sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2011-11-22	Cleanup: Remove unused parameters	Jakub Hrozek	1	-2/+1

2011-09-28	Multiline macro cleanup	Jakub Hrozek	1	-2/+2
	This is mostly a cosmetic patch. The purpose of wrapping a multi-line macro in a do { } while(0) is to make the macro usable as a regular statement, not a compound statement. When the while(0) is terminated with a semicolon, the do { } while(0); block becomes a compound statement again.
2011-09-06	Improve error message for LDAP password constraint violation	Jakub Hrozek	1	-11/+16
	https://fedorahosted.org/sssd/ticket/985
2011-08-25	Improve password policy error code and message	Sumit Bose	1	-4/+9
	Instead of returning PAM_SYSTEM_ERR if they necessary attributes for the requested password policy cannot be found we return PAM_PERM_DENIED. Additionally the log message says that the access is denied.
2011-08-15	sysdb refactoring: memory context deleted	Jan Zeleny	1	-2/+1
	This patch deletes memory context parameter in those places in sysdb where it is not necessary. The code using modified functions has been updated. Tests updated as well.
2011-08-15	sysdb refactoring: deleted domain variables in sysdb API	Jan Zeleny	1	-2/+1
	The patch also updates code using modified functions. Tests have also been adjusted.
2011-06-30	Use ldap_init_fd() instead of ldap_initialize() if available	Sumit Bose	1	-1/+2

2011-06-16	Do not check pwdAttribute	Sumit Bose	1	-9/+0
	It is not safe to check pwdAttribute to see if server side password policies are active. Only if a LDAP_CONTROL_PASSWORDPOLICYRESPONSE is present the bind response we can assume that there is a server side password policy.
2011-04-08	Fix unchecked return values of pam_add_response	Jakub Hrozek	1	-2/+7
	https://fedorahosted.org/sssd/ticket/798
2011-02-16	Do not attempt to use START_TLS on SSL connections	Stephen Gallagher	1	-9/+17
	Not all LDAP servers are capable of handling dual-encryption with both TLS and SSL. https://fedorahosted.org/sssd/ticket/795
2011-01-27	Add option to disable TLS for LDAP auth	Stephen Gallagher	1	-1/+13
	Option is named to discourage use in production environments and is intentionally not listed in the SSSDConfig API.
2011-01-19	Fix return value check	Sumit Bose	1	-2/+2

2010-12-06	Add ldap_chpass_uri config option	Sumit Bose	1	-5/+14

2010-12-06	Make string_to_shadowpw_days() public	Sumit Bose	1	-33/+0

2010-11-19	Fix offline detection for LDAP auth/chpass	Sumit Bose	1	-5/+13

2010-10-04	Return offline instead of error	Stephen Gallagher	1	-1/+2
	When the failover code returns that there are no available servers while we are marked offline, we were returning an error to the PAM authentication code. Instead, we should return success with a result value of SDAP_UNAVAIL so that the PAM responder will mark the domain offline and attempt offline authentication.
2010-08-24	Treat a zero-length password as a failure	Stephen Gallagher	1	-0/+7
	Some LDAP servers allow binding with blank passwords. We should not allow a blank password to authenticate the SSSD.
2010-08-04	Fix chpass operations with LDAP provider	Stephen Gallagher	1	-0/+1
	The initial verification of the old password was returning an error because we were not explicitly setting dp_err to DP_ERR_SUCCESS and it was initialized earlier in the function to DP_ERR_FATAL.
2010-05-07	Add more warnings about nearly expired passwords	Sumit Bose	1	-5/+66
	For the shadow and mit_kerberos password policy warnings are sent to the client if the password is about to expire.
2010-05-07	Use all available servers in LDAP provider	Jakub Hrozek	1	-6/+33

2010-04-26	Display a message if a password reset by root fails	Sumit Bose	1	-0/+8

2010-04-12	sysdb: convert sysdb_get_user_attr	Simo Sorce	1	-134/+69

2010-04-12	sysdb: convert sysdb_cache_password	Simo Sorce	1	-32/+11

2010-03-25	Fix warnings from -Wmissing-field-initializers	Sumit Bose	1	-1/+3
	This patch removes some tab-indentations from pamsrv.c, too.
2010-03-22	Improvements for LDAP Password Policy support	Ralf Haferkamp	1	-2/+50
	Display warnings about remaining grace logins and password expiration to the user, when LDAP Password Policies are used. Improved detection if LDAP Password policies are supported by LDAP Server.
2010-03-15	Fixed authentication check for CHAUTHTOK_PRELIM	Ralf Haferkamp	1	-1/+1
	When changing passwords, treat SDAP_AUTH_PW_EXPIRED as a successful authentication in SSS_PAM_CHAUTHTOK_PRELIM.
2010-02-23	Handle expired passwords like other PAM modules	Sumit Bose	1	-1/+1
	So far we handled expired password during authentication. Other PAM modules typically detect expired password during account management and return PAM_NEW_AUTHTOK_REQD if the password is expired and should be changed. The PAM library then calls the change password routines. To meet these standards pam_sss is change accordingly. As a result it is now possible to update an expired password via ssh if sssd is running with PasswordAuthentication=yes. One drawback due to limitations of PAM is that the user now has to type his current password again before setting a new one.
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+1055
	Also update BUILD.txt