Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2011-12-08 | Add ldap_sasl_minssf option | Jan Zeleny | 2 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/1075 | |||||
2011-12-05 | Allow using Glib for UTF8 support | Stephen Gallagher | 1 | -33/+11 | |
2011-11-29 | Add ipa_hbac_support_srchost option to IPA provider | Jan Zeleny | 6 | -36/+151 | |
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078 | |||||
2011-11-29 | IPA migration fixes | Jakub Hrozek | 3 | -97/+141 | |
* use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924 | |||||
2011-11-29 | Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connections | Jakub Hrozek | 1 | -1/+1 | |
2011-11-28 | Fixed logically dead code in netgroup processing | Jan Zeleny | 1 | -1/+1 | |
2011-11-28 | Fixed uninitialized pointer read in netgroups processing | Jan Zeleny | 1 | -0/+6 | |
2011-11-25 | Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA provider | Jakub Hrozek | 2 | -2/+4 | |
This was causing a segfault during HBAC processing and any ID lookups except for netgroups | |||||
2011-11-23 | Added IPA account info handler | Jan Zeleny | 3 | -1/+373 | |
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider. | |||||
2011-11-23 | Added support for fetching netgroups in IPA provider | Jan Zeleny | 1 | -0/+992 | |
2011-11-23 | New IPA ID context | Jan Zeleny | 3 | -22/+37 | |
2011-11-23 | Added and modified options for IPA netgroups | Jan Zeleny | 2 | -24/+69 | |
2011-11-23 | Modified sdap_parse_search_base() | Jan Zeleny | 1 | -4/+4 | |
2011-11-22 | Cleanup: Remove unused parameters | Jakub Hrozek | 10 | -40/+6 | |
2011-11-02 | Support to request canonicalization in LDAP/IPA provider | Jan Zeleny | 2 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | Add support to request canonicalization on krb AS requests | Jan Zeleny | 2 | -2/+3 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | LDAP: Add parser for multiple search bases | Stephen Gallagher | 1 | -0/+20 | |
2011-10-17 | Add a missing break | Jakub Hrozek | 1 | -0/+1 | |
2011-10-14 | HBAC: Use originalMember for identifying hostgroups | Stephen Gallagher | 3 | -45/+165 | |
2011-10-14 | HBAC: Use originalMember for identifying servicegroups | Stephen Gallagher | 3 | -41/+169 | |
2011-10-14 | HBAC: Do not save member/memberOf links | Stephen Gallagher | 1 | -120/+0 | |
We can just trust the values from the FreeIPA server | |||||
2011-09-28 | HBAC: fix typos preventing proper hostgroup evaluation | Stephen Gallagher | 1 | -3/+3 | |
2011-09-28 | IPA access: hostname comparison should be case-insensitive | Jakub Hrozek | 1 | -1/+1 | |
2011-09-28 | Multiline macro cleanup | Jakub Hrozek | 2 | -2/+2 | |
This is mostly a cosmetic patch. The purpose of wrapping a multi-line macro in a do { } while(0) is to make the macro usable as a regular statement, not a compound statement. When the while(0) is terminated with a semicolon, the do { } while(0); block becomes a compound statement again. | |||||
2011-09-08 | Improve documentation of libipa_hbac | Stephen Gallagher | 2 | -21/+1697 | |
2011-09-07 | Do not access memory out of bounds | Sumit Bose | 1 | -2/+2 | |
2011-08-29 | HBAC: Properly skip all non-group memberOf entries | Stephen Gallagher | 1 | -1/+2 | |
2011-08-26 | HBAC: Use of hostgroups for targethost or sourcehost was broken | Stephen Gallagher | 1 | -4/+4 | |
We were trying to look up the wrong attribute for the name of the hostgroup. | |||||
2011-08-26 | HBAC: Handle saving groups that have no members | Stephen Gallagher | 1 | -7/+21 | |
2011-08-26 | Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON | Jakub Hrozek | 2 | -2/+3 | |
https://fedorahosted.org/sssd/ticket/978 | |||||
2011-08-25 | IPA dyndns: do not segfault if the server cannot be resolved | Jakub Hrozek | 1 | -4/+2 | |
https://fedorahosted.org/sssd/ticket/963 | |||||
2011-08-15 | sysdb refactoring: memory context deleted | Jan Zeleny | 2 | -3/+3 | |
This patch deletes memory context parameter in those places in sysdb where it is not necessary. The code using modified functions has been updated. Tests updated as well. | |||||
2011-08-15 | sysdb refactoring: deleted domain variables in sysdb API | Jan Zeleny | 6 | -17/+12 | |
The patch also updates code using modified functions. Tests have also been adjusted. | |||||
2011-08-01 | Change the default value of ldap_tls_cacert in IPA provider | Jakub Hrozek | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/944 | |||||
2011-08-01 | Add rule validator to libipa_hbac | Stephen Gallagher | 2 | -0/+74 | |
https://fedorahosted.org/sssd/ticket/943 | |||||
2011-08-01 | Remove incorrect private variable | Stephen Gallagher | 1 | -1/+1 | |
This caused no ill effects, since it wasn't used in the callback. However, it is a layering violation (especially since req is freed in the callback) | |||||
2011-07-29 | Fix incorrect NULL check in ipa_hbac_common.c | Stephen Gallagher | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/936 | |||||
2011-07-29 | Fix memory leak in ipa_hbac_evaluate_rules | Stephen Gallagher | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/933 | |||||
2011-07-29 | libipa_hbac: Support case-insensitive comparisons with UTF8 | Stephen Gallagher | 1 | -16/+98 | |
2011-07-21 | fo_get_server_name() getter for a server name | Jakub Hrozek | 1 | -1/+9 | |
Allows to be more concise in tests and more defensive in resolve callbacks | |||||
2011-07-21 | Rename fo_get_server_name to fo_get_server_str_name | Jakub Hrozek | 1 | -2/+2 | |
2011-07-13 | Remove unused krb5_service structure member | Jakub Hrozek | 1 | -2/+0 | |
2011-07-11 | Check DNS records before updating | Jakub Hrozek | 4 | -25/+470 | |
https://fedorahosted.org/sssd/ticket/802 | |||||
2011-07-11 | Escape IP address in kdcinfo | Jakub Hrozek | 1 | -10/+10 | |
https://fedorahosted.org/sssd/ticket/909 | |||||
2011-07-11 | Move IP adress escaping from the LDAP namespace | Jakub Hrozek | 1 | -3/+3 | |
2011-07-08 | Add LDAP access control based on NDS attributes | Sumit Bose | 1 | -1/+4 | |
2011-07-08 | Treat NULL or empty rhost as unknown | Stephen Gallagher | 2 | -11/+25 | |
Previously, we were assuming this meant it was coming from the localhost, but this is not a safe assumption. We will now treat it as unknown and it will fail to match any rule that requires a specified srchost or group of srchosts. | |||||
2011-07-08 | Add ipa_hbac_treat_deny_as option | Stephen Gallagher | 3 | -2/+13 | |
By default, we will treat the presence of any DENY rule as denying all users. This option will allow the admin to explicitly ignore DENY rules during a transitional period. | |||||
2011-07-08 | Add ipa_hbac_refresh option | Stephen Gallagher | 4 | -1/+21 | |
This option describes the time between refreshes of the HBAC rules on the IPA server. | |||||
2011-07-08 | Add new HBAC lookup and evaluation routines | Stephen Gallagher | 2 | -124/+398 | |