Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-08-15 | Duplicate detection in fail over did not work. | Michal Zidek | 1 | -1/+6 | |
https://fedorahosted.org/sssd/ticket/1472 | |||||
2012-08-09 | SRV resolution for backup servers should not be permitted. | Michal Zidek | 1 | -1/+9 | |
https://fedorahosted.org/sssd/ticket/1463 | |||||
2012-08-06 | shadow attributes can contain -1 | Pavel Březina | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1393 | |||||
2012-08-01 | Primary server support: new options in krb5 provider | Jan Zeleny | 1 | -4/+3 | |
This patch adds support for new config options krb5_backup_server and krb5_backup_kpasswd. The description of this option's functionality is included in man page in one of previous patches. | |||||
2012-08-01 | Primary server support: LDAP adaptation | Jan Zeleny | 1 | -32/+79 | |
This patch adds support for the primary server functionality into LDAP provider. No backup servers are added at the moment, just the basic support is in place. | |||||
2012-08-01 | Primary server support: basic support in failover code | Jan Zeleny | 1 | -2/+2 | |
Now there are two list of servers for each service. If currently selected server is only backup, then an event will be scheduled which tries to get connection to one of primary servers and if it succeeds, it starts using this server instead of the one which is currently connected to. | |||||
2012-07-06 | LDAP: Rename user and group maps for AD | Stephen Gallagher | 1 | -2/+2 | |
This will eliminate ambiguity for the AD provider | |||||
2012-07-06 | KRB5: Drop memctx parameter of krb5_try_kdcip | Stephen Gallagher | 1 | -1/+1 | |
This function is not supposed to return any newly-allocated memory directly. It was actually leaking the memory for krb5_servers if krb5_kdcip was being used, though it was undetectable because it was allocated on the provided memctx. This patch removes the memctx parameter and allocates krb5_servers temporarily on NULL and ensures that it is freed on all exit conditions. It is not necessary to retain this memory, as dp_opt_set_string() performs a talloc_strdup onto the appropriate context internally. It also updates the DEBUG messages for this function to the appropriate new macro levels. | |||||
2012-06-29 | sudo ldap provider: load host filter configuration on init | Pavel Březina | 1 | -1/+9 | |
We need to load host information during provider initialization. Currently it loads only values from configuration files, but it is implemented as an asynchrounous request as it will later try to autodetect these settings (which will need to contact DNS). | |||||
2012-06-20 | Move some debug lines to new debug log levels | Stef Walter | 1 | -1/+1 | |
* These are common lines of debug output when starting up sssd https://bugzilla.redhat.com/show_bug.cgi?id=811113 | |||||
2012-05-31 | Add support for filtering atributes | Jan Zeleny | 1 | -1/+2 | |
This patch adds support for filtering attributes when constructing attribute list from a map for LDAP query. | |||||
2012-05-10 | LDAP: Add attr_count return value to build_attrs_from_map() | Stephen Gallagher | 1 | -4/+1 | |
This is necessary because in several places in the code, we are appending to the attrs returned from this value, and if we relied on the map size macro, we would be appending after the NULL terminator if one or more attributes were defined as NULL. | |||||
2012-05-03 | LDAP: Add helper routine to convert LDAP blob to SID string | Stephen Gallagher | 1 | -0/+37 | |
2012-03-28 | Put dp_option maps in their own file | Stephen Gallagher | 1 | -279/+2 | |
There is no functional change due to this patch. | |||||
2012-03-16 | Fix uninitialized variable | Jakub Hrozek | 1 | -1/+1 | |
2012-03-14 | LDAP: Add AD 2008r2 schema | Stephen Gallagher | 1 | -2/+49 | |
https://fedorahosted.org/sssd/ticket/1031 | |||||
2012-03-01 | IPA: Set the DNS discovery domain to match ipa_domain | Stephen Gallagher | 1 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/1217 | |||||
2012-02-24 | Modifications to simplify list_missing_attrs | Jan Zeleny | 1 | -6/+14 | |
