sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-10-04	AD: properly intitialize GC from ad_server option	Sumit Bose	1	-1/+1

2013-06-28	AD: initialize failover with custom realm, domain and failover service	Jakub Hrozek	1	-26/+32
	This is needed so we can initialize failover using IPA realm and on-the-fly discovered DNS domain. The subdomains discovered on-thefly will use the subdomain name for realm, domain and failover service to avoid conflicts. Subtaks of: https://fedorahosted.org/sssd/ticket/1962
2013-06-28	AD: decouple ad_id_ctx initialization	Jakub Hrozek	1	-81/+269
	The IPA subdomain code will perform lookups on its own in the server mode. For this, the AD provider must offer a way to initialize the ad_id_ctx for external consumers. Subtask of: https://fedorahosted.org/sssd/ticket/1962
2013-06-26	AD: kinit with the local DC even when talking to a GC	Jakub Hrozek	1	-3/+19
	We tried to use the GC address even for kinit which gave us errors like: "Realm not local to KDC while getting initial credentials". This patch adds a new AD_GC service that is only used for ID lookups, any sort of Kerberos operations are done against the local servers.
2013-06-14	AD: Fix segfault in DEBUG message	Jakub Hrozek	1	-1/+1

2013-06-10	A new option krb5_use_kdcinfo	Jakub Hrozek	1	-14/+25
	https://fedorahosted.org/sssd/ticket/1883 The patch introduces a new Kerberos provider option called krb5_use_kdcinfo. The option is true by default in all providers. When set to false, the SSSD will not create krb5 info files that the locator plugin consumes and the user would have to set up the Kerberos options manually in krb5.conf
2013-06-07	AD: Add additional service to support Global Catalog lookups	Jakub Hrozek	1	-28/+162
	When fixed host names of AD servers are configured in the config file, we can't know (unlike when service discovery is at play) if the servers are Global Catalogs or not. This patch adds a private data to servers read from the config file that denote whether the server can be tried for contacting the Global Catalog port or just LDAP. The GC or LDAP URIs are generated based on contents of this private data structure. Because SSSD sticks to a working server, we don't have to disable or remove the faulty GC servers from the list.
2013-06-07	LDAP: new SDAP domain structure	Jakub Hrozek	1	-5/+12
	Previously an sdap_id_ctx was always tied to one domain with a single set of search bases. But with the introduction of Global Catalog lookups, primary domain and subdomains might have different search bases. This patch introduces a new structure sdap_domain that contains an sssd domain or subdomain and a set of search bases. With this patch, there is only one sdap_domain that describes the primary domain.
2013-06-07	Do not obfuscate calls with booleans	Jakub Hrozek	1	-7/+21
	Instead of using boolean variables to denote whether the call is adding a primary or a secondary server, use a function wrapper that tells what it's doing by its name.
2013-05-27	Fix dyndns timer initialization	Jakub Hrozek	1	-2/+2
	The dyndns init function was starting the timer even if the updates were set to False. This patch splits the init of dynamic updates and the timer into two functions so that the back end can start the updates separately from reading the options.
2013-05-03	Active Directory dynamic DNS updates	Jakub Hrozek	1	-0/+18
	https://fedorahosted.org/sssd/ticket/1504 Implements dynamic DNS updates for the AD provider. By default, the updates also update the reverse zone and run periodically every 24 hours.
2013-01-02	failover: Protect against empty host names	Michal Zidek	1	-1/+1
	Added new parameter to split_on_separator that allows to skip empty values. The whole function was rewritten. Unit test case was added to check the new implementation. https://fedorahosted.org/sssd/ticket/1484
2012-11-19	LDAP: Provide a common sdap_set_sasl_options init function	Jakub Hrozek	1	-44/+8
	The AD and IPA initialization functions shared the same code. This patch moves the code into a common initialization function.
2012-09-17	Failover: use _srv_ when no primary server is defined	Pavel Březina	1	-12/+3
	https://fedorahosted.org/sssd/ticket/1521
2012-08-23	Fix: IPv6 address with square brackets doesn't work.	Michal Zidek	1	-0/+7
	https://fedorahosted.org/sssd/ticket/1365
2012-08-23	Typo in debug message (SSSd -> SSSD).	Michal Zidek	1	-1/+1
	https://fedorahosted.org/sssd/ticket/1434
2012-08-23	Consolidation of functions that make realm upper-case	Ondrej Kos	1	-6/+1

2012-08-15	Duplicate detection in fail over did not work.	Michal Zidek	1	-1/+6
	https://fedorahosted.org/sssd/ticket/1472
2012-08-09	SRV resolution for backup servers should not be permitted.	Michal Zidek	1	-1/+9
	https://fedorahosted.org/sssd/ticket/1463
2012-08-01	Primary server support: AD adaptation	Jan Zeleny	1	-33/+74
	This patch adds support for the primary server functionality into AD provider. No backup servers are added at the moment, just the basic support is in place.
2012-07-06	AD: Force case-insensitive operation in AD provider	Stephen Gallagher	1	-0/+18

2012-07-06	AD: use krb5_keytab for validation and GSSAPI	Stephen Gallagher	1	-3/+10
	This simplifies configuration by eliminating the need to specifiy both krb5_keytab and ldap_krb5_keytab if the keytab is not located at /etc/krb5.keytab
2012-07-06	AD: Add AD auth and chpass providers	Stephen Gallagher	1	-0/+64
	These new providers take advantage of existing code for the KRB5 provider, providing sensible defaults for operating against an Active Directory 2008 R2 or later server.
2012-07-06	AD: Add AD identity provider	Stephen Gallagher	1	-0/+600
	This new identity provider takes advantage of existing code for the LDAP provider, but provides sensible defaults for operating against an Active Directory 2008 R2 or later server.