sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2012-11-10	Add diff_gid_lists() with test	Sumit Bose	2	-0/+172
	This patch adds a new call which compares a list of current GIDs with a list of new GIDs and return a list of GIDs which are currently missing and must be added and another list of GIDs which are not used anymore and must be deleted. The method is the same as used by diff_string_lists().
2012-10-29	Include talloc log in our debug facility	Michal Zidek	1	-1/+1
	https://fedorahosted.org/sssd/ticket/1495
2012-10-26	pac responder: add user principal and name alias to cached user object	Sumit Bose	3	-4/+46
	The principal name for the user is generated with the user name and the domain from the PAC. It is stored in the cache so that if e.g. can be used by password authentication. Additionally the name alias is stored to allow case-insensitive searches.
2012-10-26	pac responder: use only lower case user name	Sumit Bose	2	-5/+15
	Since winbind can only return lower-cased user name the pac responder must do the same to avoid inconsistent behaviour.
2012-10-26	pac responder: fix copy-and-paste error	Sumit Bose	1	-7/+0
	This error prevent proper id-mapping in the PAC responder.
2012-09-24	SYSDB: Remove unnecessary domain parameter from several sysdb calls	Jakub Hrozek	2	-6/+2
	The domain can be read from the sysdb object. Removing the domain string makes the API more self-contained.
2012-07-10	pac responder: limit access by checking UIDs	Sumit Bose	1	-0/+19
	A check for allowed UIDs is added in the common responder code directly after accept(). If the platform does not support reading the UID of the peer but allowed UIDs are configured, access is denied. Currently only the PAC responder sets the allowed UIDs for a socket. The default is that only root is allowed to access the socket of the PAC responder. Fixes: https://fedorahosted.org/sssd/ticket/1382
2012-07-06	Set file descriptor limits in pac responder	Sumit Bose	1	-0/+15

2012-06-21	Add range support to PAC responder	Sumit Bose	3	-45/+140

2012-06-21	PAC responder: add the core functionality	Sumit Bose	2	-2/+471
	This adds support for parsing PAC and storing information contained within. In particular the user and all his memberships are stored. In case it is necessary, getgrgid() requests are sent to provider for group resolution.
2012-06-21	PAC responder: add some utility functions	Jan Zeleny	2	-0/+549

2012-06-21	PAC responder: add basic infrastructure	Sumit Bose	3	-0/+340
	This adds only the basic outline of the PAC responder, it won't support any operations, it will just start and initialize itself.