summaryrefslogtreecommitdiff
path: root/src/providers
AgeCommit message (Collapse)AuthorFilesLines
2011-12-16Refactor saving sdap entitiesJakub Hrozek5-179/+146
There was too much code duplication between sdap_save_{user,group,netgroup}. This patch removes the most egregious ones.
2011-12-14Support search bases in netgroup members translationPavel Březina1-1/+11
2011-12-14Support search bases in RFC2307bis enumerationPavel Březina1-10/+145
https://fedorahosted.org/sssd/ticket/960
2011-12-12Add sdap_connection_expire_timeout optionStephen Gallagher5-3/+18
https://fedorahosted.org/sssd/ticket/1036
2011-12-12Fix uninitialized value error in ipa_netgroups.cStephen Gallagher1-0/+1
DEBUG message can print an unitialized value if the first netgroup has no members. Coverity 12382
2011-12-09Fixed IPA netgroup processingJan Zeleny3-2/+7
In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future.
2011-12-08LDAP: Fix missing break statements in force_tlsStephen Gallagher1-6/+12
Also add a default case to protect against bad input
2011-12-08LDAP provider: Error while setting the nocanon option should not be fatalJakub Hrozek1-3/+9
https://fedorahosted.org/sssd/ticket/1100
2011-12-08Add ldap_sasl_minssf optionJan Zeleny5-1/+21
https://fedorahosted.org/sssd/ticket/1075
2011-12-05Allow using Glib for UTF8 supportStephen Gallagher1-33/+11
2011-11-30Use dereference during IPA provider initgroupsJakub Hrozek1-40/+149
https://fedorahosted.org/sssd/ticket/1099
2011-11-29Fix two small bugs in group dereferencingJakub Hrozek1-2/+5
2011-11-29Add ipa_hbac_support_srchost option to IPA providerJan Zeleny6-36/+151
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
2011-11-29IPA migration fixesJakub Hrozek3-97/+141
* use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924
2011-11-29Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek5-11/+43
2011-11-29LDAP: Try next failover server on any errorStephen Gallagher1-9/+5
2011-11-28Fixed logically dead code in netgroup processingJan Zeleny1-1/+1
2011-11-28Fixed uninitialized pointer read in netgroups processingJan Zeleny1-0/+6
2011-11-25Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA providerJakub Hrozek4-4/+18
This was causing a segfault during HBAC processing and any ID lookups except for netgroups
2011-11-23Added IPA account info handlerJan Zeleny3-1/+373
Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider.
2011-11-23Added support for fetching netgroups in IPA providerJan Zeleny1-0/+992
2011-11-23New IPA ID contextJan Zeleny3-22/+37
2011-11-23Added and modified options for IPA netgroupsJan Zeleny2-24/+69
2011-11-23Modified sdap_parse_search_base()Jan Zeleny4-16/+14
2011-11-23Renamed some LDAP routinesJan Zeleny6-41/+49
These were renamed just ot make sure they are not mistook for IPA netgroup functions.
2011-11-22Set more strict permissions on keyringSimo Sorce1-1/+1
We want to confine access to the keyring to the current process and not let root easily peek into the keyring contents.
2011-11-22Fixed unchecked value of setenv() in check_and_export_options()Jan Zeleny1-2/+5
https://fedorahosted.org/sssd/ticket/1080
2011-11-22Cleanup: Remove unused parametersJakub Hrozek25-119/+38
2011-11-18Prevent printing NULL in several places of LDAP providerJakub Hrozek2-5/+9
2011-11-11Use one transaction instead of two during RFC2307bis group processingJakub Hrozek1-31/+55
https://fedorahosted.org/sssd/ticket/1054
2011-11-11Squash transactions in sdap_initgr_common_storeJakub Hrozek1-6/+25
https://fedorahosted.org/sssd/ticket/1053
2011-11-08LDAP: Remove redundant groups from the lookup listStephen Gallagher1-23/+0
2011-11-07Fixed empty loginShell in proxy providerJan Zeleny1-4/+32
https://fedorahosted.org/sssd/ticket/892
2011-11-07Use correct state struct in sdap_initgr_rfc2307bis_next_baseJakub Hrozek1-2/+3
2011-11-07Fix segfault in sdap_get_initgr_userJakub Hrozek1-1/+2
2011-11-02Support to request canonicalization in LDAP/IPA providerJan Zeleny7-1/+28
https://fedorahosted.org/sssd/ticket/957
2011-11-02Add support to request canonicalization on krb AS requestsJan Zeleny5-3/+28
https://fedorahosted.org/sssd/ticket/957
2011-11-02LDAP: Add support for multiple search bases for group enumerationStephen Gallagher4-24/+101
2011-11-02LDAP: Add support for multiple search bases for user enumerationStephen Gallagher4-8/+49
2011-11-02LDAP: Convert ldap_*_search_filterStephen Gallagher3-59/+23
Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter.
2011-11-02LDAP: Add multiple search bases for initgroups (RFC2307bis groups)Stephen Gallagher1-77/+225
2011-11-02LDAP: Add multiple search bases for initgroups (RFC2307 groups)Stephen Gallagher1-17/+99
2011-11-02LDAP: Add multiple search bases for initgroups (users)Stephen Gallagher1-30/+72
2011-11-02LDAP: Support multiple group search bases (non-enumeration, RFC2307)Stephen Gallagher4-16/+74
2011-11-02LDAP: Support multiple netgroup search basesStephen Gallagher3-14/+65
2011-11-02LDAP: Support multiple user search bases (non-enumeration)Stephen Gallagher4-14/+70
2011-11-02LDAP: Add parser for multiple search basesStephen Gallagher5-26/+380
2011-11-02Make sdap_get_id_specific_filter() more strictStephen Gallagher2-4/+4
2011-11-02Fix size return for split_on_separator()Stephen Gallagher1-5/+5
It was returning the size of the array, rather than the number of elements. (The array was NULL-terminated). This argument was only used in one place that was actually working around this odd return value.
2011-11-02Remove unused sdap_options attributesStephen Gallagher1-3/+0
These DNs were never assigned or referenced anywhere.