sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2009-11-25	Get TGT in a child process.	Jakub Hrozek	1	-0/+1
	To avoid blocking in a synchronous call, the TGT is saved in a separate process Fixes: #277
2009-11-20	Add initial failover support for ldap and ipa	Simo Sorce	1	-1/+6
	The retun values are still not directly used with ldap libraries that still do their own name resolution, but this patch introduces a very basic framework to have a multiple providers in one domain use and share a single failover service if they want to.
2009-11-06	Split async helpers in multiple files	Simo Sorce	1	-0/+5
	The size of sdap_async.c was unmanageable. This patch splits it into a generic file with common infrastructure calls, a file that handles connection calls and a file for id related calls.
2009-11-06	Unify parse routines, use maps in generic searches	Simo Sorce	1	-1/+3
	This remove redundant code and also allows the generic search to be used to use maps to convert attributes.
2009-10-29	Add support to get rootDSE from the LDAP server.	Simo Sorce	1	-12/+14
	Also fic sdap_get_generic_send() to be a bit more "generic" :-) Also figs bugs within it. This patch allow us 2 good things. A) we check that the server effectively supports GSSAPI auth before we try to use it. B) against IPA it substantially cuts delays when the server is offline because it uses a 5 second async timeout on the connection and doesn't try to do a slow synchronous kinit+sasl_bind if the server is not even available.
2009-10-22	added generic LDAP search sdap_get_generic_send/_recv	Sumit Bose	1	-0/+13

2009-10-14	Make options parser available to all providers	Simo Sorce	1	-1/+1

2009-10-14	make sdap_id_connect_* independent of sdap_id_ctx	Sumit Bose	1	-0/+6
	The sdap_id_connect_* request tries to bind to an LDAP server with the default credentials. Only the opts component of the sdap_id_ctx context is used. A new request sdap_cli_connect_* is created which expects only the opts pointer as parameter and not the whole context. This makes it reusable by other providers.
2009-10-01	Initial implementation of sasl bind support	Simo Sorce	1	-0/+10
	Inits krb5 credentials, if sasl mech is GSSAPI. Tested with GSSAPI and host keytab as well as user credentials. Updates also manpages with the new options.
2009-09-14	Turn ldap driver options into multitype	Simo Sorce	1	-1/+1
	This patch makes basic options multiype, the init function assigns a type from the initialization array, and processes values fetched from confdb accordingly. 4 types are supported so far: string, number, blob and boolean Also convert defines into enums where appropriate. Add fetch functions that check the requested type.
2009-08-27	Make enumeration an independent task	Simo Sorce	1	-2/+4
	Always immediately return to DP, and update users/groups in the background. Also implements an optimization to retrieve only changed/new users/groups by filtering using the modifyTimestamp after the first query.
2009-08-19	enable usage of defaultBindDn	Sumit Bose	1	-0/+1

2009-08-05	Consolidate tevent helpers	Jakub Hrozek	1	-17/+0

2009-07-21	added LDAP change password backend target	Sumit Bose	1	-0/+8

2009-07-08	Implement the ldap identity module.	Simo Sorce	1	-4/+10
	This uses and exapands the async helpers.
2009-07-08	Unify password caching ops in sysdb	Simo Sorce	1	-9/+0

2009-07-08	Add async helper functions	Simo Sorce	1	-0/+90
	These functions use the tevent_req async model, where a pair of _send/_recv functions pilot requests, with additional helpers like _done functions, and where needed multiple stage helpers.