Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-06-29 | sudo ldap provider: load host filter configuration on init | Pavel Březina | 1 | -1/+9 | |
We need to load host information during provider initialization. Currently it loads only values from configuration files, but it is implemented as an asynchrounous request as it will later try to autodetect these settings (which will need to contact DNS). | |||||
2012-06-20 | Move some debug lines to new debug log levels | Stef Walter | 1 | -1/+1 | |
* These are common lines of debug output when starting up sssd https://bugzilla.redhat.com/show_bug.cgi?id=811113 | |||||
2012-05-31 | Add support for filtering atributes | Jan Zeleny | 1 | -1/+2 | |
This patch adds support for filtering attributes when constructing attribute list from a map for LDAP query. | |||||
2012-05-10 | LDAP: Add attr_count return value to build_attrs_from_map() | Stephen Gallagher | 1 | -4/+1 | |
This is necessary because in several places in the code, we are appending to the attrs returned from this value, and if we relied on the map size macro, we would be appending after the NULL terminator if one or more attributes were defined as NULL. | |||||
2012-05-03 | LDAP: Add helper routine to convert LDAP blob to SID string | Stephen Gallagher | 1 | -0/+37 | |
2012-03-28 | Put dp_option maps in their own file | Stephen Gallagher | 1 | -279/+2 | |
There is no functional change due to this patch. | |||||
2012-03-16 | Fix uninitialized variable | Jakub Hrozek | 1 | -1/+1 | |
2012-03-14 | LDAP: Add AD 2008r2 schema | Stephen Gallagher | 1 | -2/+49 | |
https://fedorahosted.org/sssd/ticket/1031 | |||||
2012-03-01 | IPA: Set the DNS discovery domain to match ipa_domain | Stephen Gallagher | 1 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/1217 | |||||
2012-02-24 | Modifications to simplify list_missing_attrs | Jan Zeleny | 1 | -6/+14 | |
2012-02-23 | IPA: Add ipa_parse_search_base() | Stephen Gallagher | 1 | -10/+23 | |
Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151 | |||||
2012-02-21 | Don't give memory context in confdb where not needed | Jan Zeleny | 1 | -1/+1 | |
2012-02-13 | Add missing breaks to switch statements | Stephen Gallagher | 1 | -0/+1 | |
Coverity #12525 and #12524 | |||||
2012-02-07 | LDAP: Add support for SSH user public keys | Jan Cholasta | 1 | -2/+4 | |
2012-02-06 | Update shadowLastChanged attribute during LDAP password change | Jan Zeleny | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1019 | |||||
2012-02-05 | AUTOFS: LDAP provider | Jakub Hrozek | 1 | -0/+106 | |
2012-02-04 | Move BUILD_SUDO outside the generic LDAP source files | Jakub Hrozek | 1 | -60/+0 | |
Avoid #ifdefs in the general part of the code | |||||
2012-02-04 | NSS: Add individual timeouts for entry types | Stephen Gallagher | 1 | -1/+0 | |
https://fedorahosted.org/sssd/ticket/1016 | |||||
2012-02-04 | LDAP: Do not fail if RootDSE check cannot determine search bases | Stephen Gallagher | 1 | -3/+2 | |
https://fedorahosted.org/sssd/ticket/1152 | |||||
2012-01-31 | LDAP: Add support for service lookups (non-enum) | Stephen Gallagher | 1 | -0/+33 | |
2012-01-18 | LDAP: Add option to disable paging control | Stephen Gallagher | 1 | -1/+2 | |
Fixes https://fedorahosted.org/sssd/ticket/967 | |||||
2012-01-18 | Do not use sudo symbols in LDAP provider unconditionally | Jakub Hrozek | 1 | -0/+2 | |
2012-01-17 | SUDO Integration - periodical update of rules in data provider | Pavel Březina | 1 | -0/+60 | |
https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period) | |||||
2012-01-17 | SUDO Integration review issues | Pavel Březina | 1 | -1/+1 | |
2011-12-16 | SUDO Integration - LDAP configuration options | Pavel Březina | 1 | -1/+72 | |
2011-12-16 | Export the function to convert ldb_result to sysdb_attrs | Jakub Hrozek | 1 | -29/+0 | |
