Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-07-10 | pac responder: limit access by checking UIDs | Sumit Bose | 1 | -0/+4 | |
A check for allowed UIDs is added in the common responder code directly after accept(). If the platform does not support reading the UID of the peer but allowed UIDs are configured, access is denied. Currently only the PAC responder sets the allowed UIDs for a socket. The default is that only root is allowed to access the socket of the PAC responder. Fixes: https://fedorahosted.org/sssd/ticket/1382 | |||||
2012-07-06 | AD: Add manpages and SSSDConfig entries | Stephen Gallagher | 1 | -0/+121 | |
2012-06-29 | sudo: add host info options | Pavel Březina | 1 | -0/+5 | |
Adds some option that allows to manually configure a host filter. ldap_sudo_use_host_filter - if false, we will download all rules regardless their sudoHost attribute ldap_sudo_hostnames - list hostnames and/or fqdn that should be downloaded, separated with spaces ldap_sudo_ip - list of IPv4/6 address and/or network that should be downloaded, separated with spaces ldap_sudo_include_netgroups - include rules that contains netgroup in sudoHost ldap_sudo_include_regexp - include rules that contains regular expression in sudoHost | |||||
2012-06-29 | sudo: clean up | Pavel Březina | 1 | -1/+0 | |
2012-06-29 | sudo provider: add ldap_sudo_smart_refresh_interval | Pavel Březina | 1 | -0/+1 | |
2012-06-29 | sudo provider: remove old timer | Pavel Březina | 1 | -2/+0 | |
2012-06-29 | sudo provider: add ldap_sudo_full_refresh_interval | Pavel Březina | 1 | -0/+1 | |
2012-06-29 | confdb: add entry_cache_sudo_timeout option | Pavel Březina | 1 | -0/+1 | |
2012-06-21 | Add support for ID ranges | Sumit Bose | 1 | -0/+1 | |
2012-06-18 | Make the client idle timeout configurable | Stephen Gallagher | 1 | -0/+1 | |
2012-06-13 | LDAP: Add ldap_*_use_matching_rule_in_chain options | Stephen Gallagher | 2 | -0/+4 | |
2012-06-10 | Allow fast memcache timeout to be configurable | Jan Zeleny | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1318 | |||||
2012-06-10 | IPA subdomains - ask for information about master domain | Jan Zeleny | 1 | -0/+1 | |
The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain. | |||||
2012-05-09 | NSS: Add default_shell option | Stephen Gallagher | 1 | -0/+1 | |
This option will allow administrators to set a default shell to be used if a user does not have one set in the identity provider. https://fedorahosted.org/sssd/ticket/1289 | |||||
2012-05-09 | NSS: Add fallback_homedir option | Stephen Gallagher | 1 | -0/+2 | |
This option is similar to override_homedir, except that it will take effect only for users that do not have an explicit home directory specified in LDAP. https://fedorahosted.org/sssd/ticket/1250 | |||||
2012-05-04 | Modify behavior of pam_pwd_expiration_warning | Jan Zeleny | 1 | -0/+1 | |
New option pwd_expiration_warning is introduced which can be set per domain and can override the value specified by the original pam_pwd_expiration_warning. If the value of expiration warning is set to zero, the filter isn't apllied at all - if backend server returns the warning, it will be automatically displayed. Default value for Kerberos: 7 days Default value for LDAP: don't apply the filter Technical note: default value when creating the domain is -1. This is important so we can distinguish between "no value set" and 0. Without this possibility it would be impossible to set different values for LDAP and Kerberos provider. | |||||
2012-05-03 | LDAP: Map the user's primaryGroupID | Stephen Gallagher | 2 | -0/+2 | |
2012-05-03 | LDAP: Allow setting a default domain for id-mapping slice 0 | Stephen Gallagher | 2 | -0/+4 | |
