summaryrefslogtreecommitdiff
path: root/src/providers/ldap
AgeCommit message (Expand)AuthorFilesLines
2012-06-14Provide more debugging in krb5_child and ldap_childJakub Hrozek1-1/+8
2012-06-13Fix an issue in ghost usersJan Zeleny1-75/+47
2012-06-13LDAP: Auto-detect support for the ldap match ruleStephen Gallagher6-5/+107
2012-06-13LDAP: Add support for AD chain matching extension in initgroupsStephen Gallagher3-9/+325
2012-06-13LDAP: Add support for AD chain matching extension in group lookupsStephen Gallagher3-9/+417
2012-06-13LDAP: Add ldap_*_use_matching_rule_in_chain optionsStephen Gallagher3-0/+9
2012-06-12LDAP: Make sdap_initgr_common_store() non-staticStephen Gallagher2-7/+15
2012-06-12LDAP: Add helper function to get list of a user's groups from sysdbStephen Gallagher2-33/+69
2012-06-12LDAP: Fix incorrect switch statement in sdap_get_initgr_done()Stephen Gallagher1-1/+1
2012-06-12LDAP: Remove redundant checkStephen Gallagher1-11/+0
2012-05-31Utilize attribute exclusion in LDAP initgroupsJan Zeleny1-3/+33
2012-05-31Add support for filtering atributesJan Zeleny12-34/+58
2012-05-31added DEBUG messages to krb5_child and ldap_childNick Guay1-0/+7
2012-05-31Ghost members - various small changesJan Zeleny1-1/+1
2012-05-31Ghost members - removed sdap_check_aliases()Jan Zeleny4-127/+0
2012-05-31Ghost members - support in LDAP providerJan Zeleny1-186/+286
2012-05-22LDAP nested groups: Do not process callback with _post deep in the nested str...Jakub Hrozek1-12/+10
2012-05-22Warn to syslog when dereference requests failAriel Barria1-2/+2
2012-05-22Simple implementation of Netscape password warning expiration controlJoshua Roys1-22/+74
2012-05-16Use the sysdb attribute name, not LDAP attribute nameJakub Hrozek2-2/+2
2012-05-14Fixed two minor memory leaksJan Zeleny2-2/+6
2012-05-10LDAP: Handle very large Active Directory groupsStephen Gallagher5-45/+271
2012-05-10LDAP: Add attr_count return value to build_attrs_from_map()Stephen Gallagher12-32/+54
2012-05-09Try all KDCs when getting TGT for LDAPJakub Hrozek1-15/+18
2012-05-07Special-case LDAP_SIZELIMIT_EXCEEDEDJakub Hrozek1-4/+9
2012-05-07Limit krb5_get_init_creds_keytab() to etypes in keytabStef Walter1-0/+15
2012-05-04If canon'ing principals, write ccache with updated default principalStef Walter1-1/+2
2012-05-04Modify behavior of pam_pwd_expiration_warningJan Zeleny1-12/+30
2012-05-03LDAP: Add support for enumeration of ID-mapped users and groupsStephen Gallagher1-31/+102
2012-05-03LDAP: Treat groups with unmappable SIDs as non-POSIX groupsStephen Gallagher1-9/+12
2012-05-03LDAP: Add helper function to map IDsStephen Gallagher5-119/+81
2012-05-03LDAP: Do not remove uidNumber and gidNumber attributes when saving id-mapped ...Stephen Gallagher2-0/+16
2012-05-03LDAP: Add helper routine to convert LDAP blob to SID stringStephen Gallagher5-68/+195
2012-05-03LDAP: Map the user's primaryGroupIDStephen Gallagher3-12/+68
2012-05-03LDAP: Enable looking up id-mapped groups by GIDStephen Gallagher1-2/+45
2012-05-03LDAP: Allow looking up ID-mapped groups by nameStephen Gallagher2-29/+125
2012-05-03LDAP: Enable looking up id-mapped users by UIDStephen Gallagher1-6/+43
2012-05-03LDAP: Allow automatically-provisioning a domain and rangeStephen Gallagher1-3/+43
2012-05-03LDAP: Add routine to extract domain SID from an object SIDStephen Gallagher2-0/+49
2012-05-03LDAP: Allow setting a default domain for id-mapping slice 0Stephen Gallagher3-0/+40
2012-05-03LDAP: Add autorid compatibility modeStephen Gallagher3-8/+16
2012-05-03LDAP: Enable looking up ID-mapped users by nameStephen Gallagher2-9/+55
2012-05-03LDAP: Initialize ID mapping when configuredStephen Gallagher2-0/+10
2012-05-03LDAP: Add ID mapping range settingsStephen Gallagher2-0/+6
2012-05-03LDAP: Add helper routines for ID-mappingStephen Gallagher2-0/+334
2012-05-03LDAP: Add id-mapping optionStephen Gallagher2-0/+2
2012-05-03LDAP: Add objectSID config optionStephen Gallagher2-0/+8
2012-05-03Read sysdb attribute name, not LDAP attribute map nameJakub Hrozek1-2/+2
2012-05-02LDAP: check return value of sysdb_attrs_get_elJakub Hrozek1-0/+7
2012-05-01execv, excvp and exec_child never return EOKStef Walter1-5/+3