sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-04-08	SELinux login management	Jakub Hrozek	2	-0/+23
	Adds a new option -Z to sss_useradd and sss_usermod. This option allows user to specify the SELinux login context for the user. On deleting the user with sss_userdel, the login mapping is deleted, so subsequent adding of the same user would result in the default login context unless -Z is specified again. MLS security is not supported as of this patch.
2010-04-06	Make sss_userdel check for logged in users	Jakub Hrozek	1	-0/+11
	sss_userdel now warns if the deleted user was logged in at the time of deletion. Also adds a new parameter --kick to userdel that kills all user processes before actually deleting ther user. Fixes: #229
2010-04-06	Add userdel_cmd param	Jakub Hrozek	1	-0/+14
	Fixes: #231
2010-03-12	Add krb5_kpasswd option	Sumit Bose	1	-1/+22

2010-03-11	Add expandable sequences to krb5_ccachedir	Sumit Bose	1	-1/+11
	As with krb5_ccname_template sequences like %u can be used in the krb5_ccachedir parameter which are expanded at runtime. If the directory does not exist, it will be created. Depending on the used sequences it is created as a public or private directory.
2010-03-08	Add simple access provider	Sumit Bose	2	-0/+131

2010-03-08	Make filter_users and filter_groups also per-domain	Jakub Hrozek	1	-1/+3
	Fixes: #290
2010-03-08	groupshow: only show all parents in recursive mode	Jakub Hrozek	1	-0/+2

2010-02-25	Fix check for values of expiration limits	Jakub Hrozek	1	-2/+2
	There were inconsistencies between what sssd.conf manpage said and what the code enforces.
2010-02-23	Better cleanup task handling	Jakub Hrozek	1	-0/+15
	Implements a different mechanism for cleanup task. Instead of just deleting expired entries, this patch adds a new option account_cache_expiration for domains. If an entry is expired and the last login was more days in the past that account_cache_expiration, the entry is deleted. Groups are deleted if they are expired and and no user references them (no user has memberof: attribute pointing at that group). The parameter account_cache_expiration is not LDAP-specific, so that other future backends might use the same timeout setting. Fixes: #391
2010-02-23	Revert "Change default for enumeration to TRUE"	Stephen Gallagher	1	-1/+1
	This reverts commit 75a9f18ad8ac6e885ac34cdeebc4d8f8734713f8.
2010-02-23	Do not check entries during cleanup task	Jakub Hrozek	1	-1/+1
	Do not attempt to validate expired entries in cache, just delete them. Also increase the cache timeouts. Fixes: #331
2010-02-22	Restrict family lookups	Jakub Hrozek	1	-0/+28
	Adds a new option that tells resolver which address family to prefer or use exclusively. Fixes: #404
2010-02-18	Build all manpages from a single location	Stephen Gallagher	1	-0/+97

2010-02-18	Rename server/ directory to src/	Stephen Gallagher	16	-0/+2965
	Also update BUILD.txt