2012-05-03 | LDAP: Add autorid compatibility mode | Stephen Gallagher | 2 | -0/+2 | |
2012-05-03 | LDAP: Add ID mapping range settings | Stephen Gallagher | 2 | -0/+6 | |
2012-05-03 | LDAP: Add id-mapping option | Stephen Gallagher | 2 | -0/+2 | |
2012-05-03 | LDAP: Add objectSID config option | Stephen Gallagher | 2 | -0/+4 | |
2012-04-24 | SSH: Add support for hashed known_hosts | Jan Cholasta | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1203 | |||||
2012-04-24 | IPA: Add get-domains target | Sumit Bose | 1 | -0/+1 | |
2012-04-24 | data provider: added subdomains | Sumit Bose | 1 | -0/+1 | |
2012-04-24 | Responder part of the subdomain retrieval work | Jan Zeleny | 1 | -0/+2 | |
2012-04-20 | Make the monitor SIGKILL time configurable | Jakub Hrozek | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1119 | |||||
2012-04-20 | proxy: new option proxy_fast_alias | Jakub Hrozek | 1 | -0/+1 | |
2012-02-24 | SELinux related attributes added to config API | Jan Zeleny | 1 | -0/+10 | |
2012-02-24 | IPA hosts refactoring | Jan Zeleny | 1 | -0/+20 | |
2012-02-17 | RESPONDERS: Make the fd_limit setting configurable | Stephen Gallagher | 1 | -0/+1 | |
This code will now attempt first to see if it has privilege to set the value as specified, and if not it will fall back to the previous behavior. So on systems with the CAP_SYS_RESOURCE capability granted to SSSD, it will be able to ignore the limits.conf hard limit. https://fedorahosted.org/sssd/ticket/1197 | |||||
2012-02-10 | Add ssh service to sssd.api.conf | Jan Cholasta | 1 | -0/+3 | |
2012-02-07 | AUTOFS: IPA provider | Jakub Hrozek | 2 | -0/+6 | |
2012-02-07 | IPA: Add host info handler | Jan Cholasta | 1 | -0/+1 | |
2012-02-07 | DP: Add host info handler | Jan Cholasta | 1 | -0/+1 | |
2012-02-07 | LDAP: Add support for SSH user public keys | Jan Cholasta | 2 | -0/+2 | |
2012-02-06 | Add session target in data provider | Jan Zeleny | 1 | -0/+1 | |
2012-02-05 | AUTOFS: responder | Jakub Hrozek | 1 | -0/+6 | |
2012-02-04 | ConfigAPI: add sudo to known services | Jakub Hrozek | 1 | -0/+5 | |
https://fedorahosted.org/sssd/ticket/1144 Squashed patch from Jan Zeleny: Add SUDO provider to the list of available providers in SSSDConfig.py | |||||
2012-02-04 | NSS: Add individual timeouts for entry types | Stephen Gallagher | 1 | -0/+5 | |
https://fedorahosted.org/sssd/ticket/1016 | |||||
2012-01-31 | LDAP: Add new options for service maps | Stephen Gallagher | 2 | -1/+12 | |
Adds the new service map options to the SSSDConfig API and the manpages. | |||||
2012-01-18 | LDAP: Add option to disable paging control | Stephen Gallagher | 2 | -0/+2 | |
Fixes https://fedorahosted.org/sssd/ticket/967 | |||||
2012-01-17 | SUDO Integration - periodical update of rules in data provider | Pavel Březina | 1 | -0/+2 | |
https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period) | |||||
2012-01-17 | SUDO Integration review issues | Pavel Březina | 2 | -0/+15 | |
2011-12-16 | Use the case sensitivity flag in responders | Jakub Hrozek | 1 | -0/+1 | |
2011-12-13 | Fix typo in IPA SSSDConfig file | Stephen Gallagher | 1 | -1/+1 | |
2011-12-12 | Add sdap_connection_expire_timeout option | Stephen Gallagher | 2 | -0/+2 | |
https://fedorahosted.org/sssd/ticket/1036 | |||||
2011-12-08 | Add ldap_sasl_minssf option | Jan Zeleny | 2 | -0/+2 | |
https://fedorahosted.org/sssd/ticket/1075 | |||||
2011-11-29 | Add ipa_hbac_support_srchost option to IPA provider | Jan Zeleny | 1 | -0/+1 | |
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078 | |||||
2011-11-23 | Added and modified options for IPA netgroups | Jan Zeleny | 1 | -6/+12 | |