sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-01-20	Add sysdb request to authenticate against a cached password	Sumit Bose	1	-180/+0
	The code for authentication against a cached password is moved from the pam responder to a generic sysdb tevent request. The new code can be used by other components of sssd to verify passwords on their own. Tests for the sysdb_cache_password and sysdb_cache_auth request are added and some unneeded or unused code and variables are removed.
2009-10-22	Add support for offline auth cache timeout	Stephen Gallagher	1	-2/+18
	This adds a new option (offline_credentials_expiration) to the [PAM] section of the sssd.conf If the user does not perform an online authentication within the timeout (in days), they will be denied auth once the timeout passes.
2009-09-23	Revert "Use syslog for logging error conditions in SSSD"	Stephen Gallagher	1	-1/+1
	This reverts commit 8c50bd085c0efe5fde354deee2c8118887aae29d. Amended: commit 1016af2b1b97ad4290ccce8fa462cc7e3c191b2e also made use of the SYSLOG_ERROR() macro, so those portions of that code also needed to be reverted.
2009-09-21	Use syslog for logging error conditions in SSSD	Jakub Hrozek	1	-1/+1
	This is just a band-aid until ELAPI is fully functional and ready to use.
2009-09-08	Split database in multiple files	Simo Sorce	1	-1/+8
	The special persistent local database retains the original name. All other backends now have their own cache-NAME.ldb file.
2009-07-03	Rename sysdb_req to sysdb_handle.	Simo Sorce	1	-6/+0
	This sysdb_req has always really been a transaction handle and not a request. This is part of a set of patches to rewrite transaction support in sysdb to a hopefully better API, that will also let use use tevent_req async style to manipulate our cache.
2009-05-18	Move actual password caching into sysdb	Simo Sorce	1	-111/+1
	Convert auth modules to do the caching themselves
2009-05-18	Fix crypt functions to not use static buffers.	Simo Sorce	1	-9/+7
	Also fix style, clarify, and simplify some logic.
2009-04-28	Use different attribute for cached passwords change time	Sumit Bose	1	-2/+2

2009-04-27	Use different attribute for cached passwords	Simo Sorce	1	-3/+3
	This fixes a bug with legacy backends where the cached password would be cleared on a user update. Using a different attribute we make sure a userPassword coming from the remote backend does not interfere with a cachedPassword (and vice versa).
2009-04-13	Implement credentials caching in pam responder.	Simo Sorce	1	-0/+275
	Implement credentials caching in pam responder. Currently works only for the proxy backend. Also cleanup pam responder code and mode common code in data provider. (the data provider should never include responder private headers)