summaryrefslogtreecommitdiff
path: root/src/providers/ldap/sdap.c
AgeCommit message (Collapse)AuthorFilesLines
2012-06-30Fix segfault when sudo is not configured.Simo Sorce1-1/+2
Sudo support is optional, when it is not configured sudorules_map is not initialized and dereferencing it will cause a segmentation fault.
2012-06-29ldap provider: add sudo usn valuePavel Březina1-0/+5
2012-06-13LDAP: Auto-detect support for the ldap match ruleStephen Gallagher1-2/+5
This patch extends the RootDSE lookup so that we will perform a second request to test whether the match rule syntax can be used. If both groups and initgroups are disabled in the configuration, this lookup request can be skipped.
2012-05-31Add support for filtering atributesJan Zeleny1-1/+19
This patch adds support for filtering attributes when constructing attribute list from a map for LDAP query.
2012-05-14Fixed two minor memory leaksJan Zeleny1-1/+4
2012-05-10LDAP: Handle very large Active Directory groupsStephen Gallagher1-26/+46
Active Directory 2008R2 allows only 1500 group members to be retrieved in a single lookup. However, when we hit such a situation, we can take advantage of the ASQ lookups, which are not similarly limited. With this patch, we will add any members found by ASQ that were not found by the initial lookup so we will end with a complete group listing. https://fedorahosted.org/sssd/ticket/783
2012-05-10LDAP: Add attr_count return value to build_attrs_from_map()Stephen Gallagher1-5/+26
This is necessary because in several places in the code, we are appending to the attrs returned from this value, and if we relied on the map size macro, we would be appending after the NULL terminator if one or more attributes were defined as NULL.
2012-04-18Prevent printing NULL from DEBUG messagesJakub Hrozek1-4/+9
2012-02-13Add missing breaks to switch statementsStephen Gallagher1-0/+1
Coverity #12525 and #12524
2012-02-07LDAP: Add support for SSH user public keysJan Cholasta1-2/+18
2012-02-05AUTOFS: LDAP providerJakub Hrozek1-1/+12
2012-02-04LDAP: Do not fail if RootDSE check cannot determine search basesStephen Gallagher1-1/+6
https://fedorahosted.org/sssd/ticket/1152
2012-01-31LDAP: Add enumeration support for servicesStephen Gallagher1-0/+5
2012-01-31LDAP: Add support for service lookups (non-enum)Stephen Gallagher1-0/+11
2012-01-23LDAP: Improve debugging for sdap_parse_derefStephen Gallagher1-4/+7
Move the debug statement identifying the DN to an earlier line, so if we get a reply with no attributes, we know which entry is at fault.
2011-12-16SUDO Integration - LDAP configuration optionsPavel Březina1-1/+13
2011-11-23Modified sdap_parse_search_base()Jan Zeleny1-1/+1
2011-11-22Cleanup: Remove unused parametersJakub Hrozek1-2/+0
2011-11-02LDAP: Add parser for multiple search basesStephen Gallagher1-26/+83
2011-09-06sss_ldap_err2string() - ldap_err2string() to sss_ldap_err2string()Pavel Březina1-14/+14
https://fedorahosted.org/sssd/ticket/986
2011-05-20OpenLDAP dereference searchesJakub Hrozek1-0/+159
This dereference method is supported at least by OpenLDAP and 389DS/RHDS For more details, see: http://tools.ietf.org/html/draft-masarati-ldap-deref-00
2011-05-20Remove append_attrs_to_arrayJakub Hrozek1-11/+0
This function was not used anywhere
2011-04-19Add value of the last USN to server configurationStephen Gallagher1-0/+15
Related: https://fedorahosted.org/sssd/ticket/734
2011-04-11Initialise srv_opts even if rootDSE is missingSumit Bose1-38/+40
2011-01-31Remove LDAP_DEPRECATEDSumit Bose1-1/+0
2011-01-27Do not fail if attributes are emptySumit Bose1-16/+29
Currently we fail if attributes are empty. But there are some use cases where requested attributes are empty. E.g Active Directory uses an empty member attribute to indicate that a subset of the members are in a range sub-attribute.
2011-01-20Add ldap_tls_{cert,key,cipher_suite} config optionsTyson Whitehead1-0/+27
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2010-12-14Fix unchecked return value in sdap_parse_entry()Sumit Bose1-1/+5
https://fedorahosted.org/sssd/ticket/712
2010-12-14Fix unchecked return value in sdap_get_msg_dn()Sumit Bose1-1/+6
https://fedorahosted.org/sssd/ticket/712
2010-12-07ldap: Use USN entries if available.Simo Sorce1-3/+55
Otherwise fallback to the default modifyTimestamp indicator
2010-12-07ldap: add checks to determine if USN features are available.Simo Sorce1-1/+83
2010-11-15Fix const cast warning in build_attrs_from_mapStephen Gallagher1-3/+3
2010-11-15Sanitize ldap attributes in the config fileStephen Gallagher1-2/+21
https://fedorahosted.org/sssd/ticket/458
2010-11-05Review comments for namingContexts patchesSumit Bose1-5/+5
2010-11-04Use (default)namingContext to set empty search basesSumit Bose1-0/+103
2010-09-15Check if control is supported before using it.Simo Sorce1-0/+18
2010-09-15Store rootdse supported features in sdap_handlerSumit Bose1-18/+64
2010-02-18Rename server/ directory to src/Stephen Gallagher1-0/+388
Also update BUILD.txt