Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-06-21 | Add support for ID ranges | Sumit Bose | 1 | -0/+2 | |
2012-06-10 | IPA subdomains - ask for information about master domain | Jan Zeleny | 1 | -0/+2 | |
The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain. | |||||
2012-04-24 | IPA: Add get-domains target | Sumit Bose | 1 | -0/+2 | |
2012-03-28 | Remove old compatibility tests | Stephen Gallagher | 1 | -15/+0 | |
These are now replaced by the more accurate tests. This patch also drops the runtime option-count check, since we are always performing the more complete check at build-time. | |||||
2012-02-24 | IPA hosts refactoring | Jan Zeleny | 1 | -0/+17 | |
2012-02-07 | AUTOFS: IPA provider | Jakub Hrozek | 1 | -0/+14 | |
2012-02-07 | IPA: Add host info handler | Jan Cholasta | 1 | -0/+1 | |
2012-02-06 | Update shadowLastChanged attribute during LDAP password change | Jan Zeleny | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1019 | |||||
2012-02-06 | Session target in IPA provider | Jan Zeleny | 1 | -0/+17 | |
2012-02-06 | Implemented support for multiple search bases in HBAC rules and services | Jan Zeleny | 1 | -0/+1 | |
2012-02-05 | AUTOFS: LDAP provider | Jakub Hrozek | 1 | -1/+1 | |
2012-02-04 | NSS: Add individual timeouts for entry types | Stephen Gallagher | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1016 | |||||
2012-01-31 | IPA: Add support for services lookups (non-enum) | Stephen Gallagher | 1 | -1/+3 | |
2012-01-18 | LDAP: Add option to disable paging control | Stephen Gallagher | 1 | -1/+1 | |
Fixes https://fedorahosted.org/sssd/ticket/967 | |||||
2012-01-17 | SUDO Integration - periodical update of rules in data provider | Pavel Březina | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period) | |||||
2011-12-16 | SUDO Integration - LDAP configuration options | Pavel Březina | 1 | -1/+1 | |
2011-12-12 | Add sdap_connection_expire_timeout option | Stephen Gallagher | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1036 | |||||
2011-12-09 | Fixed IPA netgroup processing | Jan Zeleny | 1 | -0/+1 | |
In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future. | |||||
2011-12-08 | Add ldap_sasl_minssf option | Jan Zeleny | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1075 | |||||
2011-11-29 | Add ipa_hbac_support_srchost option to IPA provider | Jan Zeleny | 1 | -0/+1 | |
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078 | |||||
2011-11-29 | IPA migration fixes | Jakub Hrozek | 1 | -0/+1 | |
* use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924 | |||||
2011-11-23 | New IPA ID context | Jan Zeleny | 1 | -1/+6 | |
2011-11-23 | Added and modified options for IPA netgroups | Jan Zeleny | 1 | -0/+23 | |
2011-11-02 | Support to request canonicalization in LDAP/IPA provider | Jan Zeleny | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | Add support to request canonicalization on krb AS requests | Jan Zeleny | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-08-26 | Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON | Jakub Hrozek | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/978 | |||||
2011-07-11 | Check DNS records before updating | Jakub Hrozek | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/802 | |||||
2011-07-08 | Add ipa_hbac_treat_deny_as option | Stephen Gallagher | 1 | -0/+1 | |
By default, we will treat the presence of any DENY rule as denying all users. This option will allow the admin to explicitly ignore DENY rules during a transitional period. | |||||
2011-07-08 | Add ipa_hbac_refresh option | Stephen Gallagher | 1 | -0/+1 | |
This option describes the time between refreshes of the HBAC rules on the IPA server. | |||||
2011-05-20 | Use dereference when processing RFC2307bis nested groups | Jakub Hrozek | 1 | -1/+1 | |
Instead of issuing N LDAP requests when processing a group with N users, utilize the dereference functionality to pull down all the members in a single LDAP request. https://fedorahosted.org/sssd/ticket/799 | |||||
2011-04-27 | Add ldap_page_size configuration option | Stephen Gallagher | 1 | -1/+1 | |
2011-04-25 | Modify principal selection for keytab authentication | Jan Zeleny | 1 | -1/+1 | |
Currently we construct the principal as host/fqdn@REALM. The problem with this is that this principal doesn't have to be in the keytab. In that case the provider fails to start. It is better to scan the keytab and find the most suitable principal to use. Only in case no suitable principal is found the backend should fail to start. The second issue solved by this patch is that the realm we are authenticating the machine to can be in general different from the realm our users are part of (in case of cross Kerberos trust). The patch adds new configuration option SDAP_SASL_REALM. https://fedorahosted.org/sssd/ticket/781 | |||||
2011-04-25 | Allow new option to specify principal for FAST | Jan Zeleny | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/700 | |||||
2011-02-22 | Add krb5_realm to the basic IPA options | Stephen Gallagher | 1 | -0/+1 | |
Previously, this was only handled by the internal LDAP and Kerberos providers, but this wasn't available early enough to properly handle setting up the krb5_service for failover and creating the krb5info files. | |||||
2011-02-22 | Allow krb5_realm to override ipa_domain | Stephen Gallagher | 1 | -1/+2 | |
It is possible to set up FreeIPA servers where the Kerberos realm differs from the IPA domain name. We need to allow setting the krb5_realm explicitly to handle this. | |||||
2011-01-27 | Add option to disable TLS for LDAP auth | Stephen Gallagher | 1 | -1/+1 | |
Option is named to discourage use in production environments and is intentionally not listed in the SSSDConfig API. | |||||
2011-01-20 | Add ldap_tls_{cert,key,cipher_suite} config options | Tyson Whitehead | 1 | -1/+1 | |
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com> | |||||
2011-01-19 | Add ipa_hbac_search_base config option | Sumit Bose | 1 | -0/+1 | |
2011-01-17 | Add ldap_search_enumeration_timeout config option | Sumit Bose | 1 | -1/+1 | |
2010-12-07 | Add support for FAST in krb5 provider | Sumit Bose | 1 | -1/+1 | |
2010-12-06 | Add ldap_chpass_uri config option | Sumit Bose | 1 | -1/+1 | |
2010-12-06 | Add new account expired rule to LDAP access provider | Sumit Bose | 1 | -1/+1 | |
Two new options are added to the LDAP access provider to allow a broader range of access control rules to be evaluated. 'ldap_access_order' makes it possible to run more than one rule. To keep compatibility with older versions the default is 'filter'. This patch adds a new rule 'expire'. 'ldap_account_expire_policy' specifies which LDAP attribute should be used to determine if an account is expired or not. Currently only 'shadow' is supported which evaluates the ldap_user_shadow_expire attribute. | |||||
2010-12-03 | Add support for automatic Kerberos ticket renewal | Sumit Bose | 1 | -1/+1 | |
2010-12-03 | Add krb5_lifetime option | Sumit Bose | 1 | -1/+1 | |
2010-12-03 | Add krb5_renewable_lifetime option | Sumit Bose | 1 | -1/+1 | |
2010-10-22 | Add ldap_deref option | Sumit Bose | 1 | -1/+1 | |
2010-10-18 | Add option to limit nested groups | Simo Sorce | 1 | -1/+1 | |
2010-10-13 | Add infrastructure to LDAP provider for netgroup support | Sumit Bose | 1 | -1/+1 | |
2010-10-13 | Add KDC to the list of LDAP options | Jakub Hrozek | 1 | -1/+1 | |
2010-06-14 | Remove krb5_changepw_principal option | Jakub Hrozek | 1 | -1/+1 | |
Fixes: #531 |