2012-02-23 | IPA: Add ipa_parse_search_base() | Stephen Gallagher | 1 | -10/+23 | |
Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151 | |||||
2012-02-21 | Don't give memory context in confdb where not needed | Jan Zeleny | 1 | -1/+1 | |
2012-02-13 | Add missing breaks to switch statements | Stephen Gallagher | 1 | -0/+1 | |
Coverity #12525 and #12524 | |||||
2012-02-07 | LDAP: Add support for SSH user public keys | Jan Cholasta | 1 | -2/+4 | |
2012-02-06 | Update shadowLastChanged attribute during LDAP password change | Jan Zeleny | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1019 | |||||
2012-02-05 | AUTOFS: LDAP provider | Jakub Hrozek | 1 | -0/+106 | |
2012-02-04 | Move BUILD_SUDO outside the generic LDAP source files | Jakub Hrozek | 1 | -60/+0 | |
Avoid #ifdefs in the general part of the code | |||||
2012-02-04 | NSS: Add individual timeouts for entry types | Stephen Gallagher | 1 | -1/+0 | |
https://fedorahosted.org/sssd/ticket/1016 | |||||
2012-02-04 | LDAP: Do not fail if RootDSE check cannot determine search bases | Stephen Gallagher | 1 | -3/+2 | |
https://fedorahosted.org/sssd/ticket/1152 | |||||
2012-01-31 | LDAP: Add support for service lookups (non-enum) | Stephen Gallagher | 1 | -0/+33 | |
2012-01-18 | LDAP: Add option to disable paging control | Stephen Gallagher | 1 | -1/+2 | |
Fixes https://fedorahosted.org/sssd/ticket/967 | |||||
2012-01-18 | Do not use sudo symbols in LDAP provider unconditionally | Jakub Hrozek | 1 | -0/+2 | |
2012-01-17 | SUDO Integration - periodical update of rules in data provider | Pavel Březina | 1 | -0/+60 | |
https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period) | |||||
2012-01-17 | SUDO Integration review issues | Pavel Březina | 1 | -1/+1 | |
2011-12-16 | SUDO Integration - LDAP configuration options | Pavel Březina | 1 | -1/+72 | |
2011-12-16 | Export the function to convert ldb_result to sysdb_attrs | Jakub Hrozek | 1 | -29/+0 | |
It will be reused later in the sudo responder | |||||
2011-12-12 | Add sdap_connection_expire_timeout option | Stephen Gallagher | 1 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/1036 | |||||
2011-12-08 | Add ldap_sasl_minssf option | Jan Zeleny | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1075 | |||||
2011-11-23 | Modified sdap_parse_search_base() | Jan Zeleny | 1 | -9/+8 | |
2011-11-02 | Support to request canonicalization in LDAP/IPA provider | Jan Zeleny | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | LDAP: Convert ldap_*_search_filter | Stephen Gallagher | 1 | -1/+5 | |
Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter. | |||||
2011-11-02 | LDAP: Add parser for multiple search bases | Stephen Gallagher | 1 | -0/+261 | |
2011-11-02 | Make sdap_get_id_specific_filter() more strict | Stephen Gallagher | 1 | -2/+2 | |
2011-09-20 | Fix uninitialized pointer read in sdap_gssapi_get_default_realm() | Jakub Hrozek | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1003 | |||||
2011-08-26 | Use the default Kerberos realm for LDAP with GSSAPI auth | Jakub Hrozek | 1 | -3/+55 | |
https://fedorahosted.org/sssd/ticket/970 | |||||
2011-08-26 | Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON | Jakub Hrozek | 1 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/978 | |||||
2011-08-15 | sysdb refactoring: deleted domain variables in sysdb API | Jan Zeleny | 1 | -3/+1 | |
The patch also updates code using modified functions. Tests have also been adjusted. | |||||
2011-07-21 | fo_get_server_name() getter for a server name | Jakub Hrozek | 1 | -1/+10 | |
Allows to be more concise in tests and more defensive in resolve callbacks | |||||
2011-07-21 | Rename fo_get_server_name to fo_get_server_str_name | Jakub Hrozek | 1 | -2/+2 | |
2011-07-21 | Do not add a NULL host parsed from LDAP URI | Jakub Hrozek | 1 | -1/+8 | |
https://fedorahosted.org/sssd/ticket/911 | |||||
2011-07-08 | Add LDAP access control based on NDS attributes | Sumit Bose | 1 | -2/+8 | |
2011-07-08 | Add helper function msgs2attrs_array | Stephen Gallagher | 1 | -0/+29 | |
This function converts a list of ldb_messages into a list of sysdb_attrs. |