sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-12-07	Pass sdap_id_ctx in sdap_id_op functions.	Simo Sorce	1	-3/+1

2010-12-06	Add ldap_chpass_uri config option	Sumit Bose	1	-0/+21

2010-12-06	Add new account expired rule to LDAP access provider	Sumit Bose	1	-22/+112
	Two new options are added to the LDAP access provider to allow a broader range of access control rules to be evaluated. 'ldap_access_order' makes it possible to run more than one rule. To keep compatibility with older versions the default is 'filter'. This patch adds a new rule 'expire'. 'ldap_account_expire_policy' specifies which LDAP attribute should be used to determine if an account is expired or not. Currently only 'shadow' is supported which evaluates the ldap_user_shadow_expire attribute.
2010-12-01	Add check_online method to LDAP ID provider	Sumit Bose	1	-1/+2

2010-10-15	Check for GSSAPI before attempting to kinit	Jakub Hrozek	1	-8/+12

2010-10-13	Initialize kerberos service for GSSAPI	Jakub Hrozek	1	-0/+11

2010-07-09	Remove remainder of now unused global LDAP connection handle.	eindenbom	1	-7/+0

2010-07-09	LDAP connection usage tracking, sharing and failover retry framework.	eindenbom	1	-0/+7

2010-06-14	Don't segfault if ldap_access_filter is unspecified	Stephen Gallagher	1	-12/+13
	https://fedorahosted.org/sssd/ticket/539
2010-06-09	Allow ldap_access_filter values wrapped in parentheses	Stephen Gallagher	1	-2/+20

2010-05-27	Fix check if LDAP id provider is already initialized	Sumit Bose	1	-1/+1

2010-05-27	Add ldap_access_filter option	Stephen Gallagher	1	-0/+56
	This option (applicable to access_provider=ldap) allows the admin to set an additional LDAP search filter that must match in order for a user to be granted access to the system. Common examples for this would be limiting access to users by in a particular group, for example: ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com
2010-05-27	Add offline callback to disconnect global SDAP handle	Sumit Bose	1	-0/+7

2010-05-07	Use service discovery in backends	Jakub Hrozek	1	-8/+16
	Integrate the failover improvements with our back ends. The DNS domain used in the SRV query is always the SSSD domain name. Please note that this patch changes the default value of ldap_uri from "ldap://localhost" to "NULL" in order to use service discovery with no server set.
2010-04-16	Make ID provider init functions clearer	Stephen Gallagher	1	-3/+3
	Using sssm__init() as the name of the initialization function for identity providers was a holdover from earlier development when we thought we would only have a single "provider" entry in the config file. As we have now separated out the initialization functions for auth, chpass and access, we should rename sssm__init() to sssm_*_id_init() for a cleaner interface.
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+179
	Also update BUILD.txt