summaryrefslogtreecommitdiff
path: root/src/providers
AgeCommit message (Expand)AuthorFilesLines
2012-11-19LDAP: Make it possible to use full principal in ldap_sasl_authid againJakub Hrozek1-4/+16
2012-11-19LDAP: Checking the principal should not be considered fatalJakub Hrozek1-6/+10
2012-11-19LDAP: Provide a common sdap_set_sasl_options init functionJakub Hrozek4-91/+95
2012-11-19Do not save HBAC rules in subdomain subtreeSumit Bose3-16/+32
2012-11-19Refactor the way subdomain accounts are savedSimo Sorce2-4/+61
2012-11-19LDAP: Refactor saving ghost usersJakub Hrozek1-88/+99
2012-11-19LDAP: use the correct memory contextJakub Hrozek1-1/+1
2012-11-19LDAP: Fix saving empty groupsJakub Hrozek1-2/+4
2012-11-19LDAP: Allocate the temporary context on NULL, not memctxJakub Hrozek1-1/+1
2012-11-19LDAP: Remove double breakJakub Hrozek1-1/+0
2012-11-18LDAP: Expire even non authenticated connectionsJakub Hrozek1-8/+11
2012-11-16fix -O3 variable may be uninitialized warningsPavel Březina2-6/+6
2012-11-15sudo: store rules with no sudoHost attributePavel Březina1-0/+7
2012-11-15Add ignore_group_members option.Paul B. Henson2-2/+13
2012-11-14Run IPA subdomain provider if IPA ID provider is configuredSumit Bose2-2/+69
2012-11-12Only build extract_and_send_pac on platforms that support itJakub Hrozek1-104/+18
2012-11-12KRB5: Rename variable to avoid shadowing a global declarationJakub Hrozek1-4/+4
2012-11-12backend: add PAC to the list of known clientsPavel Březina1-0/+2
2012-11-12subdomains: check request type on one place onlyPavel Březina1-6/+0
2012-11-12Do not always return PAM_SYSTEM_ERR when offline krb5 authentication failsJakub Hrozek1-1/+2
2012-11-10Do not remove a group if it has members from subdomainsSumit Bose1-4/+15
2012-11-08Clarify debug message about initgroups and subdomainsSumit Bose1-0/+7
2012-11-08do not default fullname to gecos when schema = adPavel Březina1-0/+14
2012-11-01LDAP: Better debug logging when saving groupsStephen Gallagher1-11/+75
2012-11-01LDAP: Fix off-by-one error when saving ghost usersJakub Hrozek1-1/+1
2012-10-29Include talloc log in our debug facilityMichal Zidek4-5/+4
2012-10-26Make sub-domains case-insensitiveSumit Bose1-2/+23
2012-10-26krb5_auth: update with correct UPN if neededSumit Bose3-0/+133
2012-10-26Use find_or_guess_upn() where neededSumit Bose4-34/+49
2012-10-26Add new call find_or_guess_upn()Sumit Bose4-8/+54
2012-10-26krb5_child: send back the client principalSumit Bose4-5/+42
2012-10-26krb5_mod_ccname: replace wrong memory contextSumit Bose1-1/+1
2012-10-26krb5_child: send PAC to PAC responderSumit Bose1-1/+139
2012-10-26krb5_auth: send different_realm flag to krb5_childSumit Bose2-1/+8
2012-10-26krb5_auth: check if principal belongs to a different realmSumit Bose4-0/+43
2012-10-26check_ccache_files: search sub-domains as wellSumit Bose1-4/+14
2012-10-26krb5_auth_send: check for sub-domainsSumit Bose4-11/+37
2012-10-26subdomain-id: Generate homedir only for users not groupsSumit Bose1-10/+12
2012-10-24KRB5: Return error when principal selection failsJakub Hrozek1-1/+4
2012-10-24sudo refresh: handle errors properlyPavel Březina1-8/+25
2012-10-24sudo: do not fail if usn value is zero but full refresh is completedPavel Březina2-7/+19
2012-10-16Make TTL configurable for dynamic dns updatesJames Hogarth3-2/+14
2012-10-15LDAP: Check validity of naming_contextJakub Hrozek1-1/+1
2012-10-12Only call krb5_set_trace_callback on platforms that support itJakub Hrozek2-2/+2
2012-10-12Create ghost users when a user DN is encountered in IPAJakub Hrozek1-37/+276
2012-10-12Allow extdom exop to return flat domain name as wellSumit Bose4-4/+37
2012-10-12Collect krb5 trace on high debug levelsJakub Hrozek4-3/+50
2012-10-12Two fixes to child processesJakub Hrozek2-6/+5
2012-10-10Add more info about ticket validationOndrej Kos1-0/+8
2012-10-10Fix segfault when ID-mapping an entry without a SIDJakub Hrozek1-1/+1