Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-01-17 | IPA: Detect nsupdate support for the realm directive | Stephen Gallagher | 1 | -14/+40 | |
For older platforms, do not add the 'realm' line in the update message | |||||
2012-01-17 | Raise the debug level of two very noisy statements | Stephen Gallagher | 1 | -2/+3 | |
2012-01-14 | Support multiple search bases in HBAC | Jan Zeleny | 5 | -39/+176 | |
2012-01-14 | LDAP: Copy URI instead of pointing at failover service record | Stephen Gallagher | 1 | -2/+8 | |
In a heavy load environment, sometimes the failover service record would be updated and free the URI value. We need to guarantee that this URI string remains valid throughout the entire request. https://fedorahosted.org/sssd/ticket/1139 | |||||
2012-01-14 | Log fixes for sdap_call_conn_cb | Stephen Gallagher | 1 | -1/+2 | |
2012-01-06 | IPA netgroups: Do not reuse loop iterator variable | Jakub Hrozek | 1 | -3/+3 | |
2012-01-06 | Do not call krb5_child when changing passwords and provider went offline | Jakub Hrozek | 1 | -1/+11 | |
https://fedorahosted.org/sssd/ticket/1131 | |||||
2012-01-06 | HBAC: create empty groups with one NULL element | Jakub Hrozek | 1 | -16/+15 | |
https://fedorahosted.org/sssd/ticket/1130 | |||||
2011-12-22 | Add compatibility layer for Heimdal Kerberos implementation | Stephen Gallagher | 3 | -8/+17 | |
2011-12-21 | Honor case sensitive flag when creating the ccname template | Jakub Hrozek | 3 | -5/+17 | |
2011-12-20 | Save original memberof, not memberof | Jakub Hrozek | 1 | -4/+16 | |
2011-12-20 | Failover: Introduce a per-service timeout | Jakub Hrozek | 3 | -5/+66 | |
https://fedorahosted.org/sssd/ticket/976 | |||||
2011-12-20 | Do not touch resolve_service_state in fo_resolve_service_done | Jakub Hrozek | 1 | -14/+11 | |
2011-12-20 | SUDO Integration - fixed memory leak in sdap_sudo_handler() | Pavel Březina | 1 | -0/+1 | |
2011-12-20 | SUDO Integration - be_sudo_req removed from sudo_ctx | Pavel Březina | 2 | -2/+0 | |
2011-12-19 | Pass sdap_id_ctx to online check from IPA provider | Jakub Hrozek | 5 | -18/+56 | |
2011-12-19 | Securely set umask when using mkstemp | Stephen Gallagher | 2 | -0/+6 | |
Coverity 12394, 12395, 12396, 12397 and 12398 | |||||
2011-12-19 | Move child_common routines to util | Stephen Gallagher | 14 | -856/+12 | |
2011-12-19 | Add common SIGCHLD handling for providers. | Pavel Zuna | 4 | -6/+260 | |
2011-12-16 | Logically dead code in sdap_nested_group_lookup_group | Pavel Březina | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1113 | |||||
2011-12-16 | SUDO integration - LDAP provider | Pavel Březina | 4 | -0/+657 | |
2011-12-16 | SUDO Integration - LDAP provider - save sudo rules functions | Jakub Hrozek | 2 | -0/+125 | |
2011-12-16 | SUDO Integration - LDAP configuration options | Pavel Březina | 6 | -3/+150 | |
2011-12-16 | SUDO integration - data provider backend handler | Pavel Březina | 3 | -0/+165 | |
2011-12-16 | Export the function to convert ldb_result to sysdb_attrs | Jakub Hrozek | 2 | -30/+1 | |
It will be reused later in the sudo responder | |||||
2011-12-16 | Use the case sensitivity flag in the proxy provider | Jakub Hrozek | 3 | -153/+181 | |
2011-12-16 | Use the case sensitivity flag in the simple access provider | Jakub Hrozek | 1 | -4/+15 | |
2011-12-16 | Use the case sensitivity flag in the LDAP provider | Jakub Hrozek | 6 | -11/+31 | |
2011-12-16 | Refactor saving sdap entities | Jakub Hrozek | 5 | -179/+146 | |
There was too much code duplication between sdap_save_{user,group,netgroup}. This patch removes the most egregious ones. | |||||
2011-12-14 | Support search bases in netgroup members translation | Pavel Březina | 1 | -1/+11 | |
2011-12-14 | Support search bases in RFC2307bis enumeration | Pavel Březina | 1 | -10/+145 | |
https://fedorahosted.org/sssd/ticket/960 | |||||
2011-12-12 | Add sdap_connection_expire_timeout option | Stephen Gallagher | 5 | -3/+18 | |
https://fedorahosted.org/sssd/ticket/1036 | |||||
2011-12-12 | Fix uninitialized value error in ipa_netgroups.c | Stephen Gallagher | 1 | -0/+1 | |
DEBUG message can print an unitialized value if the first netgroup has no members. Coverity 12382 | |||||
2011-12-09 | Fixed IPA netgroup processing | Jan Zeleny | 3 | -2/+7 | |
In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future. | |||||
2011-12-08 | LDAP: Fix missing break statements in force_tls | Stephen Gallagher | 1 | -6/+12 | |
Also add a default case to protect against bad input | |||||
2011-12-08 | LDAP provider: Error while setting the nocanon option should not be fatal | Jakub Hrozek | 1 | -3/+9 | |
https://fedorahosted.org/sssd/ticket/1100 | |||||
2011-12-08 | Add ldap_sasl_minssf option | Jan Zeleny | 5 | -1/+21 | |
https://fedorahosted.org/sssd/ticket/1075 | |||||
2011-12-05 | Allow using Glib for UTF8 support | Stephen Gallagher | 1 | -33/+11 | |
2011-11-30 | Use dereference during IPA provider initgroups | Jakub Hrozek | 1 | -40/+149 | |
https://fedorahosted.org/sssd/ticket/1099 | |||||
2011-11-29 | Fix two small bugs in group dereferencing | Jakub Hrozek | 1 | -2/+5 | |
2011-11-29 | Add ipa_hbac_support_srchost option to IPA provider | Jan Zeleny | 6 | -36/+151 | |
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078 | |||||
2011-11-29 | IPA migration fixes | Jakub Hrozek | 3 | -97/+141 | |
* use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924 | |||||
2011-11-29 | Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connections | Jakub Hrozek | 5 | -11/+43 | |
2011-11-29 | LDAP: Try next failover server on any error | Stephen Gallagher | 1 | -9/+5 | |
2011-11-28 | Fixed logically dead code in netgroup processing | Jan Zeleny | 1 | -1/+1 | |
2011-11-28 | Fixed uninitialized pointer read in netgroups processing | Jan Zeleny | 1 | -0/+6 | |
2011-11-25 | Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA provider | Jakub Hrozek | 4 | -4/+18 | |
This was causing a segfault during HBAC processing and any ID lookups except for netgroups | |||||
2011-11-23 | Added IPA account info handler | Jan Zeleny | 3 | -1/+373 | |
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider. | |||||
2011-11-23 | Added support for fetching netgroups in IPA provider | Jan Zeleny | 1 | -0/+992 | |
2011-11-23 | New IPA ID context | Jan Zeleny | 3 | -22/+37 | |