sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2010-11-04	Use (default)namingContext to set empty search bases	Sumit Bose	1	-0/+8

2010-10-27	Allow authentication for referrals	Sumit Bose	1	-0/+193

2010-10-22	Add some missing ldap_memfree()	Sumit Bose	1	-2/+4

2010-10-22	Add ldap_deref option	Sumit Bose	1	-0/+37

2010-10-13	Initialize kerberos service for GSSAPI	Jakub Hrozek	1	-4/+88

2010-10-13	Make ldap_child report kerberos return code to parent	Jakub Hrozek	1	-1/+3

2010-09-15	Check if control is supported before using it.	Simo Sorce	1	-7/+9

2010-09-15	Revert "Make ldap bind asynchronous"	Jakub Hrozek	1	-127/+91
	This reverts 56d8d19ac9d857580a233d8264e851883b883c67
2010-09-15	Store rootdse supported features in sdap_handler	Sumit Bose	1	-34/+17

2010-09-08	Deobfuscate password in back ends	Jakub Hrozek	1	-7/+52
	When obfuscated password is used in config file, the LDAP backend converts it back to clear text and uses it to authenticate to the server.
2010-09-02	Make ldap bind asynchronous	Martin Nagy	1	-91/+127
	Every ldap function that could possibly create a new connection is now wrapped in a tevent_req. If the connection is created, we will call the function again after the socket is ready for writing.
2010-07-09	Log TLS errors to syslog	Stephen Gallagher	1	-0/+6
	Also adds support for detecting LDAPS errors by adding a check for SDAP_DIAGNOSTIC_MESSAGE after ldap_search_ext()
2010-07-09	Eliminate delayed sdap_handle destruction after fail-over retry.	eindenbom	1	-9/+6

2010-07-09	Use new LDAP connection framework in IPA dynamic DNS forwarder.	eindenbom	1	-7/+0

2010-07-09	LDAP connection usage tracking, sharing and failover retry framework.	eindenbom	1	-0/+16

2010-07-09	GSSAPI ticket expiry time is returned from ldap_child and stored in ↵	eindenbom	1	-3/+11
	sdap_handle for future reference.
2010-06-28	Make RootDSE optional	Stephen Gallagher	1	-2/+14
	In violation of the standard, some LDAP servers control access to the RootDSE, thus preventing us from being able to read it before performing a bind. This patch will allow us to continue on if the RootDSE was inaccessible. All of the places that we use the return value of the RootDSE after this are already checked for NULL and use sane defaults if the RootDSE is unavailable
2010-06-28	Fix SASL authentication	Sumit Bose	1	-2/+2

2010-06-06	Fix broken build against older versions of OpenLDAP	Stephen Gallagher	1	-2/+2
	OpenLDAP < 2.4 used LDAP_OPT_ERROR_STRING. It was changed to LDAP_OPT_DIAGNOSTIC_MESSAGE in 2.4. This patch will allow the TLS error messages to be displayed on either version.
2010-05-20	Add a better error message for TLS failures	Stephen Gallagher	1	-3/+32

2010-05-16	Add ldap_krb5_ticket_lifetime option	Sumit Bose	1	-4/+14

2010-05-07	Add callback when the ID provider switches from offline to online	Stephen Gallagher	1	-0/+9
	Allow backends to set a callback in the be_ctx that should be invoked when the ID provider goes online. This can be used to perform regular maintenance tasks that are valid only when going online.
2010-05-07	Use all available servers in LDAP provider	Jakub Hrozek	1	-7/+53

2010-05-03	Better handle sdap_handle memory from callers.	Simo Sorce	1	-0/+3
	Always just mark the sdap_handle as not connected and let later _send() functions to take care of freeing the handle before reconnecting. Introduce restart functions to avoid calling _send() functions in _done() functions error paths as this would have the same effect as directly freeing the sdap_handle and cause access to freed memory in sdap_handle_release() By freeing sdap_handle only in the connection _recv() function we guarantee it can never be done within sdap_handle_release() but only in a following event.
2010-04-26	Make the handling of fd events opaque	Sumit Bose	1	-46/+8
	Depending on the version of the OpenLDAP libraries we use two different schemes to find the file descriptor of the connection to the LDAP server. This patch removes the related ifdefs from the main code and introduces helper functions which can handle the specific cases.
2010-04-26	Set LDAP_OPT_RESTART for all LDAP connections	Sumit Bose	1	-7/+7

2010-03-25	Set LDAP_OPT_RESTART for ldap_sasl_interactive_bind_s()	Sumit Bose	1	-0/+7
	This option is needed for the rare case where a poll() call during ldap_sasl_interactive_bind_s() is interrupted by a signal. LDAP_OPT_RESTART enables the handling of the EINTR error instead of returning an error.
2010-03-22	Improvements for LDAP Password Policy support	Ralf Haferkamp	1	-10/+43
	Display warnings about remaining grace logins and password expiration to the user, when LDAP Password Policies are used. Improved detection if LDAP Password policies are supported by LDAP Server.
2010-03-18	Fix error message for ldap_start_tls	Stephen Gallagher	1	-1/+1

2010-03-15	Fixed check for expired passwords	Ralf Haferkamp	1	-2/+4
	When the user's password is expired it might also be indicated by the bind operation returning "INVALID_CREDENTIALS" with the ppolicy control's errorcode set to "PP_passwordExpired".
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+1141
	Also update BUILD.txt