sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2012-04-24	Accept be_req instead if be_ctx in LDAP access provider	Jan Zeleny	1	-1/+1

2012-03-09	LDAP: Make sdap_access_send/recv public	Stephen Gallagher	1	-0/+9
	We want to consume this in the IPA provider.
2011-11-02	Cleanup of unused function in ldap access provider	Jan Zeleny	1	-2/+0

2011-07-08	Add LDAP access control based on NDS attributes	Sumit Bose	1	-0/+1

2011-03-24	Add host access control support	Pierre Ossman	1	-0/+2
	https://fedorahosted.org/sssd/ticket/746
2011-01-19	Add LDAP expire policy base RHDS/IPA attribute	Sumit Bose	1	-0/+3
	The attribute nsAccountLock is used by RHDS, IPA and other directory servers to indicate that the account is locked.
2011-01-19	Add LDAP expire policy based on AD attributes	Sumit Bose	1	-0/+1
	The second bit of userAccountControl is used to determine if the account is enabled or disabled. accountExpires is checked to see if the account is expired.
2010-12-21	Add authorizedService support	Stephen Gallagher	1	-0/+2
	https://fedorahosted.org/sssd/ticket/670
2010-12-06	Add new account expired rule to LDAP access provider	Sumit Bose	1	-1/+14
	Two new options are added to the LDAP access provider to allow a broader range of access control rules to be evaluated. 'ldap_access_order' makes it possible to run more than one rule. To keep compatibility with older versions the default is 'filter'. This patch adds a new rule 'expire'. 'ldap_account_expire_policy' specifies which LDAP attribute should be used to determine if an account is expired or not. Currently only 'shadow' is supported which evaluates the ldap_user_shadow_expire attribute.
2010-05-27	Add ldap_access_filter option	Stephen Gallagher	1	-0/+39
	This option (applicable to access_provider=ldap) allows the admin to set an additional LDAP search filter that must match in order for a user to be granted access to the system. Common examples for this would be limiting access to users by in a particular group, for example: ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com