sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-12-06	Add new account expired rule to LDAP access provider	Sumit Bose	1	-66/+377
	Two new options are added to the LDAP access provider to allow a broader range of access control rules to be evaluated. 'ldap_access_order' makes it possible to run more than one rule. To keep compatibility with older versions the default is 'filter'. This patch adds a new rule 'expire'. 'ldap_account_expire_policy' specifies which LDAP attribute should be used to determine if an account is expired or not. Currently only 'shadow' is supported which evaluates the ldap_user_shadow_expire attribute.
2010-11-15	Sanitize search filters in LDAP provider	Stephen Gallagher	1	-1/+9

2010-09-28	Suppress some 'may be used uninitialized' warnings	Sumit Bose	1	-1/+1
	Additionally the handling of errno and the errno_t return value of functions is fixed in krb5_common.c.
2010-09-08	Dead assignments cleanup in providers code	Jan Zeleny	1	-11/+7
	Dead assignments were deleted. Also prototype of function sdap_access_decide_offline() has been changed, since its return code was never used. Ticket: #586
2010-07-09	Use new LDAP connection framework in LDAP access backend.	eindenbom	1	-59/+73

2010-06-09	Allow ldap_access_filter values wrapped in parentheses	Stephen Gallagher	1	-1/+1

2010-05-27	Add ldap_access_filter option	Stephen Gallagher	1	-0/+457
	This option (applicable to access_provider=ldap) allows the admin to set an additional LDAP search filter that must match in order for a user to be granted access to the system. Common examples for this would be limiting access to users by in a particular group, for example: ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com