sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2009-11-06	Unify parse routines, use maps in generic searches	Simo Sorce	1	-121/+58
	This remove redundant code and also allows the generic search to be used to use maps to convert attributes.
2009-11-06	Make useful function more broadly available.	Simo Sorce	1	-0/+27

2009-11-03	Rename sdap_id_map to sdap_attr_map	Simo Sorce	1	-5/+5
	Also start adding some infrastructure to use the USN counter when available. In particular add a place to add generic attrs mapping, ie attributes that are neither user nor group specific.
2009-10-30	Fix segfault when SASL is not used at all	Simo Sorce	1	-0/+2

2009-10-29	Add support to get rootDSE from the LDAP server.	Simo Sorce	1	-3/+37
	Also fic sdap_get_generic_send() to be a bit more "generic" :-) Also figs bugs within it. This patch allow us 2 good things. A) we check that the server effectively supports GSSAPI auth before we try to use it. B) against IPA it substantially cuts delays when the server is offline because it uses a 5 second async timeout on the connection and doesn't try to do a slow synchronous kinit+sasl_bind if the server is not even available.
2009-10-22	added generic LDAP search sdap_get_generic_send/_recv	Sumit Bose	1	-0/+85

2009-10-14	Move ldap provider configuration into its own file	Simo Sorce	1	-183/+29

2009-10-14	Make options parser available to all providers	Simo Sorce	1	-204/+51

2009-10-13	add a replacement if ldap_control_create is missing	Sumit Bose	1	-1/+0

2009-10-09	Differentiate between search and network timeouts	Simo Sorce	1	-2/+3
	Network timeouts are used in quick operations like bind. Search timeout is used for operations that can "legally" require more time. Change defaults to 6 and 60 seconds respectively.
2009-10-01	Fix long timeout on ldap operation	Simo Sorce	1	-2/+2
	Always use the network timeout defined in the options. But raise defaults to 60 seconds or enumerations can easily fail.
2009-10-01	Initial implementation of sasl bind support	Simo Sorce	1	-1/+8
	Inits krb5 credentials, if sasl mech is GSSAPI. Tested with GSSAPI and host keytab as well as user credentials. Updates also manpages with the new options.
2009-09-25	add new config options ldap_tls_cacert and ldap_tls_cacertdir	Sumit Bose	1	-1/+59

2009-09-25	Upgrade confdb to version 2	Stephen Gallagher	1	-58/+58
	This converts a great many configuration options to the new standard format.
2009-09-23	Revert "Use syslog for logging error conditions in SSSD"	Stephen Gallagher	1	-33/+33
	This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
2009-09-21	Use syslog for logging error conditions in SSSD	Jakub Hrozek	1	-33/+33
	This is just a band-aid until ELAPI is fully functional and ready to use.
2009-09-14	Turn ldap driver options into multitype	Simo Sorce	1	-70/+184
	This patch makes basic options multiype, the init function assigns a type from the initialization array, and processes values fetched from confdb accordingly. 4 types are supported so far: string, number, blob and boolean Also convert defines into enums where appropriate. Add fetch functions that check the requested type.
2009-09-11	Complete the removal of "legacy" option.	Simo Sorce	1	-3/+3
	The code was still dependent on it for the ldap driver. Changed the driver code to depend on the schema type. Fix defaults for user and groups trees. ATM if you use the rfc2307bis schema you have to put users and groups in 2 separate trees (what people does by default anyway. If this limitation will turn to be too hard, we will change this later.
2009-08-27	Make enumeration an independent task	Simo Sorce	1	-6/+16
	Always immediately return to DP, and update users/groups in the background. Also implements an optimization to retrieve only changed/new users/groups by filtering using the modifyTimestamp after the first query.
2009-08-27	Initial support for multiple schema types	Simo Sorce	1	-7/+39

2009-08-24	some UPN handling fixes	Sumit Bose	1	-1/+7
	- making the realm part upper case is now optional and done in the LDAP backend - using a username@realm UPN is now optional
2009-08-19	enable usage of defaultBindDn	Sumit Bose	1	-0/+1

2009-07-10	fixed the default value for tls_reqcert	Sumit Bose	1	-1/+1

2009-07-08	Implement the ldap identity module.	Simo Sorce	1	-27/+42
	This uses and exapands the async helpers.
2009-07-08	Add async helper functions	Simo Sorce	1	-0/+367
	These functions use the tevent_req async model, where a pair of _send/_recv functions pilot requests, with additional helpers like _done functions, and where needed multiple stage helpers.