summaryrefslogtreecommitdiff
path: root/src/providers/ipa
AgeCommit message (Collapse)AuthorFilesLines
2012-02-24Delete missing attributes from netgroups to be storedJan Zeleny1-1/+1
https://fedorahosted.org/sssd/ticket/1136
2012-02-24IPA hosts refactoringJan Zeleny15-152/+132
2012-02-24LDAP: Only use paging control on requests for multiple entriesStephen Gallagher6-15/+21
The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
2012-02-23Save errno value before calling DEBUGJakub Hrozek1-2/+4
2012-02-23IPA: Add ipa_parse_search_base()Stephen Gallagher1-9/+44
Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151
2012-02-21Don't give memory context in confdb where not neededJan Zeleny1-1/+1
2012-02-10Fixed issue with netgroup update in IPA providerJan Zeleny1-24/+34
This issue led to a netgroup with one triple (-,-,domain) when it contained no triples on the IPA server.
2012-02-10Use curly braces in pkgconfig metadata fileSumit Bose1-1/+1
2012-02-07AUTOFS: IPA providerJakub Hrozek4-27/+191
2012-02-07IPA: Add host info handlerJan Cholasta9-5/+444
2012-02-07LDAP: Add support for SSH user public keysJan Cholasta1-1/+2
2012-02-06Update shadowLastChanged attribute during LDAP password changeJan Zeleny2-1/+2
https://fedorahosted.org/sssd/ticket/1019
2012-02-06Session target in IPA providerJan Zeleny9-0/+1165
2012-02-06Delete unused structure in IPA access codeJan Zeleny1-7/+0
2012-02-06Separate the host-retrieval code from IPA HBAC to common IPA codeJan Zeleny6-469/+535
2012-02-06Renamed some sysdb constants for their wider usageJan Zeleny2-6/+6
2012-02-06Make password migration code use the IPA config retrieval codeJan Zeleny1-57/+14
2012-02-06Add support for generic IPA config retrievalJan Zeleny2-0/+208
2012-02-06Fixed minor memory-hierarchy-related issue in IPA HBACJan Zeleny1-1/+2
2012-02-06Implemented support for multiple search bases in HBAC rules and servicesJan Zeleny9-116/+364
2012-02-05AUTOFS: LDAP providerJakub Hrozek2-1/+26
2012-02-04NSS: Add individual timeouts for entry typesStephen Gallagher5-9/+11
https://fedorahosted.org/sssd/ticket/1016
2012-02-04LDAP: Do not fail if RootDSE check cannot determine search basesStephen Gallagher1-0/+7
https://fedorahosted.org/sssd/ticket/1152
2012-02-01Fixed wrong position of ldap_service_search_baseJan Zeleny1-1/+1
The wrong position in configuration directive array caused problems in IPA provider, which tried to fetch another value instead of the services lookup base.
2012-01-31IPA: Add support for services lookups (non-enum)Stephen Gallagher2-1/+41
2012-01-30docs: Use absolute srcdir pathJakub Hrozek1-1/+1
Building docs only worked in parallel builds. This patch uses abs_top_srcdir to make building documentation work in both parallel and in-tree builds.
2012-01-18LDAP: Add option to disable paging controlStephen Gallagher2-2/+3
Fixes https://fedorahosted.org/sssd/ticket/967
2012-01-17SUDO Integration - periodical update of rules in data providerPavel Březina2-1/+3
https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period)
2012-01-17SUDO Integration review issuesPavel Březina1-2/+2
2012-01-17IPA: Detect nsupdate support for the realm directiveStephen Gallagher1-14/+40
For older platforms, do not add the 'realm' line in the update message
2012-01-17Raise the debug level of two very noisy statementsStephen Gallagher1-2/+3
2012-01-14Support multiple search bases in HBACJan Zeleny5-39/+176
2012-01-06IPA netgroups: Do not reuse loop iterator variableJakub Hrozek1-3/+3
2012-01-06HBAC: create empty groups with one NULL elementJakub Hrozek1-16/+15
https://fedorahosted.org/sssd/ticket/1130
2011-12-19Pass sdap_id_ctx to online check from IPA providerJakub Hrozek3-1/+14
2011-12-19Move child_common routines to utilStephen Gallagher2-2/+2
2011-12-16SUDO Integration - LDAP configuration optionsPavel Březina2-1/+40
2011-12-16Export the function to convert ldb_result to sysdb_attrsJakub Hrozek1-1/+1
It will be reused later in the sudo responder
2011-12-12Add sdap_connection_expire_timeout optionStephen Gallagher2-2/+3
https://fedorahosted.org/sssd/ticket/1036
2011-12-12Fix uninitialized value error in ipa_netgroups.cStephen Gallagher1-0/+1
DEBUG message can print an unitialized value if the first netgroup has no members. Coverity 12382
2011-12-09Fixed IPA netgroup processingJan Zeleny3-2/+7
In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future.
2011-12-08Add ldap_sasl_minssf optionJan Zeleny2-1/+2
https://fedorahosted.org/sssd/ticket/1075
2011-12-05Allow using Glib for UTF8 supportStephen Gallagher1-33/+11
2011-11-29Add ipa_hbac_support_srchost option to IPA providerJan Zeleny6-36/+151
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
2011-11-29IPA migration fixesJakub Hrozek3-97/+141
* use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924
2011-11-29Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek1-1/+1
2011-11-28Fixed logically dead code in netgroup processingJan Zeleny1-1/+1
2011-11-28Fixed uninitialized pointer read in netgroups processingJan Zeleny1-0/+6
2011-11-25Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA providerJakub Hrozek2-2/+4
This was causing a segfault during HBAC processing and any ID lookups except for netgroups
2011-11-23Added IPA account info handlerJan Zeleny3-1/+373
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider.