summaryrefslogtreecommitdiff
path: root/server/providers/ldap/ldap_auth.c
AgeCommit message (Collapse)AuthorFilesLines
2009-10-16Always list inputs before outputsSimo Sorce1-8/+11
2009-10-16Move all ldap provider init functionsSimo Sorce1-69/+2
Put all init functions in their own file so that the other files can be reused in other providers w/o having them in the way.
2009-10-15Check for expired passwords in LDAP providerSumit Bose1-20/+351
2009-10-15Return the dp error from the providersSimo Sorce1-14/+25
2009-10-14Move ldap provider configuration into its own fileSimo Sorce1-1/+2
2009-10-14Make options parser available to all providersSimo Sorce1-7/+8
2009-10-08add support for server side LDAP password policiesSumit Bose1-0/+4
- password policy request controls are send during bind and change password extended operation - the response control is evaluated to see if the password is expired or will expire, soon
2009-10-01Initial implementation of sasl bind supportSimo Sorce1-1/+2
Inits krb5 credentials, if sasl mech is GSSAPI. Tested with GSSAPI and host keytab as well as user credentials. Updates also manpages with the new options.
2009-09-25add new config options ldap_tls_cacert and ldap_tls_cacertdirSumit Bose1-33/+4
2009-09-14Turn ldap driver options into multitypeSimo Sorce1-19/+29
This patch makes basic options multiype, the init function assigns a type from the initialization array, and processes values fetched from confdb accordingly. 4 types are supported so far: string, number, blob and boolean Also convert defines into enums where appropriate. Add fetch functions that check the requested type.
2009-09-14Make the offline status backend-globalSimo Sorce1-7/+22
Add helpers functions to query/set the offline status per backend. Now all providers share the same offline status.
2009-08-19enable usage of defaultBindDnSumit Bose1-1/+1
2009-07-21added LDAP change password backend targetSumit Bose1-2/+159
2009-07-20add infrastructure to handle new backend targetsSumit Bose1-4/+5
2009-07-08Unify password caching ops in sysdbSimo Sorce1-26/+22
2009-07-08Use async helpers for ldap auth moduleSimo Sorce1-722/+314
This changes the style quite a lot, but the tevent_req style is much more clear and much less error-prone than the giant loop we had previously.
2009-07-03Rework transaction code to use tevent_reqSimo Sorce1-21/+65
This is part of a set of patches to rewrite sysdb to a hopefully better API, that will also let use use tevent_req async style calls to manipulate our cache.
2009-07-03Rename sysdb_req to sysdb_handle.Simo Sorce1-5/+5
This sysdb_req has always really been a transaction handle and not a request. This is part of a set of patches to rewrite transaction support in sysdb to a hopefully better API, that will also let use use tevent_req async style to manipulate our cache.
2009-06-11Remove extra implementation of password_destructorStephen Gallagher1-11/+0
2009-06-02added tls_reqcert option for native LDAP backendSumit Bose1-0/+32
In order to allow to access LDAP servers which do not provide SSL/TLS encryption the option tls_reqcert is added to the native LDAP backend. It accepts the same arguments as the corresponding OpenLDAP option documented in ldap.conf(5) and should preform accordingly.
2009-05-26Silence warningsSimo Sorce1-2/+3
2009-05-19call tevent_add_fd only onceSumit Bose1-27/+11
2009-05-18Move actual password caching into sysdbSimo Sorce1-6/+117
Convert auth modules to do the caching themselves
2009-05-18Split ldap backend into auth and identity filesSimo Sorce1-19/+12
2009-05-18Move ldap_be.c into ldap/ldap_auth.cSimo Sorce1-0/+773