in ipa. Just read out ldap and krb provider options (added reference in the manual too, and removed mention of ipa specific timeout values, use ldap options for that) Avoid calling auth module initialization twice, just pass the auth context to the chpass module too. Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be used for both users and groups. the user and group search bases can still be set separately if necessary but they are now optional and set to be identical to SDAP_SEARCH_BASE if not explicitly specified in the configuration.
2009-10-27	Move responsibility for entry expiration timeout	Simo Sorce	1	-4/+4
	The providers are now responsible for determining how long a cached entry is considered valid. The default is the same as before (600s)
2009-10-26	Copy option overrides.	Simo Sorce	1	-0/+26
	We were not copying IPA named options to the ldap id options list. So the ldap_id provider was always using just the default settings.
2009-10-22	Fix setting the schema in the ipa provider	Simo Sorce	1	-0/+3

2009-10-22	update ipa auth options to new option scheme	Sumit Bose	1	-0/+79

2009-10-20	Start implementing ipa specific options.	Simo Sorce	1	-0/+319
	First step generate ldap options from ipa options. Add sssd-ipa man page too.