summaryrefslogtreecommitdiff
path: root/server/providers/ipa
AgeCommit message (Collapse)AuthorFilesLines
2009-11-12Fix inconsistent use of krb5_ccname_templateSumit Bose1-1/+1
2009-11-12Add support for host, source host and user categorySumit Bose1-8/+54
This patch add support for the host, source host and user category 'all'. All other category values are ignored so far. With the patch the interpretation of an empty memberUser and empty sourceHost and externalHost is changed to 'not applicable'.
2009-11-10Add cleanup taskSimo Sorce1-1/+2
2009-11-10Add check for access-time rules to ipa_access.Sumit Bose3-0/+73
2009-11-09Fix tevent_req error checking.Simo Sorce1-18/+3
When possible using a macro that correctly deals with tstate
2009-11-09IPA time rules parsing routinesJakub Hrozek2-0/+1242
2009-11-07Fix buildSimo Sorce1-4/+8
2009-11-07added access module of IPA providerSumit Bose3-2/+1681
2009-11-03Rename sdap_id_map to sdap_attr_mapSimo Sorce1-2/+15
Also start adding some infrastructure to use the USN counter when available. In particular add a place to add generic attrs mapping, ie attributes that are neither user nor group specific.
2009-11-02set ipa_hostname if not given in config fileSumit Bose1-0/+20
2009-10-29Tidy up ipa optionsSimo Sorce3-149/+169
Do not replicate every and each option we may want to set in ipa. Just read out ldap and krb provider options (added reference in the manual too, and removed mention of ipa specific timeout values, use ldap options for that) Avoid calling auth module initialization twice, just pass the auth context to the chpass module too. Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be used for both users and groups. the user and group search bases can still be set separately if necessary but they are now optional and set to be identical to SDAP_SEARCH_BASE if not explicitly specified in the configuration.
2009-10-27Move responsibility for entry expiration timeoutSimo Sorce2-5/+5
The providers are now responsible for determining how long a cached entry is considered valid. The default is the same as before (600s)
2009-10-26Copy option overrides.Simo Sorce1-0/+26
We were not copying IPA named options to the ldap id options list. So the ldap_id provider was always using just the default settings.
2009-10-22Fix setting the schema in the ipa providerSimo Sorce1-0/+3
2009-10-22update ipa auth options to new option schemeSumit Bose3-110/+133
2009-10-20Start implementing ipa specific options.Simo Sorce3-5/+398
First step generate ldap options from ipa options. Add sssd-ipa man page too.
2009-10-16Add first basic IPA providerSimo Sorce1-0/+233