summaryrefslogtreecommitdiff
path: root/server/providers/ldap/ldap_id.c
AgeCommit message (Collapse)AuthorFilesLines
2009-10-14make sdap_id_connect_* independent of sdap_id_ctxSumit Bose1-180/+10
The sdap_id_connect_* request tries to bind to an LDAP server with the default credentials. Only the opts component of the sdap_id_ctx context is used. A new request sdap_cli_connect_* is created which expects only the opts pointer as parameter and not the whole context. This makes it reusable by other providers.
2009-10-01Initial implementation of sasl bind supportSimo Sorce1-52/+80
Inits krb5 credentials, if sasl mech is GSSAPI. Tested with GSSAPI and host keytab as well as user credentials. Updates also manpages with the new options.
2009-09-25add new config options ldap_tls_cacert and ldap_tls_cacertdirSumit Bose1-33/+5
2009-09-23Fix copy&paste of wrong structureSimo Sorce1-2/+2
2009-09-23Revert "Use syslog for logging error conditions in SSSD"Stephen Gallagher1-2/+2
This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
2009-09-21Use syslog for logging error conditions in SSSDJakub Hrozek1-2/+2
This is just a band-aid until ELAPI is fully functional and ready to use.
2009-09-14Turn ldap driver options into multitypeSimo Sorce1-30/+50
This patch makes basic options multiype, the init function assigns a type from the initialization array, and processes values fetched from confdb accordingly. 4 types are supported so far: string, number, blob and boolean Also convert defines into enums where appropriate. Add fetch functions that check the requested type.
2009-09-14Make the offline status backend-globalSimo Sorce1-48/+7
Add helpers functions to query/set the offline status per backend. Now all providers share the same offline status.
2009-09-11Fix ldap enumeration async taskSimo Sorce1-12/+16
The request was being freed, instead of marking it done and let the callback free it when done. This was causing us to access freed memory, when trying to set the next run. Let the callback add new runs and free the request instead as normally we would do with any other tevent_req async call. Courtesy of valgrind again.
2009-09-10Fix Ldap id backend offline codeSimo Sorce1-6/+64
After the recent changes we lost the capability to actually go offline. Put back code that would mark the backend as offline when timeouts happen. Make sure the enumeration code also obbeys the offline timeout, and contributes in determining if we are offline or not.
2009-09-02Honor enumerate option in ldap_idSimo Sorce1-6/+9
If enumerations are disabled for this domain, then do not start the enumeration task.
2009-08-27Make enumeration an independent taskSimo Sorce1-42/+533
Always immediately return to DP, and update users/groups in the background. Also implements an optimization to retrieve only changed/new users/groups by filtering using the modifyTimestamp after the first query.
2009-08-27Use the correct structure.Simo Sorce1-2/+2
2009-08-19enable usage of defaultBindDnSumit Bose1-8/+27
2009-07-20Rework the engine that deals with openldap librariesSimo Sorce1-14/+13
The way openldap libraries work, require to have a single engine per connection as all replies are read at the same time. So we need to always read anything that comes in from the wire and then loop to dispatch results to the requests that are waiting.
2009-07-20add infrastructure to handle new backend targetsSumit Bose1-5/+5
2009-07-08Implement the ldap identity module.Simo Sorce1-646/+679
This uses and exapands the async helpers.
2009-05-18Split ldap backend into auth and identity filesSimo Sorce1-0/+786