summaryrefslogtreecommitdiff
path: root/src/providers/ipa
AgeCommit message (Collapse)AuthorFilesLines
2012-02-07AUTOFS: IPA providerJakub Hrozek4-27/+191
2012-02-07IPA: Add host info handlerJan Cholasta9-5/+444
2012-02-07LDAP: Add support for SSH user public keysJan Cholasta1-1/+2
2012-02-06Update shadowLastChanged attribute during LDAP password changeJan Zeleny2-1/+2
https://fedorahosted.org/sssd/ticket/1019
2012-02-06Session target in IPA providerJan Zeleny9-0/+1165
2012-02-06Delete unused structure in IPA access codeJan Zeleny1-7/+0
2012-02-06Separate the host-retrieval code from IPA HBAC to common IPA codeJan Zeleny6-469/+535
2012-02-06Renamed some sysdb constants for their wider usageJan Zeleny2-6/+6
2012-02-06Make password migration code use the IPA config retrieval codeJan Zeleny1-57/+14
2012-02-06Add support for generic IPA config retrievalJan Zeleny2-0/+208
2012-02-06Fixed minor memory-hierarchy-related issue in IPA HBACJan Zeleny1-1/+2
2012-02-06Implemented support for multiple search bases in HBAC rules and servicesJan Zeleny9-116/+364
2012-02-05AUTOFS: LDAP providerJakub Hrozek2-1/+26
2012-02-04NSS: Add individual timeouts for entry typesStephen Gallagher5-9/+11
https://fedorahosted.org/sssd/ticket/1016
2012-02-04LDAP: Do not fail if RootDSE check cannot determine search basesStephen Gallagher1-0/+7
https://fedorahosted.org/sssd/ticket/1152
2012-02-01Fixed wrong position of ldap_service_search_baseJan Zeleny1-1/+1
The wrong position in configuration directive array caused problems in IPA provider, which tried to fetch another value instead of the services lookup base.
2012-01-31IPA: Add support for services lookups (non-enum)Stephen Gallagher2-1/+41
2012-01-30docs: Use absolute srcdir pathJakub Hrozek1-1/+1
Building docs only worked in parallel builds. This patch uses abs_top_srcdir to make building documentation work in both parallel and in-tree builds.
2012-01-18LDAP: Add option to disable paging controlStephen Gallagher2-2/+3
Fixes https://fedorahosted.org/sssd/ticket/967
2012-01-17SUDO Integration - periodical update of rules in data providerPavel Březina2-1/+3
https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period)
2012-01-17SUDO Integration review issuesPavel Březina1-2/+2
2012-01-17IPA: Detect nsupdate support for the realm directiveStephen Gallagher1-14/+40
For older platforms, do not add the 'realm' line in the update message
2012-01-17Raise the debug level of two very noisy statementsStephen Gallagher1-2/+3
2012-01-14Support multiple search bases in HBACJan Zeleny5-39/+176
2012-01-06IPA netgroups: Do not reuse loop iterator variableJakub Hrozek1-3/+3
2012-01-06HBAC: create empty groups with one NULL elementJakub Hrozek1-16/+15
https://fedorahosted.org/sssd/ticket/1130
2011-12-19Pass sdap_id_ctx to online check from IPA providerJakub Hrozek3-1/+14
2011-12-19Move child_common routines to utilStephen Gallagher2-2/+2
2011-12-16SUDO Integration - LDAP configuration optionsPavel Březina2-1/+40
2011-12-16Export the function to convert ldb_result to sysdb_attrsJakub Hrozek1-1/+1
It will be reused later in the sudo responder
2011-12-12Add sdap_connection_expire_timeout optionStephen Gallagher2-2/+3
https://fedorahosted.org/sssd/ticket/1036
2011-12-12Fix uninitialized value error in ipa_netgroups.cStephen Gallagher1-0/+1
DEBUG message can print an unitialized value if the first netgroup has no members. Coverity 12382
2011-12-09Fixed IPA netgroup processingJan Zeleny3-2/+7
In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future.
2011-12-08Add ldap_sasl_minssf optionJan Zeleny2-1/+2
https://fedorahosted.org/sssd/ticket/1075
2011-12-05Allow using Glib for UTF8 supportStephen Gallagher1-33/+11
2011-11-29Add ipa_hbac_support_srchost option to IPA providerJan Zeleny6-36/+151
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
2011-11-29IPA migration fixesJakub Hrozek3-97/+141
* use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924
2011-11-29Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek1-1/+1
2011-11-28Fixed logically dead code in netgroup processingJan Zeleny1-1/+1
2011-11-28Fixed uninitialized pointer read in netgroups processingJan Zeleny1-0/+6
2011-11-25Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA providerJakub Hrozek2-2/+4
This was causing a segfault during HBAC processing and any ID lookups except for netgroups
2011-11-23Added IPA account info handlerJan Zeleny3-1/+373
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider.
2011-11-23Added support for fetching netgroups in IPA providerJan Zeleny1-0/+992
2011-11-23New IPA ID contextJan Zeleny3-22/+37
2011-11-23Added and modified options for IPA netgroupsJan Zeleny2-24/+69
2011-11-23Modified sdap_parse_search_base()Jan Zeleny1-4/+4
2011-11-22Cleanup: Remove unused parametersJakub Hrozek10-40/+6
2011-11-02Support to request canonicalization in LDAP/IPA providerJan Zeleny2-1/+2
https://fedorahosted.org/sssd/ticket/957
2011-11-02Add support to request canonicalization on krb AS requestsJan Zeleny2-2/+3
https://fedorahosted.org/sssd/ticket/957
2011-11-02LDAP: Add parser for multiple search basesStephen Gallagher1-0/+20