sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2012-01-31	LDAP: Add enumeration support for services	Stephen Gallagher	1	-3/+57

2011-11-02	LDAP: Add support for multiple search bases for group enumeration	Stephen Gallagher	1	-1/+2

2011-11-02	LDAP: Add support for multiple search bases for user enumeration	Stephen Gallagher	1	-1/+2

2011-11-02	LDAP: Convert ldap_*_search_filter	Stephen Gallagher	1	-26/+6
	Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter.
2011-11-02	LDAP: Support multiple group search bases (non-enumeration, RFC2307)	Stephen Gallagher	1	-1/+7

2011-11-02	LDAP: Support multiple user search bases (non-enumeration)	Stephen Gallagher	1	-0/+5

2011-08-15	sysdb refactoring: deleted domain variables in sysdb API	Jan Zeleny	1	-3/+1
	The patch also updates code using modified functions. Tests have also been adjusted.
2011-08-04	Fix returning groups when gidNumber attribute is not ordered	Jakub Hrozek	1	-2/+4
	https://fedorahosted.org/sssd/ticket/951
2011-05-04	Fixed lastUSN checking improvements	Jan Zeleny	1	-0/+15
	This patch fixes some issues with setting lastUSN attribute and it adds check against the highest user/group USN after enumeration to keep better track of the real highest USN. Optimal solution here would be to schedule a check of rootDSE entry right after the enumeration finishes, but for the moment this is good enough.
2011-04-19	Add user and group search LDAP filter options	Jakub Hrozek	1	-6/+26
	https://fedorahosted.org/sssd/ticket/647
2011-03-14	Require existence of username, uid and gid for user enumeration	Stephen Gallagher	1	-12/+18
	We will ignore users that do not have these three values.
2011-03-14	Require existence of GID number and name in group searches	Stephen Gallagher	1	-12/+16
	https://fedorahosted.org/sssd/ticket/824
2011-01-17	Add ldap_search_enumeration_timeout config option	Sumit Bose	1	-2/+2

2011-01-17	Add timeout parameter to sdap_get_generic_send()	Sumit Bose	1	-2/+6

2010-12-17	Start first enumeration immediately	Stephen Gallagher	1	-0/+14
	Previously, we would wait for ten seconds before starting an enumeration. However, this meant that on the first startup (before we had run our first enumeration) there was a ten-second window where clients would immediately get back a response with no entries instead of blocking until the enumeration completed. With this patch, SSSD will now run an enumeration immediately upon startup. Further startups will retain the ten-second delay so as not to slow down system bootups. https://fedorahosted.org/sssd/ticket/616
2010-12-07	ldap: Use USN entries if available.	Simo Sorce	1	-26/+25
	Otherwise fallback to the default modifyTimestamp indicator
2010-09-08	Dead assignments cleanup in providers code	Jan Zeleny	1	-3/+0
	Dead assignments were deleted. Also prototype of function sdap_access_decide_offline() has been changed, since its return code was never used. Ticket: #586
2010-07-09	Use new LDAP connection framework for LDAP user and group enumeration.	eindenbom	1	-236/+131

2010-06-10	Properly check that the timeout event was created for cleanup/enum	Stephen Gallagher	1	-1/+23
	We need to make sure that if we didn't create the timeout, that we cancel the request so there's no chance of ending up with two enumerations/cleanups running simultaneously. We'll attempt to reschedule later, if possible. https://fedorahosted.org/sssd/ticket/524
2010-05-07	Fix segfault in GSSAPI reconnect code	Stephen Gallagher	1	-2/+6
	Also clean up some duplicated code into a single common routine sdap_account_info_common_done()
2010-05-03	Better handle sdap_handle memory from callers.	Simo Sorce	1	-16/+95
	Always just mark the sdap_handle as not connected and let later _send() functions to take care of freeing the handle before reconnecting. Introduce restart functions to avoid calling _send() functions in _done() functions error paths as this would have the same effect as directly freeing the sdap_handle and cause access to freed memory in sdap_handle_release() By freeing sdap_handle only in the connection _recv() function we guarantee it can never be done within sdap_handle_release() but only in a following event.
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+608
	Also update BUILD.txt