summaryrefslogtreecommitdiff
path: root/src/providers/ipa/ipa_hbac_common.c
AgeCommit message (Collapse)AuthorFilesLines
2012-01-06HBAC: create empty groups with one NULL elementJakub Hrozek1-16/+15
https://fedorahosted.org/sssd/ticket/1130
2011-11-29Add ipa_hbac_support_srchost option to IPA providerJan Zeleny1-0/+3
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
2011-11-22Cleanup: Remove unused parametersJakub Hrozek1-7/+1
2011-10-17Add a missing breakJakub Hrozek1-0/+1
2011-10-14HBAC: Use originalMember for identifying hostgroupsStephen Gallagher1-45/+51
2011-10-14HBAC: Use originalMember for identifying servicegroupsStephen Gallagher1-41/+55
2011-10-14HBAC: Do not save member/memberOf linksStephen Gallagher1-120/+0
We can just trust the values from the FreeIPA server
2011-09-28HBAC: fix typos preventing proper hostgroup evaluationStephen Gallagher1-3/+3
2011-09-28Multiline macro cleanupJakub Hrozek1-1/+1
This is mostly a cosmetic patch. The purpose of wrapping a multi-line macro in a do { } while(0) is to make the macro usable as a regular statement, not a compound statement. When the while(0) is terminated with a semicolon, the do { } while(0); block becomes a compound statement again.
2011-08-26HBAC: Handle saving groups that have no membersStephen Gallagher1-7/+21
2011-08-15sysdb refactoring: memory context deletedJan Zeleny1-2/+2
This patch deletes memory context parameter in those places in sysdb where it is not necessary. The code using modified functions has been updated. Tests updated as well.
2011-08-15sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny1-7/+5
The patch also updates code using modified functions. Tests have also been adjusted.
2011-07-29Fix incorrect NULL check in ipa_hbac_common.cStephen Gallagher1-1/+1
https://fedorahosted.org/sssd/ticket/936
2011-07-08Treat NULL or empty rhost as unknownStephen Gallagher1-9/+21
Previously, we were assuming this meant it was coming from the localhost, but this is not a safe assumption. We will now treat it as unknown and it will fail to match any rule that requires a specified srchost or group of srchosts.
2011-07-08Add helper functions for looking up HBAC rule componentsStephen Gallagher1-0/+871