sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-05-07	Compare the full service name	Sumit Bose	1	-1/+2

2010-05-07	Create kdcinfo and kpasswdinfo file at startup	Sumit Bose	1	-0/+9

2010-05-07	Fix memory hierarchy in the ipa timerules	Jakub Hrozek	1	-4/+4

2010-05-03	Fix a wrong return value in IPA HBAC	Sumit Bose	1	-2/+2

2010-05-03	Better handle sdap_handle memory from callers.	Simo Sorce	1	-8/+0
	Always just mark the sdap_handle as not connected and let later _send() functions to take care of freeing the handle before reconnecting. Introduce restart functions to avoid calling _send() functions in _done() functions error paths as this would have the same effect as directly freeing the sdap_handle and cause access to freed memory in sdap_handle_release() By freeing sdap_handle only in the connection _recv() function we guarantee it can never be done within sdap_handle_release() but only in a following event.
2010-04-16	Make ID provider init functions clearer	Stephen Gallagher	1	-5/+5
	Using sssm__init() as the name of the initialization function for identity providers was a holdover from earlier development when we thought we would only have a single "provider" entry in the config file. As we have now separated out the initialization functions for auth, chpass and access, we should rename sssm__init() to sssm_*_id_init() for a cleaner interface.
2010-04-12	sysdb: remove remaining traces of sysdb_handle	Simo Sorce	1	-4/+0

2010-04-12	Remove remaining use of sysdb_transaction_send	Simo Sorce	1	-69/+25

2010-04-12	sysdb: convert sysdb_asq_search	Simo Sorce	1	-150/+69

2010-04-12	sysdb: convert sysdb_store_custom	Simo Sorce	1	-113/+35

2010-04-12	sysdb: convert sysdb_search_custom	Simo Sorce	1	-42/+60

2010-04-12	sysdb: convert sysdb_search_user_by_name/uid	Simo Sorce	1	-61/+14

2010-04-12	sysdb: convert sysdb_search_entry and sysdb_delete_recursive	Simo Sorce	1	-25/+5

2010-03-25	Fix LDAP search paths for IPA HBAC	Sumit Bose	5	-43/+81
	- use domain_to_basedn() to construct LDAP search paths for IPA HBAC - move domain_to_basedn() to a separate file to simplify the build of a test
2010-03-25	Add krb5_kpasswd to IPA provider	Eugene Indenbom	2	-2/+3
	The krb5 options were out of sync, causing a runtime abort.
2010-03-25	Regression test against RHBZ #576856	Jakub Hrozek	2	-5/+5

2010-03-12	Add krb5_kpasswd option	Sumit Bose	1	-2/+3

2010-03-11	Write the IP address of the KDC to the kdcinfo file	Sumit Bose	1	-3/+11

2010-02-23	Better cleanup task handling	Jakub Hrozek	2	-2/+3
	Implements a different mechanism for cleanup task. Instead of just deleting expired entries, this patch adds a new option account_cache_expiration for domains. If an entry is expired and the last login was more days in the past that account_cache_expiration, the entry is deleted. Groups are deleted if they are expired and and no user references them (no user has memberof: attribute pointing at that group). The parameter account_cache_expiration is not LDAP-specific, so that other future backends might use the same timeout setting. Fixes: #391
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	9	-0/+4449
	Also update BUILD.txt