summaryrefslogtreecommitdiff
path: root/src/providers/ipa/ipa_access.c
AgeCommit message (Expand)AuthorFilesLines
2013-01-15Make sysdb_custom_subtree_dn() require a domain.Simo Sorce1-1/+1
2012-11-19Do not save HBAC rules in subdomain subtreeSumit Bose1-10/+0
2012-09-24SYSDB: Remove unnecessary domain parameter from several sysdb callsJakub Hrozek1-1/+0
2012-08-23Unify usage of sysdb transactionsMichal Zidek1-1/+2
2012-07-31Modify hbac_get_cached_rules() so it can be used outside of HBAC codeJan Zeleny1-14/+17
2012-07-02IPA: Don't hang onto memory longer than necessaryStephen Gallagher1-0/+1
2012-04-24Detect subdomain request in IPA access providerJan Zeleny1-0/+10
2012-04-24Accept be_req instead if be_ctx in LDAP access providerJan Zeleny1-1/+1
2012-03-12IPA: Initialize hbac_ctx to NULLStephen Gallagher1-1/+1
2012-03-09IPA: Check nsAccountLock during PAM_ACCT_MGMTStephen Gallagher1-0/+56
2012-02-24IPA hosts refactoringJan Zeleny1-18/+6
2012-02-07IPA: Add host info handlerJan Cholasta1-1/+1
2012-02-06Separate the host-retrieval code from IPA HBAC to common IPA codeJan Zeleny1-16/+40
2012-02-06Implemented support for multiple search bases in HBAC rules and servicesJan Zeleny1-29/+5
2012-01-14Support multiple search bases in HBACJan Zeleny1-1/+1
2011-12-16Export the function to convert ldb_result to sysdb_attrsJakub Hrozek1-1/+1
2011-11-29Add ipa_hbac_support_srchost option to IPA providerJan Zeleny1-0/+4
2011-11-22Cleanup: Remove unused parametersJakub Hrozek1-4/+0
2011-09-28IPA access: hostname comparison should be case-insensitiveJakub Hrozek1-1/+1
2011-08-15sysdb refactoring: memory context deletedJan Zeleny1-1/+1
2011-08-15sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny1-2/+1
2011-07-29Fix memory leak in ipa_hbac_evaluate_rulesStephen Gallagher1-0/+1
2011-07-08Add ipa_hbac_treat_deny_as optionStephen Gallagher1-1/+10
2011-07-08Add ipa_hbac_refresh optionStephen Gallagher1-0/+16
2011-07-08Add new HBAC lookup and evaluation routinesStephen Gallagher1-124/+380
2011-07-08Remove old HBAC implementationStephen Gallagher1-1585/+0
2011-02-28Use realm for basedn instead of IPA domainJakub Hrozek1-1/+1
2011-01-19Add ipa_hbac_search_base config optionSumit Bose1-52/+39
2011-01-17Add ldap_search_enumeration_timeout config optionSumit Bose1-3/+3
2011-01-17Add timeout parameter to sdap_get_generic_send()Sumit Bose1-22/+31
2010-12-17Fix uninitialized value error in set_local_and_remote_host_infoStephen Gallagher1-1/+1
2010-12-17Fix unsafe return condition in ipa_access_handlerStephen Gallagher1-1/+6
2010-12-08Remove IPA_ACCESS_TIME defineStephen Gallagher1-13/+11
2010-12-08Remove check_access_time() from IPA access providerSumit Bose1-63/+0
2010-11-19Use a more efficient host search filterSumit Bose1-5/+6
2010-11-15Sanitize sysdb search filters in the IPA providerStephen Gallagher1-2/+17
2010-10-22Download only enabled IPA HBAC rulesSumit Bose1-1/+3
2010-09-23Save all data to sysdb in one transactionSumit Bose1-222/+131
2010-09-23Handle host objects like other objectsSumit Bose1-128/+181
2010-09-07Cleaned some dead assignmentsJan Zeleny1-14/+12
2010-07-23Fix IPA access backend handling of obsolete and missing HBAC entries:eindenbom1-9/+68
2010-07-23Do not treat missing HBAC rules as an errorSumit Bose1-0/+5
2010-07-09Use new LDAP connection framework in IPA access backend.eindenbom1-304/+264
2010-06-02Unify sdap and sysdb data handlingSumit Bose1-85/+104
2010-06-02Compare full service nameSumit Bose1-1/+2
2010-06-02Remove service groupsSumit Bose1-191/+7
2010-06-02Use new schema for HBAC service checksSumit Bose1-21/+637
2010-06-02Use sysdb_attrs_get_string_array() instead of sysdb_attrs_get_el()Sumit Bose1-23/+12
2010-05-27Check ipaEnabledFlagSumit Bose1-5/+23
2010-05-16Don't report a fatal error for an HBAC denialStephen Gallagher1-1/+1