Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-01-06 | IPA netgroups: Do not reuse loop iterator variable | Jakub Hrozek | 1 | -3/+3 | |
2012-01-06 | Do not call krb5_child when changing passwords and provider went offline | Jakub Hrozek | 1 | -1/+11 | |
https://fedorahosted.org/sssd/ticket/1131 | |||||
2012-01-06 | HBAC: create empty groups with one NULL element | Jakub Hrozek | 1 | -16/+15 | |
https://fedorahosted.org/sssd/ticket/1130 | |||||
2011-12-22 | Add compatibility layer for Heimdal Kerberos implementation | Stephen Gallagher | 3 | -8/+17 | |
2011-12-21 | Honor case sensitive flag when creating the ccname template | Jakub Hrozek | 3 | -5/+17 | |
2011-12-20 | Save original memberof, not memberof | Jakub Hrozek | 1 | -4/+16 | |
2011-12-20 | Failover: Introduce a per-service timeout | Jakub Hrozek | 3 | -5/+66 | |
https://fedorahosted.org/sssd/ticket/976 | |||||
2011-12-20 | Do not touch resolve_service_state in fo_resolve_service_done | Jakub Hrozek | 1 | -14/+11 | |
2011-12-20 | SUDO Integration - fixed memory leak in sdap_sudo_handler() | Pavel Březina | 1 | -0/+1 | |
2011-12-20 | SUDO Integration - be_sudo_req removed from sudo_ctx | Pavel Březina | 2 | -2/+0 | |
2011-12-19 | Pass sdap_id_ctx to online check from IPA provider | Jakub Hrozek | 5 | -18/+56 | |
2011-12-19 | Securely set umask when using mkstemp | Stephen Gallagher | 2 | -0/+6 | |
Coverity 12394, 12395, 12396, 12397 and 12398 | |||||
2011-12-19 | Move child_common routines to util | Stephen Gallagher | 14 | -856/+12 | |
2011-12-19 | Add common SIGCHLD handling for providers. | Pavel Zuna | 4 | -6/+260 | |
2011-12-16 | Logically dead code in sdap_nested_group_lookup_group | Pavel Březina | 1 | -1/+1 | |
https://fedorahosted.org/sssd/ticket/1113 | |||||
2011-12-16 | SUDO integration - LDAP provider | Pavel Březina | 4 | -0/+657 | |
2011-12-16 | SUDO Integration - LDAP provider - save sudo rules functions | Jakub Hrozek | 2 | -0/+125 | |
2011-12-16 | SUDO Integration - LDAP configuration options | Pavel Březina | 6 | -3/+150 | |
2011-12-16 | SUDO integration - data provider backend handler | Pavel Březina | 3 | -0/+165 | |
2011-12-16 | Export the function to convert ldb_result to sysdb_attrs | Jakub Hrozek | 2 | -30/+1 | |
It will be reused later in the sudo responder | |||||
2011-12-16 | Use the case sensitivity flag in the proxy provider | Jakub Hrozek | 3 | -153/+181 | |
2011-12-16 | Use the case sensitivity flag in the simple access provider | Jakub Hrozek | 1 | -4/+15 | |
2011-12-16 | Use the case sensitivity flag in the LDAP provider | Jakub Hrozek | 6 | -11/+31 | |
2011-12-16 | Refactor saving sdap entities | Jakub Hrozek | 5 | -179/+146 | |
There was too much code duplication between sdap_save_{user,group,netgroup}. This patch removes the most egregious ones. | |||||
2011-12-14 | Support search bases in netgroup members translation | Pavel Březina | 1 | -1/+11 | |
2011-12-14 | Support search bases in RFC2307bis enumeration | Pavel Březina | 1 | -10/+145 | |
https://fedorahosted.org/sssd/ticket/960 | |||||
2011-12-12 | Add sdap_connection_expire_timeout option | Stephen Gallagher | 5 | -3/+18 | |
https://fedorahosted.org/sssd/ticket/1036 | |||||
2011-12-12 | Fix uninitialized value error in ipa_netgroups.c | Stephen Gallagher | 1 | -0/+1 | |
DEBUG message can print an unitialized value if the first netgroup has no members. Coverity 12382 | |||||
2011-12-09 | Fixed IPA netgroup processing | Jan Zeleny | 3 | -2/+7 | |
In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future. | |||||
2011-12-08 | LDAP: Fix missing break statements in force_tls | Stephen Gallagher | 1 | -6/+12 | |
Also add a default case to protect against bad input | |||||
2011-12-08 | LDAP provider: Error while setting the nocanon option should not be fatal | Jakub Hrozek | 1 | -3/+9 | |
https://fedorahosted.org/sssd/ticket/1100 | |||||
2011-12-08 | Add ldap_sasl_minssf option | Jan Zeleny | 5 | -1/+21 | |
https://fedorahosted.org/sssd/ticket/1075 | |||||
2011-12-05 | Allow using Glib for UTF8 support | Stephen Gallagher | 1 | -33/+11 | |
2011-11-30 | Use dereference during IPA provider initgroups | Jakub Hrozek | 1 | -40/+149 | |
https://fedorahosted.org/sssd/ticket/1099 | |||||
2011-11-29 | Fix two small bugs in group dereferencing | Jakub Hrozek | 1 | -2/+5 | |
2011-11-29 | Add ipa_hbac_support_srchost option to IPA provider | Jan Zeleny | 6 | -36/+151 | |
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078 | |||||
2011-11-29 | IPA migration fixes | Jakub Hrozek | 3 | -97/+141 | |
* use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924 | |||||
2011-11-29 | Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connections | Jakub Hrozek | 5 | -11/+43 | |
2011-11-29 | LDAP: Try next failover server on any error | Stephen Gallagher | 1 | -9/+5 | |
2011-11-28 | Fixed logically dead code in netgroup processing | Jan Zeleny | 1 | -1/+1 | |
2011-11-28 | Fixed uninitialized pointer read in netgroups processing | Jan Zeleny | 1 | -0/+6 | |
2011-11-25 | Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA provider | Jakub Hrozek | 4 | -4/+18 | |
This was causing a segfault during HBAC processing and any ID lookups except for netgroups | |||||
2011-11-23 | Added IPA account info handler | Jan Zeleny | 3 | -1/+373 | |
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider. | |||||
2011-11-23 | Added support for fetching netgroups in IPA provider | Jan Zeleny | 1 | -0/+992 | |
2011-11-23 | New IPA ID context | Jan Zeleny | 3 | -22/+37 | |
2011-11-23 | Added and modified options for IPA netgroups | Jan Zeleny | 2 | -24/+69 | |
2011-11-23 | Modified sdap_parse_search_base() | Jan Zeleny | 4 | -16/+14 | |
2011-11-23 | Renamed some LDAP routines | Jan Zeleny | 6 | -41/+49 | |
These were renamed just ot make sure they are not mistook for IPA netgroup functions. | |||||
2011-11-22 | Set more strict permissions on keyring | Simo Sorce | 1 | -1/+1 | |
We want to confine access to the keyring to the current process and not let root easily peek into the keyring contents. | |||||
2011-11-22 | Fixed unchecked value of setenv() in check_and_export_options() | Jan Zeleny | 1 | -2/+5 | |
https://fedorahosted.org/sssd/ticket/1080 |