summaryrefslogtreecommitdiff
path: root/src/providers/ipa
AgeCommit message (Expand)AuthorFilesLines
2011-01-19Add ipa_hbac_search_base config optionSumit Bose4-54/+43
2011-01-19Add LDAP expire policy base RHDS/IPA attributeSumit Bose1-1/+2
2011-01-19Add LDAP expire policy based on AD attributesSumit Bose1-1/+3
2011-01-17Add ldap_search_enumeration_timeout config optionSumit Bose3-6/+7
2011-01-17Add timeout parameter to sdap_get_generic_send()Sumit Bose2-23/+34
2010-12-21Add authorizedService supportStephen Gallagher1-1/+2
2010-12-17Fix uninitialized value error in set_local_and_remote_host_infoStephen Gallagher1-1/+1
2010-12-17Fix unsafe return condition in ipa_access_handlerStephen Gallagher1-1/+6
2010-12-08Remove IPA_ACCESS_TIME defineStephen Gallagher1-13/+11
2010-12-08Bye, bye, ipa_timerulesSumit Bose2-1243/+0
2010-12-08Remove check_access_time() from IPA access providerSumit Bose2-70/+0
2010-12-07Replace krb5_kdcip by krb5_server in LDAP providerSumit Bose1-2/+2
2010-12-07ldap: Use USN entries if available.Simo Sorce1-1/+3
2010-12-07ldap: add checks to determine if USN features are available.Simo Sorce1-1/+1
2010-12-07Pass sdap_id_ctx in sdap_id_op functions.Simo Sorce1-3/+1
2010-12-07Add support for FAST in krb5 providerSumit Bose3-3/+5
2010-12-06Add ldap_chpass_uri config optionSumit Bose2-2/+4
2010-12-06Add new account expired rule to LDAP access providerSumit Bose2-2/+4
2010-12-03Add support for automatic Kerberos ticket renewalSumit Bose2-2/+3
2010-12-03Add krb5_lifetime optionSumit Bose2-2/+3
2010-12-03Add krb5_renewable_lifetime optionSumit Bose2-2/+3
2010-12-01Add check_online method to LDAP ID providerSumit Bose1-1/+2
2010-12-01Allow protocol fallback for SRV queriesJakub Hrozek1-1/+1
2010-11-19Use a more efficient host search filterSumit Bose1-5/+6
2010-11-15Sanitize sysdb search filters in the IPA providerStephen Gallagher1-2/+17
2010-10-22Download only enabled IPA HBAC rulesSumit Bose1-1/+3
2010-10-22Add ldap_deref optionSumit Bose2-2/+13
2010-10-19Option krb5_server is now used to store a list of KDCs instead of krb5_kdcip.Jan Zeleny1-1/+9
2010-10-18Add option to limit nested groupsSimo Sorce2-2/+3
2010-10-13Add infrastructure to LDAP provider for netgroup supportSumit Bose2-2/+35
2010-10-13Initialize kerberos service for GSSAPIJakub Hrozek1-0/+1
2010-10-13Add KDC to the list of LDAP optionsJakub Hrozek2-1/+2
2010-10-13Rename index to idxSumit Bose1-4/+4
2010-09-23Save all data to sysdb in one transactionSumit Bose1-222/+131
2010-09-23Handle host objects like other objectsSumit Bose2-129/+183
2010-09-15Store rootdse supported features in sdap_handlerSumit Bose1-2/+2
2010-09-07Cleaned some dead assignmentsJan Zeleny2-15/+13
2010-09-02Fix wrong return value in HBAC time rules evaluationJakub Hrozek1-0/+1
2010-08-03Fix check_time_rule() return value on failureJakub Hrozek1-1/+1
2010-07-23Fix IPA access backend handling of obsolete and missing HBAC entries:eindenbom1-9/+68
2010-07-23Do not treat missing HBAC rules as an errorSumit Bose1-0/+5
2010-07-09Use new LDAP connection framework in IPA dynamic DNS forwarder.eindenbom1-38/+122
2010-07-09Use new LDAP connection framework in IPA access backend.eindenbom3-308/+308
2010-06-30Add dns_discovery_domain optionJakub Hrozek1-1/+1
2010-06-14Remove krb5_changepw_principal optionJakub Hrozek2-2/+1
2010-06-10Avoid potential NULL dereferenceStephen Gallagher1-3/+5
2010-06-02Unify sdap and sysdb data handlingSumit Bose1-85/+104
2010-06-02Compare full service nameSumit Bose1-1/+2
2010-06-02Remove service groupsSumit Bose2-193/+7
2010-06-02Use new schema for HBAC service checksSumit Bose2-21/+641