sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2012-07-06	AD: Add AD auth and chpass providers	Stephen Gallagher	1	-0/+4
	These new providers take advantage of existing code for the KRB5 provider, providing sensible defaults for operating against an Active Directory 2008 R2 or later server.
2012-07-06	KRB5: Drop memctx parameter of krb5_try_kdcip	Stephen Gallagher	1	-3/+2
	This function is not supposed to return any newly-allocated memory directly. It was actually leaking the memory for krb5_servers if krb5_kdcip was being used, though it was undetectable because it was allocated on the provided memctx. This patch removes the memctx parameter and allocates krb5_servers temporarily on NULL and ensures that it is freed on all exit conditions. It is not necessary to retain this memory, as dp_opt_set_string() performs a talloc_strdup onto the appropriate context internally. It also updates the DEBUG messages for this function to the appropriate new macro levels.
2012-06-14	Add a credential cache back end structure	Jakub Hrozek	1	-0/+3
	To be able to add support for new credential cache types easily, this patch creates a new structure sss_krb5_cc_be that defines common operations with a credential cache, such as create, check if used or remove.
2011-11-02	Add support to request canonicalization on krb AS requests	Jan Zeleny	1	-0/+2
	https://fedorahosted.org/sssd/ticket/957
2011-07-13	Remove unused krb5_service structure member	Jakub Hrozek	1	-1/+0

2011-04-25	Allow new option to specify principal for FAST	Jan Zeleny	1	-0/+2
	https://fedorahosted.org/sssd/ticket/700
2010-12-20	Serialize requests of the same user in the krb5 provider	Sumit Bose	1	-0/+2

2010-12-07	Replace krb5_kdcip by krb5_server in LDAP provider	Sumit Bose	1	-1/+2

2010-12-07	Add support for FAST in krb5 provider	Sumit Bose	1	-1/+5

2010-12-03	Add support for automatic Kerberos ticket renewal	Sumit Bose	1	-0/+3

2010-12-03	krb5_child returns TGT lifetime	Sumit Bose	1	-0/+7

2010-12-03	Add krb5_lifetime option	Sumit Bose	1	-0/+2

2010-12-03	Add krb5_renewable_lifetime option	Sumit Bose	1	-0/+2

2010-11-04	Add krb5_get_simple_upn()	Sumit Bose	1	-0/+2

2010-10-19	Option krb5_server is now used to store a list of KDCs instead of krb5_kdcip.	Jan Zeleny	1	-0/+3
	For the time being, if krb5_server is not found, still falls back to krb5_kdcip with a warning. If both options are present in config file, krb5_server has a higher priority. Fixes: #543
2010-10-13	Initialize kerberos service for GSSAPI	Jakub Hrozek	1	-0/+6

2010-06-14	Remove krb5_changepw_principal option	Jakub Hrozek	1	-2/+0
	Fixes: #531
2010-05-27	Refactor krb5 SIGTERM handler installation	Sumit Bose	1	-0/+3

2010-05-27	Add callback to remove krb5 info files when going offline	Sumit Bose	1	-0/+52

2010-05-27	Revert "Create kdcinfo and kpasswdinfo file at startup"	Sumit Bose	1	-1/+0
	This reverts commit f3c31d11bf365eb6a79c4f698667915a4c81eeb7.
2010-05-26	Add support for delayed kinit if offline	Sumit Bose	1	-0/+1
	If the configuration option krb5_store_password_if_offline is set to true and the backend is offline the plain text user password is stored and used to request a TGT if the backend becomes online. If available the Linux kernel key retention service is used.
2010-05-07	Use service discovery in backends	Jakub Hrozek	1	-2/+2
	Integrate the failover improvements with our back ends. The DNS domain used in the SRV query is always the SSSD domain name. Please note that this patch changes the default value of ldap_uri from "ldap://localhost" to "NULL" in order to use service discovery with no server set.
2010-05-07	Create kdcinfo and kpasswdinfo file at startup	Sumit Bose	1	-0/+1

2010-05-07	Clean up kdcinfo and kpasswdinfo files when exiting	Stephen Gallagher	1	-0/+7

2010-03-12	Add krb5_kpasswd option	Sumit Bose	1	-1/+7

2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+72
	Also update BUILD.txt