sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2011-03-24	Add host access control support	Pierre Ossman	1	-0/+146
	https://fedorahosted.org/sssd/ticket/746
2011-02-04	Only print "no matching service rule" when appropriate	Stephen Gallagher	1	-6/+6

2011-01-19	Add LDAP expire policy base RHDS/IPA attribute	Sumit Bose	1	-0/+38
	The attribute nsAccountLock is used by RHDS, IPA and other directory servers to indicate that the account is locked.
2011-01-19	Add LDAP expire policy based on AD attributes	Sumit Bose	1	-0/+85
	The second bit of userAccountControl is used to determine if the account is enabled or disabled. accountExpires is checked to see if the account is expired.
2011-01-17	Add timeout parameter to sdap_get_generic_send()	Sumit Bose	1	-1/+3

2011-01-06	Add syslog messages to authorized service access check	Sumit Bose	1	-1/+31

2011-01-06	Add syslog message to shadow access check	Sumit Bose	1	-6/+14

2010-12-21	Add authorizedService support	Stephen Gallagher	1	-0/+135
	https://fedorahosted.org/sssd/ticket/670
2010-12-21	Pass all PAM data to the LDAP access provider	Stephen Gallagher	1	-9/+12
	Previously we were only passing the username.
2010-12-06	Add new account expired rule to LDAP access provider	Sumit Bose	1	-66/+377
	Two new options are added to the LDAP access provider to allow a broader range of access control rules to be evaluated. 'ldap_access_order' makes it possible to run more than one rule. To keep compatibility with older versions the default is 'filter'. This patch adds a new rule 'expire'. 'ldap_account_expire_policy' specifies which LDAP attribute should be used to determine if an account is expired or not. Currently only 'shadow' is supported which evaluates the ldap_user_shadow_expire attribute.
2010-11-15	Sanitize search filters in LDAP provider	Stephen Gallagher	1	-1/+9

2010-09-28	Suppress some 'may be used uninitialized' warnings	Sumit Bose	1	-1/+1
	Additionally the handling of errno and the errno_t return value of functions is fixed in krb5_common.c.
2010-09-08	Dead assignments cleanup in providers code	Jan Zeleny	1	-11/+7
	Dead assignments were deleted. Also prototype of function sdap_access_decide_offline() has been changed, since its return code was never used. Ticket: #586
2010-07-09	Use new LDAP connection framework in LDAP access backend.	eindenbom	1	-59/+73

2010-06-09	Allow ldap_access_filter values wrapped in parentheses	Stephen Gallagher	1	-1/+1

2010-05-27	Add ldap_access_filter option	Stephen Gallagher	1	-0/+457
	This option (applicable to access_provider=ldap) allows the admin to set an additional LDAP search filter that must match in order for a user to be granted access to the system. Common examples for this would be limiting access to users by in a particular group, for example: ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com