summaryrefslogtreecommitdiff
path: root/server/providers/krb5
AgeCommit message (Expand)AuthorFilesLines
2010-01-05Return an error for an unknown PAM requestSumit Bose1-6/+18
2009-12-18Do not blindly accept zero-length passwordsStephen Gallagher2-8/+17
2009-12-18Fix ldap child memory hierarchy and other issuesSimo Sorce2-63/+97
2009-12-18Fix for #344Sumit Bose1-13/+11
2009-12-18Do not overwrite valid TGTs when offlineSumit Bose2-42/+88
2009-12-18Handle chauthtok with PAM_PRELIM_CHECK separatelySumit Bose2-13/+37
2009-12-15Don't consider one address with different port numbers as the sameMartin Nagy1-1/+3
2009-12-10Consolidate code for splitting strings by separatorJakub Hrozek1-5/+3
2009-12-09Reduce code duplication between LDAP child and Kerberos childJakub Hrozek1-116/+7
2009-12-08Add dummy credentials to an empty ccache fileSumit Bose1-2/+54
2009-12-01Immediately return a krb5 change password request when offlineSumit Bose1-0/+7
2009-11-25Remove unneeded debugging codeSumit Bose1-9/+0
2009-11-25Fix an internal error when cache_credentials=FALSESumit Bose1-1/+4
2009-11-25Split helpers for child processesJakub Hrozek4-173/+4
2009-11-23Read KDC info from file instead from environmentSumit Bose5-30/+323
2009-11-20Add initial failover support for ldap and ipaSimo Sorce3-2/+9
2009-11-20Add ipa_authSumit Bose1-0/+3
2009-11-20Improve handling of ccache filesSumit Bose3-202/+597
2009-11-20Validate Kerberos credentials with local keytabSumit Bose6-39/+250
2009-11-13Fix option name krb5_changepw_principalSumit Bose1-1/+1
2009-11-12Fix inconsistent use of krb5_ccname_templateSumit Bose1-1/+1
2009-11-10Simplify krb5 child handlerSumit Bose1-17/+18
2009-11-09Fix tevent_req error checking.Simo Sorce1-23/+20
2009-11-06Check is ccache structure is initialized before calling krb5_cc_destroySumit Bose1-8/+16
2009-11-05add replacements for missing Kerberos callsSumit Bose3-38/+9
2009-10-22update krb5 option handling to new option schemeSumit Bose7-125/+273
2009-10-16Move all krb5 provider init functionsSimo Sorce4-193/+261
2009-10-15enable debugging of krb5_childSumit Bose3-4/+142
2009-10-15Return the dp error from the providersSimo Sorce1-16/+30
2009-10-12fix a wrong argument to unpack_bufferSumit Bose1-18/+40
2009-10-09use the correct kerberos context for each targetSumit Bose1-4/+33
2009-10-05handle expired password during authenticationSumit Bose1-2/+25
2009-09-25remove krb5_try_simple_upn option and make it a default fallbackSumit Bose2-9/+1
2009-09-25fix possible short reads in kerberos providerSumit Bose2-15/+46
2009-09-25Upgrade confdb to version 2Stephen Gallagher1-7/+10
2009-09-24added support for older MIT kerberos versionssbose3-7/+37
2009-09-23Revert "Use syslog for logging error conditions in SSSD"Stephen Gallagher1-2/+2
2009-09-21Use syslog for logging error conditions in SSSDJakub Hrozek1-2/+2
2009-09-14added child timeout handlerSumit Bose2-6/+90
2009-09-14fix the wrong usage of an offsetSumit Bose1-1/+1
2009-09-14add krb5ccache_dir and krb5ccname_template optionSumit Bose5-50/+356
2009-09-14Make the offline status backend-globalSimo Sorce1-4/+13
2009-09-11use fork+exec for kerberos helperSumit Bose3-193/+463
2009-09-11add change password target to krb5 backendSumit Bose4-207/+447
2009-08-28send SSSD_REALM and SSSD_KDCIP environment to the clientSumit Bose1-2/+31
2009-08-24some UPN handling fixesSumit Bose2-23/+12
2009-08-21use stored upn if availableSumit Bose1-20/+101
2009-08-11Make socket paths a compile-time optionStephen Gallagher1-1/+0
2009-08-05Consolidate tevent helpersJakub Hrozek1-16/+0
2009-07-20add infrastructure to handle new backend targetsSumit Bose1-4/+5