summaryrefslogtreecommitdiff
path: root/src/providers/ipa
AgeCommit message (Collapse)AuthorFilesLines
2012-06-14Make krb5_ccname_template and krb5_ccachedir configurableJakub Hrozek1-2/+2
2012-06-13LDAP: Add ldap_*_use_matching_rule_in_chain optionsStephen Gallagher1-0/+2
2012-06-10IPA subdomains - ask for information about master domainJan Zeleny6-17/+164
The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain.
2012-05-31Add support for filtering atributesJan Zeleny5-7/+12
This patch adds support for filtering attributes when constructing attribute list from a map for LDAP query.
2012-05-22Fixed issue in SELinux user mapsJan Zeleny1-0/+2
There was an issue when IPA provider didn't set PAM_SUCCESS when successfully finished loading SELinux user maps. This lead to the map not being read in the responder.
2012-05-10Filter out IP addresses inappropriate for DNS forward recordsJakub Hrozek1-1/+57
https://fedorahosted.org/sssd/ticket/949
2012-05-10LDAP: Add attr_count return value to build_attrs_from_map()Stephen Gallagher5-7/+8
This is necessary because in several places in the code, we are appending to the attrs returned from this value, and if we relied on the map size macro, we would be appending after the NULL terminator if one or more attributes were defined as NULL.
2012-05-03LDAP: Map the user's primaryGroupIDStephen Gallagher1-0/+1
2012-05-03LDAP: Allow setting a default domain for id-mapping slice 0Stephen Gallagher1-0/+2
2012-05-03LDAP: Add autorid compatibility modeStephen Gallagher1-0/+1
2012-05-03LDAP: Add ID mapping range settingsStephen Gallagher1-0/+3
2012-05-03LDAP: Add id-mapping optionStephen Gallagher1-0/+1
2012-05-03LDAP: Add objectSID config optionStephen Gallagher1-0/+2
2012-05-03SSH: Add dp_get_host_send to common responder codeJakub Hrozek1-9/+6
Instead of using account_info request, creates a new ssh specific request. This improves code readability and will make the code more flexible in the future. https://fedorahosted.org/sssd/ticket/1176
2012-05-03IPA: Check return valuesJakub Hrozek2-2/+12
2012-05-02HBAC: Prevent NULL dereference in hbac_evaluateJakub Hrozek1-2/+4
'info' is optional parameter and can be set to NULL
2012-05-02ipa_get_config_send: remove unused assignmentJakub Hrozek1-1/+0
2012-05-02IPA netgroups: return EOK when there are no netgroups to processJakub Hrozek1-0/+1
If the code fell through the loop, ret would have been random value.
2012-05-01execv, excvp and exec_child never return EOKStef Walter1-5/+3
* So don't need to handle that case
2012-04-24Utilize sysdb context within be_req in HBACJan Zeleny1-2/+2
2012-04-24Detect subdomain request in IPA access providerJan Zeleny1-0/+10
2012-04-24Accept be_req instead if be_ctx in LDAP access providerJan Zeleny1-1/+1
2012-04-24Basic support for subdomains in auth providerJan Zeleny1-0/+6
2012-04-24Add ID operations in subdomainsJan Zeleny3-0/+276
2012-04-24Add s2n extended operationSumit Bose2-0/+667
2012-04-24IPA: Add get-domains targetSumit Bose6-0/+425
2012-04-18Prevent printing NULL from DEBUG messagesJakub Hrozek3-4/+4
2012-04-13Remove forgotten DEBUG messageJakub Hrozek1-2/+0
2012-04-05Use HTML_TIMESTAMP instead of HTML_FOOTER_DESCRIPTIONJakub Hrozek1-3/+4
https://fedorahosted.org/sssd/ticket/1271
2012-03-29Return correct resolv_status on resolver timeoutJakub Hrozek1-1/+6
https://fedorahosted.org/sssd/ticket/1274
2012-03-28Remove old compatibility testsStephen Gallagher2-31/+0
These are now replaced by the more accurate tests. This patch also drops the runtime option-count check, since we are always performing the more complete check at build-time.
2012-03-28Add terminator for sdap_attr_mapStephen Gallagher1-8/+18
2012-03-28Add terminator for dp_optionStephen Gallagher1-3/+6
2012-03-28Put dp_option maps in their own fileStephen Gallagher2-215/+249
There is no functional change due to this patch.
2012-03-16IPA: Allow service lookupsStephen Gallagher1-0/+1
2012-03-12IPA: Initialize hbac_ctx to NULLStephen Gallagher1-1/+1
2012-03-09IPA: Check nsAccountLock during PAM_ACCT_MGMTStephen Gallagher4-1/+69
https://fedorahosted.org/sssd/ticket/1227
2012-03-05IPA: Fix segfault with srchost functionality enabledStephen Gallagher1-1/+1
https://fedorahosted.org/sssd/ticket/1215
2012-03-01IPA: Set the DNS discovery domain to match ipa_domainStephen Gallagher1-1/+3
https://fedorahosted.org/sssd/ticket/1217
2012-02-26SSH: Save SSH host name aliasesJan Cholasta1-29/+8
2012-02-24Delete missing attributes from netgroups to be storedJan Zeleny1-1/+1
https://fedorahosted.org/sssd/ticket/1136
2012-02-24IPA hosts refactoringJan Zeleny15-152/+132
2012-02-24LDAP: Only use paging control on requests for multiple entriesStephen Gallagher6-15/+21
The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
2012-02-23Save errno value before calling DEBUGJakub Hrozek1-2/+4
2012-02-23IPA: Add ipa_parse_search_base()Stephen Gallagher1-9/+44
Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151
2012-02-21Don't give memory context in confdb where not neededJan Zeleny1-1/+1
2012-02-10Fixed issue with netgroup update in IPA providerJan Zeleny1-24/+34
This issue led to a netgroup with one triple (-,-,domain) when it contained no triples on the IPA server.
2012-02-10Use curly braces in pkgconfig metadata fileSumit Bose1-1/+1
2012-02-07AUTOFS: IPA providerJakub Hrozek4-27/+191
2012-02-07IPA: Add host info handlerJan Cholasta9-5/+444
generated by cgit (git 2.34.1) at 2024-11-18 17:49:01 +0000