Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2013-06-28 | Add now options ldap_min_id and ldap_max_id | Sumit Bose | 1 | -0/+21 | |
Currently the range for Posix IDs stored in an LDAP server is unbound. This might lead to conflicts in a setup with AD and trusts when the configured domain uses IDs from LDAP. With the two noe options this conflict can be avoided. | |||||
2013-06-12 | Fix minor typos | Yuri Chornoivan | 1 | -1/+1 | |
2013-06-10 | A new option krb5_use_kdcinfo | Jakub Hrozek | 1 | -0/+28 | |
https://fedorahosted.org/sssd/ticket/1883 The patch introduces a new Kerberos provider option called krb5_use_kdcinfo. The option is true by default in all providers. When set to false, the SSSD will not create krb5 info files that the locator plugin consumes and the user would have to set up the Kerberos options manually in krb5.conf | |||||
2013-06-10 | man: document the need to set ldap_access_order | Jakub Hrozek | 1 | -0/+21 | |
https://fedorahosted.org/sssd/ticket/1789 ldap_access_order must be set in order to non-default access control options to work. This patch amends the sssd-ldap man page to document this fact with all non-default ldap_access_order options. | |||||
2013-05-23 | Adding option to disable retrieving large AD groups. | Lukas Slebodnik | 1 | -0/+21 | |
This commit adds new option ldap_disable_range_retrieval with default value FALSE. If this option is enabled, large groups(>1500) will not be retrieved and behaviour will be similar like was before commit ae8d047122c "LDAP: Handle very large Active Directory groups" https://fedorahosted.org/sssd/ticket/1823 | |||||
2013-03-20 | ldap: Fallback option for rfc2307 schema | Simo Sorce | 1 | -0/+31 | |
Add option to fallback to fetch local users if rfc2307is being used. This is useful for cases where people added local users as LDAP members and rely on these group memberships to be maintained on the local host. Disabled by default as it violates identity domain separation. Ticket: https://fedorahosted.org/sssd/ticket/1020 | |||||
2013-02-26 | Remove enumerate=true from man sssd-ldap | Jakub Hrozek | 1 | -1/+0 | |
https://fedorahosted.org/sssd/ticket/1737 | |||||
2012-12-11 | sudo manpage: clarify that sudoHost may contain wildcards and not regular ↵ | Pavel Březina | 1 | -1/+1 | |
expression https://fedorahosted.org/sssd/ticket/1690 | |||||
2012-11-19 | LDAP: Make it possible to use full principal in ldap_sasl_authid again | Jakub Hrozek | 1 | -0/+5 | |
2012-11-19 | MAN: document the ldap_sasl_realm option | Jakub Hrozek | 1 | -0/+13 | |
The option was completely undocumented. | |||||
2012-10-05 | man: Note that automounter must be restarted to re-read the master map | Jakub Hrozek | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1563 | |||||
2012-10-05 | manpage: ldap_access_filter is not always mandatory | Pavel Březina | 1 | -5/+7 | |
https://fedorahosted.org/sssd/ticket/1540 | |||||
2012-10-02 | Flip the default value of ldap_initgroups_use_matching_rule_in_chain | Jakub Hrozek | 1 | -2/+2 | |
https://fedorahosted.org/sssd/ticket/1535 | |||||
2012-10-01 | sudo and autofs search bases should not be marked experimental | Jakub Hrozek | 1 | -2/+2 | |
https://fedorahosted.org/sssd/ticket/1541 | |||||
2012-10-01 | Document ldap_chpass_update_last_change | Jakub Hrozek | 1 | -0/+15 | |
Add the option to the manual page and the configAPI https://fedorahosted.org/sssd/ticket/1494 | |||||
2012-09-26 | sssd-ldap manpage: ldap_scheme formatting | Ondrej Kos | 1 | -6/+26 | |
fixes https://fedorahosted.org/sssd/ticket/1483 ldap schemes now displayed as bullet list | |||||
2012-09-24 | autofs, sudo, ssh and PAC are not experimental anymore | Jakub Hrozek | 1 | -2/+0 | |
2012-08-10 | MAN: Improve description of ldap_*_search_base options | Stephen Gallagher | 1 | -96/+6 | |
It was ambiguous that these options supported the new multiple search base format, as well as the search filters. | |||||
2012-08-10 | MAN: Fix minor typo in ldap_search_base section | Stephen Gallagher | 1 | -1/+1 | |
2012-08-09 | Change default value of ldap_sasl_string to host/hostname@REALM in man page. | Michal Zidek | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1464 | |||||
