sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-12-07	Replace krb5_kdcip by krb5_server in LDAP provider	Sumit Bose	1	-1/+7

2010-12-06	Add ldap_chpass_uri config option	Sumit Bose	1	-0/+34

2010-12-06	Add new account expired rule to LDAP access provider	Sumit Bose	1	-1/+54
	Two new options are added to the LDAP access provider to allow a broader range of access control rules to be evaluated. 'ldap_access_order' makes it possible to run more than one rule. To keep compatibility with older versions the default is 'filter'. This patch adds a new rule 'expire'. 'ldap_account_expire_policy' specifies which LDAP attribute should be used to determine if an account is expired or not. Currently only 'shadow' is supported which evaluates the ldap_user_shadow_expire attribute.
2010-12-01	Allow protocol fallback for SRV queries	Jakub Hrozek	1	-0/+5
	https://fedorahosted.org/sssd/ticket/691
2010-11-19	Fix man page	Sumit Bose	1	-2/+2
	Currently sssd does not support authentication via GSSAPI. I think it is not necessary to support it, because if GSSAPI is possible Kerberos should be use for authentication.
2010-11-15	Properly document ldap_purge_cache_timeout	Stephen Gallagher	1	-0/+19
	Also allow it to be disabled entirely
2010-11-05	Review comments for namingContexts patches	Sumit Bose	1	-9/+3

2010-11-04	Make ldap_search_base a non-mandatory option	Sumit Bose	1	-3/+20

2010-10-22	Add ldap_deref option	Sumit Bose	1	-0/+35

2010-10-18	Move all references to ldap_<entity>_search_base to "advanced" section	Jan Zeleny	1	-42/+52
	The <entity> can be one of user, group or netgroup. The references were removed from example configuration and they were moved from section Configuration options to section Advanced options. Ticket: #607
2010-10-18	Add option to limit nested groups	Simo Sorce	1	-0/+16

2010-10-13	Add infrastructure to LDAP provider for netgroup support	Sumit Bose	1	-0/+91

2010-10-13	Add KDC to the list of LDAP options	Jakub Hrozek	1	-0/+18

2010-10-13	Man pages should mention supported providers	Jan Zeleny	1	-5/+7
	Each back end can support id, auth or access provider, but each back end supports different subset of these. Man pages should describe which providers are supported by each back end. Ticket: #615
2010-09-08	Deobfuscate password in back ends	Jakub Hrozek	1	-1/+10
	When obfuscated password is used in config file, the LDAP backend converts it back to clear text and uses it to authenticate to the server.
2010-09-07	Reviewed sssd-ldap man page	Jan Zeleny	1	-7/+207
	Some config options updated, newly documented 12 new options.
2010-06-16	Standardize on correct spelling of "principal" for krb5	Stephen Gallagher	1	-1/+1
	https://fedorahosted.org/sssd/ticket/542
2010-05-27	Add ldap_access_filter option	Stephen Gallagher	1	-0/+39
	This option (applicable to access_provider=ldap) allows the admin to set an additional LDAP search filter that must match in order for a user to be granted access to the system. Common examples for this would be limiting access to users by in a particular group, for example: ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com
2010-05-16	Add ldap_krb5_ticket_lifetime option	Sumit Bose	1	-0/+13

2010-05-07	Use service discovery in backends	Jakub Hrozek	1	-3/+17
	Integrate the failover improvements with our back ends. The DNS domain used in the SRV query is always the SSSD domain name. Please note that this patch changes the default value of ldap_uri from "ldap://localhost" to "NULL" in order to use service discovery with no server set.
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+688
	Also update BUILD.txt