summaryrefslogtreecommitdiff
path: root/src/providers/ipa
AgeCommit message (Expand)AuthorFilesLines
2011-08-29HBAC: Properly skip all non-group memberOf entriesStephen Gallagher1-1/+2
2011-08-26HBAC: Use of hostgroups for targethost or sourcehost was brokenStephen Gallagher1-4/+4
2011-08-26HBAC: Handle saving groups that have no membersStephen Gallagher1-7/+21
2011-08-26Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANONJakub Hrozek2-2/+3
2011-08-25IPA dyndns: do not segfault if the server cannot be resolvedJakub Hrozek1-4/+2
2011-08-15sysdb refactoring: memory context deletedJan Zeleny2-3/+3
2011-08-15sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny6-17/+12
2011-08-01Change the default value of ldap_tls_cacert in IPA providerJakub Hrozek1-1/+1
2011-08-01Add rule validator to libipa_hbacStephen Gallagher2-0/+74
2011-08-01Remove incorrect private variableStephen Gallagher1-1/+1
2011-07-29Fix incorrect NULL check in ipa_hbac_common.cStephen Gallagher1-1/+1
2011-07-29Fix memory leak in ipa_hbac_evaluate_rulesStephen Gallagher1-0/+1
2011-07-29libipa_hbac: Support case-insensitive comparisons with UTF8Stephen Gallagher1-16/+98
2011-07-21fo_get_server_name() getter for a server nameJakub Hrozek1-1/+9
2011-07-21Rename fo_get_server_name to fo_get_server_str_nameJakub Hrozek1-2/+2
2011-07-13Remove unused krb5_service structure memberJakub Hrozek1-2/+0
2011-07-11Check DNS records before updatingJakub Hrozek4-25/+470
2011-07-11Escape IP address in kdcinfoJakub Hrozek1-10/+10
2011-07-11Move IP adress escaping from the LDAP namespaceJakub Hrozek1-3/+3
2011-07-08Add LDAP access control based on NDS attributesSumit Bose1-1/+4
2011-07-08Treat NULL or empty rhost as unknownStephen Gallagher2-11/+25
2011-07-08Add ipa_hbac_treat_deny_as optionStephen Gallagher3-2/+13
2011-07-08Add ipa_hbac_refresh optionStephen Gallagher4-1/+21
2011-07-08Add new HBAC lookup and evaluation routinesStephen Gallagher2-124/+398
2011-07-08Remove old HBAC implementationStephen Gallagher2-1595/+1
2011-07-08Add helper functions for looking up HBAC rule componentsStephen Gallagher6-0/+2616
2011-07-08Add HBAC evaluator and testsStephen Gallagher3-0/+386
2011-07-05ipa_dyndns: Use sockaddr_storage for storing IP addressesJakub Hrozek1-12/+17
2011-06-30Use name based URI instead of IP address based URIsSumit Bose1-1/+1
2011-06-30Add sockaddr_storage to sdap_serviceSumit Bose1-0/+10
2011-06-21Log nsupdate messageJakub Hrozek1-0/+3
2011-06-15Switch resolver to using resolv_hostent and honor TTLJakub Hrozek1-2/+2
2011-06-02Escape IPv6 IP addresses in the IPA providerJakub Hrozek1-4/+26
2011-06-02Add utility function to return IP address as stringJakub Hrozek1-8/+2
2011-05-20Use dereference when processing RFC2307bis nested groupsJakub Hrozek2-2/+3
2011-04-29Fix order of arguments in select_principal_from_keytab() callJakub Hrozek1-1/+1
2011-04-29Fix segfault in IPA providerStephen Gallagher1-2/+2
2011-04-28Fix IPA config bug with SDAP_KRB5_REALMStephen Gallagher1-1/+1
2011-04-27Add ldap_page_size configuration optionStephen Gallagher2-2/+3
2011-04-25Modify principal selection for keytab authenticationJan Zeleny2-22/+54
2011-04-25Allow new option to specify principal for FASTJan Zeleny2-2/+3
2011-03-24Add host access control supportPierre Ossman1-1/+2
2011-03-03Fixes for dynamic DNS updateSumit Bose1-16/+87
2011-02-28Use realm for basedn instead of IPA domainJakub Hrozek4-48/+50
2011-02-22Fix uninitialized value error in ipa_get_id_options()Stephen Gallagher1-7/+7
2011-02-22Add krb5_realm to the basic IPA optionsStephen Gallagher2-2/+4
2011-02-22Allow krb5_realm to override ipa_domainStephen Gallagher3-18/+37
2011-02-17Point the IPA provider at the compat tree for netgroupsStephen Gallagher1-0/+19
2011-01-27Add option to disable TLS for LDAP authStephen Gallagher2-2/+6
2011-01-20Add ldap_tls_{cert,key,cipher_suite} config optionsTyson Whitehead2-1/+4