Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-11-06 | Check is ccache structure is initialized before calling krb5_cc_destroy | Sumit Bose | 1 | -8/+16 | |
2009-11-05 | add replacements for missing Kerberos calls | Sumit Bose | 3 | -38/+9 | |
2009-10-22 | update krb5 option handling to new option scheme | Sumit Bose | 7 | -125/+273 | |
2009-10-16 | Move all krb5 provider init functions | Simo Sorce | 4 | -193/+261 | |
Put all init functions in their own file so that the other files can be reused in other providers w/o having them in the way. | |||||
2009-10-15 | enable debugging of krb5_child | Sumit Bose | 3 | -4/+142 | |
2009-10-15 | Return the dp error from the providers | Simo Sorce | 1 | -16/+30 | |
2009-10-12 | fix a wrong argument to unpack_buffer | Sumit Bose | 1 | -18/+40 | |
- the patch to handle short read introduced a new variable len to store the amount of data read. Instead of using this variable unpack_buffer was called with the old variable ret. Thanks to mnagy@redhat.com for finding this. - this patch also fixes a potential error when the message size is equal to the buffer size. | |||||
2009-10-09 | use the correct kerberos context for each target | Sumit Bose | 1 | -4/+33 | |
- when the kerberos provider was used as a chpass_provider but not as auth_provider the backend died | |||||
2009-10-05 | handle expired password during authentication | Sumit Bose | 1 | -2/+25 | |
2009-09-25 | remove krb5_try_simple_upn option and make it a default fallback | Sumit Bose | 2 | -9/+1 | |
2009-09-25 | fix possible short reads in kerberos provider | Sumit Bose | 2 | -15/+46 | |
2009-09-25 | Upgrade confdb to version 2 | Stephen Gallagher | 1 | -7/+10 | |
This converts a great many configuration options to the new standard format. | |||||
2009-09-24 | added support for older MIT kerberos versions | sbose | 3 | -7/+37 | |
- make the build of the locator plugin optional - added a man page for the locator plugin - use krb5.h if krb5/krb5.h cannot be found - added alternatives for missing functions - set -DDBUS_API_SUBJECT_TO_CHANGE if libdbus version is lesser than 1.0.0 | |||||
2009-09-23 | Revert "Use syslog for logging error conditions in SSSD" | Stephen Gallagher | 1 | -2/+2 | |
This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted. | |||||
2009-09-21 | Use syslog for logging error conditions in SSSD | Jakub Hrozek | 1 | -2/+2 | |
This is just a band-aid until ELAPI is fully functional and ready to use. | |||||
2009-09-14 | added child timeout handler | Sumit Bose | 2 | -6/+90 | |
2009-09-14 | fix the wrong usage of an offset | Sumit Bose | 1 | -1/+1 | |
2009-09-14 | add krb5ccache_dir and krb5ccname_template option | Sumit Bose | 5 | -50/+356 | |
The configuration options krb5ccache_dir and krb5ccname_template are added to the Kerberos provider to create the user's credential caches the same way as pam_krb5 does. Due to the design of the sssd and the supported ccache types of MIT Kerberos only files are allowed. | |||||
2009-09-14 | Make the offline status backend-global | Simo Sorce | 1 | -4/+13 | |
Add helpers functions to query/set the offline status per backend. Now all providers share the same offline status. | |||||
2009-09-11 | use fork+exec for kerberos helper | Sumit Bose | 3 | -193/+463 | |
2009-09-11 | add change password target to krb5 backend | Sumit Bose | 4 | -207/+447 | |
2009-08-28 | send SSSD_REALM and SSSD_KDCIP environment to the client | Sumit Bose | 1 | -2/+31 | |
Currently the kerberos locator plugin needs these two variables to be set to find a KDC which is configured in sssd but not in /etc/krb5.conf. | |||||
2009-08-24 | some UPN handling fixes | Sumit Bose | 2 | -23/+12 | |
- making the realm part upper case is now optional and done in the LDAP backend - using a username@realm UPN is now optional | |||||
2009-08-21 | use stored upn if available | Sumit Bose | 1 | -20/+101 | |
If a user principle name (upn) can be found in sysdb the krb5 backend will use this otherwise is build as username@realm. It is checked that the realm is upper case only. | |||||
2009-08-11 | Make socket paths a compile-time option | Stephen Gallagher | 1 | -1/+0 | |
Previously, we had hardcoded the paths for the NSS, PAM and private PAM sockets to /var/lib/sss/pipes. With this patch, we will specify the sockets with --with-pipe-path. | |||||
2009-08-05 | Consolidate tevent helpers | Jakub Hrozek | 1 | -16/+0 | |
2009-07-20 | add infrastructure to handle new backend targets | Sumit Bose | 1 | -4/+5 | |
2009-07-10 | let krb5 backend safe valid credentials for offline authentication | Sumit Bose | 1 | -0/+43 | |
2009-07-08 | fix return code of krb5 child to indicate that the kdc is unavailable | Sumit Bose | 1 | -1/+5 | |
2009-07-03 | Cleanup warnings in client and server code | Simo Sorce | 1 | -3/+0 | |
2009-07-02 | added kerberos backend with tevent_req event handling | Sumit Bose | 3 | -0/+837 | |