Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-01-30 | docs: Use absolute srcdir path | Jakub Hrozek | 1 | -1/+1 | |
Building docs only worked in parallel builds. This patch uses abs_top_srcdir to make building documentation work in both parallel and in-tree builds. | |||||
2012-01-18 | LDAP: Add option to disable paging control | Stephen Gallagher | 2 | -2/+3 | |
Fixes https://fedorahosted.org/sssd/ticket/967 | |||||
2012-01-17 | SUDO Integration - periodical update of rules in data provider | Pavel Březina | 2 | -1/+3 | |
https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period) | |||||
2012-01-17 | SUDO Integration review issues | Pavel Březina | 1 | -2/+2 | |
2012-01-17 | IPA: Detect nsupdate support for the realm directive | Stephen Gallagher | 1 | -14/+40 | |
For older platforms, do not add the 'realm' line in the update message | |||||
2012-01-17 | Raise the debug level of two very noisy statements | Stephen Gallagher | 1 | -2/+3 | |
2012-01-14 | Support multiple search bases in HBAC | Jan Zeleny | 5 | -39/+176 | |
2012-01-06 | IPA netgroups: Do not reuse loop iterator variable | Jakub Hrozek | 1 | -3/+3 | |
2012-01-06 | HBAC: create empty groups with one NULL element | Jakub Hrozek | 1 | -16/+15 | |
https://fedorahosted.org/sssd/ticket/1130 | |||||
2011-12-19 | Pass sdap_id_ctx to online check from IPA provider | Jakub Hrozek | 3 | -1/+14 | |
2011-12-19 | Move child_common routines to util | Stephen Gallagher | 2 | -2/+2 | |
2011-12-16 | SUDO Integration - LDAP configuration options | Pavel Březina | 2 | -1/+40 | |
2011-12-16 | Export the function to convert ldb_result to sysdb_attrs | Jakub Hrozek | 1 | -1/+1 | |
It will be reused later in the sudo responder | |||||
2011-12-12 | Add sdap_connection_expire_timeout option | Stephen Gallagher | 2 | -2/+3 | |
https://fedorahosted.org/sssd/ticket/1036 | |||||
2011-12-12 | Fix uninitialized value error in ipa_netgroups.c | Stephen Gallagher | 1 | -0/+1 | |
DEBUG message can print an unitialized value if the first netgroup has no members. Coverity 12382 | |||||
2011-12-09 | Fixed IPA netgroup processing | Jan Zeleny | 3 | -2/+7 | |
In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future. | |||||
2011-12-08 | Add ldap_sasl_minssf option | Jan Zeleny | 2 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/1075 | |||||
2011-12-05 | Allow using Glib for UTF8 support | Stephen Gallagher | 1 | -33/+11 | |
2011-11-29 | Add ipa_hbac_support_srchost option to IPA provider | Jan Zeleny | 6 | -36/+151 | |
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078 | |||||
2011-11-29 | IPA migration fixes | Jakub Hrozek | 3 | -97/+141 | |
* use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924 | |||||
2011-11-29 | Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connections | Jakub Hrozek | 1 | -1/+1 | |
2011-11-28 | Fixed logically dead code in netgroup processing | Jan Zeleny | 1 | -1/+1 | |
2011-11-28 | Fixed uninitialized pointer read in netgroups processing | Jan Zeleny | 1 | -0/+6 | |
2011-11-25 | Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA provider | Jakub Hrozek | 2 | -2/+4 | |
This was causing a segfault during HBAC processing and any ID lookups except for netgroups | |||||
2011-11-23 | Added IPA account info handler | Jan Zeleny | 3 | -1/+373 | |
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider. | |||||
2011-11-23 | Added support for fetching netgroups in IPA provider | Jan Zeleny | 1 | -0/+992 | |
2011-11-23 | New IPA ID context | Jan Zeleny | 3 | -22/+37 | |
2011-11-23 | Added and modified options for IPA netgroups | Jan Zeleny | 2 | -24/+69 | |
2011-11-23 | Modified sdap_parse_search_base() | Jan Zeleny | 1 | -4/+4 | |
2011-11-22 | Cleanup: Remove unused parameters | Jakub Hrozek | 10 | -40/+6 | |
2011-11-02 | Support to request canonicalization in LDAP/IPA provider | Jan Zeleny | 2 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | Add support to request canonicalization on krb AS requests | Jan Zeleny | 2 | -2/+3 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | LDAP: Add parser for multiple search bases | Stephen Gallagher | 1 | -0/+20 | |
2011-10-17 | Add a missing break | Jakub Hrozek | 1 | -0/+1 | |
2011-10-14 | HBAC: Use originalMember for identifying hostgroups | Stephen Gallagher | 3 | -45/+165 | |
2011-10-14 | HBAC: Use originalMember for identifying servicegroups | Stephen Gallagher | 3 | -41/+169 | |
2011-10-14 | HBAC: Do not save member/memberOf links | Stephen Gallagher | 1 | -120/+0 | |
We can just trust the values from the FreeIPA server | |||||
2011-09-28 | HBAC: fix typos preventing proper hostgroup evaluation | Stephen Gallagher | 1 | -3/+3 | |
2011-09-28 | IPA access: hostname comparison should be case-insensitive | Jakub Hrozek | 1 | -1/+1 | |
2011-09-28 | Multiline macro cleanup | Jakub Hrozek | 2 | -2/+2 | |
This is mostly a cosmetic patch. The purpose of wrapping a multi-line macro in a do { } while(0) is to make the macro usable as a regular statement, not a compound statement. When the while(0) is terminated with a semicolon, the do { } while(0); block becomes a compound statement again. | |||||
2011-09-08 | Improve documentation of libipa_hbac | Stephen Gallagher | 2 | -21/+1697 | |
2011-09-07 | Do not access memory out of bounds | Sumit Bose | 1 | -2/+2 | |
2011-08-29 | HBAC: Properly skip all non-group memberOf entries | Stephen Gallagher | 1 | -1/+2 | |
2011-08-26 | HBAC: Use of hostgroups for targethost or sourcehost was broken | Stephen Gallagher | 1 | -4/+4 | |
We were trying to look up the wrong attribute for the name of the hostgroup. | |||||
2011-08-26 | HBAC: Handle saving groups that have no members | Stephen Gallagher | 1 | -7/+21 | |
2011-08-26 | Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON | Jakub Hrozek | 2 | -2/+3 | |
https://fedorahosted.org/sssd/ticket/978 | |||||
2011-08-25 | IPA dyndns: do not segfault if the server cannot be resolved | Jakub Hrozek | 1 | -4/+2 | |
https://fedorahosted.org/sssd/ticket/963 | |||||
2011-08-15 | sysdb refactoring: memory context deleted | Jan Zeleny | 2 | -3/+3 | |
This patch deletes memory context parameter in those places in sysdb where it is not necessary. The code using modified functions has been updated. Tests updated as well. | |||||
2011-08-15 | sysdb refactoring: deleted domain variables in sysdb API | Jan Zeleny | 6 | -17/+12 | |
The patch also updates code using modified functions. Tests have also been adjusted. | |||||
2011-08-01 | Change the default value of ldap_tls_cacert in IPA provider | Jakub Hrozek | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/944 |