It will be reused later in the sudo responder | |||||
2011-12-12 | Add sdap_connection_expire_timeout option | Stephen Gallagher | 1 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/1036 | |||||
2011-12-08 | Add ldap_sasl_minssf option | Jan Zeleny | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/1075 | |||||
2011-11-23 | Modified sdap_parse_search_base() | Jan Zeleny | 1 | -9/+8 | |
2011-11-02 | Support to request canonicalization in LDAP/IPA provider | Jan Zeleny | 1 | -0/+1 | |
https://fedorahosted.org/sssd/ticket/957 | |||||
2011-11-02 | LDAP: Convert ldap_*_search_filter | Stephen Gallagher | 1 | -1/+5 | |
Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter. | |||||
2011-11-02 | LDAP: Add parser for multiple search bases | Stephen Gallagher | 1 | -0/+261 | |
2011-11-02 | Make sdap_get_id_specific_filter() more strict | Stephen Gallagher | 1 | -2/+2 | |
2011-09-20 | Fix uninitialized pointer read in sdap_gssapi_get_default_realm() | Jakub Hrozek | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1003 | |||||
2011-08-26 | Use the default Kerberos realm for LDAP with GSSAPI auth | Jakub Hrozek | 1 | -3/+55 | |
https://fedorahosted.org/sssd/ticket/970 | |||||
2011-08-26 | Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON | Jakub Hrozek | 1 | -1/+2 | |
https://fedorahosted.org/sssd/ticket/978 | |||||
2011-08-15 | sysdb refactoring: deleted domain variables in sysdb API | Jan Zeleny | 1 | -3/+1 | |
The patch also updates code using modified functions. Tests have also been adjusted. | |||||
2011-07-21 | fo_get_server_name() getter for a server name | Jakub Hrozek | 1 | -1/+10 | |
Allows to be more concise in tests and more defensive in resolve callbacks | |||||
2011-07-21 | Rename fo_get_server_name to fo_get_server_str_name | Jakub Hrozek | 1 | -2/+2 | |
2011-07-21 | Do not add a NULL host parsed from LDAP URI | Jakub Hrozek | 1 | -1/+8 | |
https://fedorahosted.org/sssd/ticket/911 | |||||
2011-07-08 | Add LDAP access control based on NDS attributes | Sumit Bose | 1 | -2/+8 | |
2011-07-08 | Add helper function msgs2attrs_array | Stephen Gallagher | 1 | -0/+29 | |
This function converts a list of ldb_messages into a list of sysdb_attrs. | |||||
2011-06-30 | Use name based URI instead of IP address based URIs | Sumit Bose | 1 | -37/+2 | |
2011-06-30 | Add sockaddr_storage to sdap_service | Sumit Bose | 1 | -0/+11 | |
2011-06-15 | Switch resolver to using resolv_hostent and honor TTL | Jakub Hrozek | 1 | -2/+2 | |
2011-06-02 | Use escaped IP addresses in LDAP provider | Jakub Hrozek | 1 | -6/+56 | |
2011-05-24 | Make "password" the default for ldap_default_authtok_type | Stephen Gallagher | 1 | -1/+1 | |
2011-05-20 | Use dereference when processing RFC2307bis nested groups | Jakub Hrozek | 1 | -1/+2 | |
Instead of issuing N LDAP requests when processing a group with N users, utilize the dereference functionality to pull down all the members in a single LDAP request. https://fedorahosted.org/sssd/ticket/799 | |||||
2011-04-27 | Add ldap_page_size configuration option | Stephen Gallagher | 1 | -1/+2 | |
2011-04-25 | Modify principal selection for keytab authentication | Jan Zeleny | 1 | -0/+1 | |
Currently we construct the principal as host/fqdn@REALM. The problem with this is that this principal doesn't have to be in the keytab. In that case the provider fails to start. It is better to scan the keytab and find the most suitable principal to use. Only in case no suitable principal is found the backend should fail to start. The second issue solved by this patch is that the realm we are authenticating the machine to can be in general different from the realm our users are part of (in case of cross Kerberos trust). The patch adds new configuration option SDAP_SASL_REALM. https://fedorahosted.org/sssd/ticket/781 |