sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2011-05-23	Include string.h in sss_cli.h	Sumit Bose	1	-0/+1
	Since memcpy() is used in sss_cli.h it should be declared here, too.
2011-02-11	Use neutral name for functions used by both pam and nss	Simo Sorce	1	-0/+1

2010-12-03	Add a renew task to krb5_child	Sumit Bose	1	-1/+7

2010-11-22	sss_client: make code thread-safe	Simo Sorce	1	-0/+5
	Add mutexes around nss operations and serialize them. This is necessary because nss operations may have global state. For pam it is sufficient to protect socket operations instead. As pam functions use only the provided pam handler. Fixes: https://fedorahosted.org/sssd/ticket/640
2010-11-15	Avoid long long in messages to PAM client use int64_t	Sumit Bose	1	-3/+3

2010-10-13	Add handling of nested netgroups to nss client	Sumit Bose	1	-0/+5

2010-10-13	Add support for netgroups to NSS sss_client	Stephen Gallagher	1	-2/+2

2010-10-13	Add utility function sss_strnlen()	Stephen Gallagher	1	-0/+5
	This is useful for guaranteeing the size of an input buffer.
2010-05-26	Handle Krb5 password expiration warning	Sumit Bose	1	-1/+5

2010-04-16	Use SO_PEERCRED on the PAM socket	Sumit Bose	1	-0/+11
	This is the second attempt to let the PAM client and the PAM responder exchange their credentials, i.e. uid, gid and pid. Because this approach does not require any message interchange between the client and the server the protocol version number is not changed. On the client side the connection is terminated it the responder is not run by root. On the server side the effective uid and gid and the pid of the client are available for future use. The following additional changes are made by this patch: - the checks of the ownership and the permissions on the PAM sockets are enhanced - internal error codes are introduced on the client side to generate more specific log messages if an error occurs
2010-03-22	Improvements for LDAP Password Policy support	Ralf Haferkamp	1	-7/+16
	Display warnings about remaining grace logins and password expiration to the user, when LDAP Password Policies are used. Improved detection if LDAP Password policies are supported by LDAP Server.
2010-03-08	Fixed alignment problems in nss client/server	George McCollister	1	-0/+14
	I fixed a handful of alignment problems in sss_client and nss responder. Enumerating group and passwd with getgrent and getpwent now works correctly on ARM. Signed-off-by: George McCollister <georgem@novatech-llc.com>
2010-02-23	Handle expired passwords like other PAM modules	Sumit Bose	1	-1/+20
	So far we handled expired password during authentication. Other PAM modules typically detect expired password during account management and return PAM_NEW_AUTHTOK_REQD if the password is expired and should be changed. The PAM library then calls the change password routines. To meet these standards pam_sss is change accordingly. As a result it is now possible to update an expired password via ssh if sssd is running with PasswordAuthentication=yes. One drawback due to limitations of PAM is that the user now has to type his current password again before setting a new one.
2010-02-19	Add documentation for PAM response messages	Sumit Bose	1	-19/+200

2010-02-18	Fix licensing issues for sss_client	Stephen Gallagher	1	-8/+22

2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+220
	Also update BUILD.txt