2012-08-01 | Primary server support: new options in krb5 provider | Jan Zeleny | 1 | -1/+1 | |
This patch adds support for new config options krb5_backup_server and krb5_backup_kpasswd. The description of this option's functionality is included in man page in one of previous patches. | |||||
2012-08-01 | Primary server support: new option in ldap provider | Jan Zeleny | 1 | -4/+4 | |
This patch adds support for new config option ldap_backup_uri. The description of this option's functionality is included in man page in previous patch. | |||||
2012-07-30 | sudo ldap provider: support autoconfiguration of hostnames | Pavel Březina | 1 | -3/+3 | |
https://fedorahosted.org/sssd/ticket/1420 sudoHost attribute may contain hostname or fqdn of the machine. Sudo itself supports only one hostname and its fqdn - the one that is returned by gethostbyname(). This patch implements autoconfiguration of hostname and fqdn if it has not been set manually by ldap_sudo_hostnames option. | |||||
2012-07-06 | MAN: Unify "SEE ALSO" sections | Stephen Gallagher | 1 | -14/+2 | |
2012-06-29 | sudo: manpage updated | Pavel Březina | 1 | -8/+117 | |
Removes old options and adds new ones. | |||||
2012-06-13 | LDAP: Auto-detect support for the ldap match rule | Stephen Gallagher | 1 | -1/+13 | |
This patch extends the RootDSE lookup so that we will perform a second request to test whether the match rule syntax can be used. If both groups and initgroups are disabled in the configuration, this lookup request can be skipped. | |||||
2012-06-13 | LDAP: Add ldap_*_use_matching_rule_in_chain options | Stephen Gallagher | 1 | -0/+47 | |
2012-05-03 | MAN: Add manpage for ID mapping | Stephen Gallagher | 1 | -0/+21 | |
2012-05-03 | LDAP: Add objectSID config option | Stephen Gallagher | 1 | -0/+30 | |
2012-04-20 | Two manual pages fixes | Marco Pizzoli | 1 | -1/+1 | |
2012-04-18 | Fix erronous reference to the 'allow' access_provider | Stef Walter | 1 | -1/+1 | |
* Should be 'permit' instead https://fedorahosted.org/sssd/ticket/1295 Signed-off-by: Stephen Gallagher <sgallagh@redhat.com> | |||||
2012-04-18 | MAN: Add ldap_sasl_minssf to the manpage | Stephen Gallagher | 1 | -0/+16 | |
2012-04-18 | MAN: Improve ldap_disable_paging documentation | Stephen Gallagher | 1 | -1/+4 | |
2012-04-18 | man: document that referral chasing might bring performance penalty | Jakub Hrozek | 1 | -0/+8 | |
https://fedorahosted.org/sssd/ticket/1265 | |||||
2012-03-14 | LDAP: Add AD 2008r2 schema | Stephen Gallagher | 1 | -1/+4 | |
https://fedorahosted.org/sssd/ticket/1031 | |||||
2012-02-07 | fix typos in manual | Yuri Chornoivan | 1 | -1/+1 | |
2012-02-07 | Two sssd-ldap manual pages fixes | Jakub Hrozek | 1 | -4/+4 | |
Reported by Marco Pizzoli | |||||
2012-02-07 | LDAP: Add support for SSH user public keys | Jan Cholasta | 1 | -0/+10 | |
2012-02-06 | Update shadowLastChanged attribute during LDAP password change | Jan Zeleny | 1 | -2/+0 | |
https://fedorahosted.org/sssd/ticket/1019 | |||||
2012-02-05 | AUTOFS: LDAP provider | Jakub Hrozek | 1 | -0/+101 | |
2012-01-31 | LDAP: Add new options for service maps | Stephen Gallagher | 1 | -0/+70 | |
Adds the new service map options to the SSSDConfig API and the manpages. | |||||
2012-01-30 | Include sudo manual pages only conditionally | Jakub Hrozek | 1 | -6/+25 | |
2012-01-30 | SUDO Integration - manual page | Pavel Březina | 1 | -0/+188 | |
https://fedorahosted.org/sssd/ticket/1109 | |||||
2012-01-18 | LDAP: Add option to disable paging control | Stephen Gallagher | 1 | -0/+24 | |
Fixes https://fedorahosted.org/sssd/ticket/967 | |||||
2011-12-14 | Support search bases in RFC2307bis enumeration | Pavel Březina | 1 | -0/+7 | |
https://fedorahosted.org/sssd/ticket/960 | |||||
2011-12-12 | Add sdap_connection_expire_timeout option | Stephen Gallagher | 1 | -0/+17 | |
https://fedorahosted.org/sssd/ticket/1036 | |||||
2011-11-23 | Added and modified options for IPA netgroups | Jan Zeleny | 1 | -0/+22 | |
2011-11-10 | Fix typos in manual pages | Yuri Chornoivan | 1 | -1/+1 | |
2011-11-02 | Support to request canonicalization in LDAP/IPA provider | Jan Zeleny | 1 | -0/+15 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | LDAP: Update manpages with multiple search base information | Stephen Gallagher | 1 | -1/+56 | |