sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2011-04-25	Modify principal selection for keytab authentication	Jan Zeleny	1	-2/+3
	Currently we construct the principal as host/fqdn@REALM. The problem with this is that this principal doesn't have to be in the keytab. In that case the provider fails to start. It is better to scan the keytab and find the most suitable principal to use. Only in case no suitable principal is found the backend should fail to start. The second issue solved by this patch is that the realm we are authenticating the machine to can be in general different from the realm our users are part of (in case of cross Kerberos trust). The patch adds new configuration option SDAP_SASL_REALM. https://fedorahosted.org/sssd/ticket/781
2010-10-13	Make ldap_child report kerberos return code to parent	Jakub Hrozek	1	-4/+9

2010-10-13	Report Kerberos error code from ldap_child_get_tgt_sync	Jakub Hrozek	1	-23/+16

2010-08-03	Validate keytab at startup	Jakub Hrozek	1	-48/+3
	In addition to validating the keytab everytime a TGT is requested, we also validate the keytab on back end startup to give early warning that the keytab is not usable. Fixes: #556
2010-08-03	Fix getting default realm in the ldap child	Jakub Hrozek	1	-1/+10

2010-07-09	Add syslog messages for LDAP GSSAPI bind	Stephen Gallagher	1	-2/+58
	We will now emit a level 0 debug message on keytab errors, and also write to the syslog (LOG_DAEMON)
2010-07-09	GSSAPI ticket expiry time is returned from ldap_child and stored in ↵	eindenbom	1	-7/+28
	sdap_handle for future reference.
2010-05-16	Add ldap_krb5_ticket_lifetime option	Sumit Bose	1	-3/+8

2010-03-25	Allow arbitrary-length PAM messages	Stephen Gallagher	1	-6/+6
	The PAM standard allows for messages of any length to be returned to the client. We were discarding all messages of length greater than 255. This patch dynamically allocates the message buffers so we can pass the complete message. This resolves https://fedorahosted.org/sssd/ticket/432
2010-03-03	Improve safe alignment buffer handling macros	Simo Sorce	1	-7/+7
	Make the counter optional so that alignment safe macros can be used also where there is no counter to update. Change arguments names so that they are not deceiving (ptr normlly identify a pointer) Turn the memcpy substitute into an inline function so that passing a pointer to rp and checking for it doesn't make the compiler spit lots of warnings.
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+429
	Also update BUILD.txt