sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-02-05	Document when LDAP referral chasing is available	Sumit Bose	1	-0/+12

2010-02-02	Add new option ldap_referrals	Sumit Bose	1	-1/+2

2009-12-10	Consolidate code for splitting strings by separator	Jakub Hrozek	1	-3/+2
	There were two functions for parsing strings by a separator. This patch consolidates on the one previously used in confdb. This also allows stripping the tokens of whitespace. Fixes: #319
2009-12-07	Try to renew Kerberos credentials	Sumit Bose	1	-0/+139
	When using GSSAPI we need a valid service ticket to talk to the LDAP server. If the ticket is expired the LDAP client returns with 'Can't contact LDAP server'. Currently we set the backend offline if this error occurs although the server is still available. This patch checks if the TGT is expired and tries to renew the credentials before going offline.
2009-11-25	Get TGT in a child process.	Jakub Hrozek	1	-0/+3
	To avoid blocking in a synchronous call, the TGT is saved in a separate process Fixes: #277
2009-11-23	Add ldap_pwd_policy option	Sumit Bose	1	-1/+17

2009-11-20	Add initial failover support for ldap and ipa	Simo Sorce	1	-0/+108
	The retun values are still not directly used with ldap libraries that still do their own name resolution, but this patch introduces a very basic framework to have a multiple providers in one domain use and share a single failover service if they want to.
2009-11-20	Raise some timeouts	Simo Sorce	1	-2/+2
	When using high debug levels or valgrind the code maybe slow enough that these timeouts were too strict.
2009-11-10	Add cleanup task	Simo Sorce	1	-8/+12

2009-11-06	Reorganize ldap id provider files	Simo Sorce	1	-0/+41
	Split enum task in a separate file.
2009-11-03	Rename sdap_id_map to sdap_attr_map	Simo Sorce	1	-6/+34
	Also start adding some infrastructure to use the USN counter when available. In particular add a place to add generic attrs mapping, ie attributes that are neither user nor group specific.
2009-10-29	Tidy up ipa options	Simo Sorce	1	-2/+28
	Do not replicate every and each option we may want to set in ipa. Just read out ldap and krb provider options (added reference in the manual too, and removed mention of ipa specific timeout values, use ldap options for that) Avoid calling auth module initialization twice, just pass the auth context to the chpass module too. Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be used for both users and groups. the user and group search bases can still be set separately if necessary but they are now optional and set to be identical to SDAP_SEARCH_BASE if not explicitly specified in the configuration.
2009-10-27	Move responsibility for entry expiration timeout	Simo Sorce	1	-1/+1
	The providers are now responsible for determining how long a cached entry is considered valid. The default is the same as before (600s)
2009-10-27	Add proper support for IPA/AD schemas	Simo Sorce	1	-0/+10
	Nested groups weren't properly handled. Add 2 pass strategy to update groups memberships Stuff work as expected when enumeration is enabled now.
2009-10-16	Move all ldap provider init functions	Simo Sorce	1	-0/+6
	Put all init functions in their own file so that the other files can be reused in other providers w/o having them in the way.
2009-10-15	Check for expired passwords in LDAP provider	Sumit Bose	1	-2/+22

2009-10-14	Move ldap provider configuration into its own file	Simo Sorce	1	-0/+176