summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* IPA: Remove MPG groups if getgrgid was called before getpw()rhel-7.1Jakub Hrozek2015-08-201-2/+39
* SYSDB: Index the objectSIDString attributeJakub Hrozek2015-06-253-1/+62
* sudo: sanitize filter valuesPavel Březina2015-06-181-2/+13
* subdomains: Inherit cleanup period and tokengroup settings from parent domainJakub Hrozek2015-06-086-0/+237
* UTIL: Inherit ignore_group_membersJakub Hrozek2015-06-082-0/+13
* SDAP: Add sdap_copy_map_entryJakub Hrozek2015-06-083-0/+103
* DP: Add a function to inherit DP options, if setJakub Hrozek2015-06-083-8/+181
* confdb: Add new option subdomain_inheritJakub Hrozek2015-06-086-3/+40
* Download complete groups if ignore_group_members is set with tokengroupsJakub Hrozek2015-06-081-2/+15
* sdap: properly handle binary objectGuid attributeSumit Bose2015-05-2811-34/+307
* SDAP: Filter ad groups in initgroupsLukas Slebodnik2015-04-221-0/+12
* SDAP: Extract filtering AD group to functionLukas Slebodnik2015-04-225-47/+101
* SDAP: Do not set gid 0 twiceLukas Slebodnik2015-04-221-7/+0
* LDAP/AD: do not resolve group members during tokenGroups requestSumit Bose2015-04-229-18/+64
* IPA: set EINVAL if dn can't be linearizedPavel Reichl2015-03-191-0/+1
* IPA: make sure output variable is setSumit Bose2015-03-191-1/+3
* IPA idviews: check if view name is setSumit Bose2015-03-171-1/+4
* selinux: Handle setup with empty default and no configured rulesJakub Hrozek2015-03-172-4/+10
* ipa_selinux: Fix warning may be used uninitializedLukas Slebodnik2015-03-171-1/+1
* ldap_child: initialized ccname_file_dummySumit Bose2015-03-061-1/+1
* selinux: Delete existing user mapping on empty defaultJakub Hrozek2015-03-052-7/+17
* LDAP: unlink ccname_file_dummy if there is an errorDaniel Hjorth2015-03-051-1/+11
* fill_id() fix LE/BE issue with wrong data typeSumit Bose2015-01-301-4/+6
* AD: use GC for SID requests as wellSumit Bose2015-01-302-10/+29
* ipa_s2n_save_objects: properly handle fully-qualified group namesSumit Bose2015-01-301-1/+1
* IPA: Resolve IPA user groups' overrideDN in non-default viewJakub Hrozek2015-01-301-8/+312
* LDAP: Add UUID when saving incomplete groupsJakub Hrozek2015-01-305-12/+29
* SELINUX: Set and reset umask when caling set_seuser from deamon codeJakub Hrozek2015-01-272-1/+21
* SELINUX: Call setuid(0)/setgid(0) to also set the real IDs to rootJakub Hrozek2015-01-271-1/+17
* IPA: Use attr's dom for users, tooJakub Hrozek2015-01-271-11/+11
* IPA: process_members() add ghosts only onceSumit Bose2015-01-271-2/+4
* IPA: resolve IPA group-memberships for AD usersSumit Bose2015-01-272-3/+44
* IPA: Rename user_dom into obj_domJakub Hrozek2015-01-271-12/+12
* sysdb: remove ghosts in all sub-domains as wellSumit Bose2015-01-231-2/+3
* nss: fix SID lookupsSumit Bose2015-01-231-1/+9
* IPA: properly handle mixed-case trusted domainsSumit Bose2015-01-234-2/+133
* views: fix GID overrride for mpg domainsSumit Bose2015-01-221-1/+20
* Open the PAC socket from krb5_child before dropping rootJakub Hrozek2015-01-213-0/+27
* nss: Add original DN and memberOf to origbyname requestSumit Bose2015-01-202-2/+5
* nss: refactor fill_orig()Sumit Bose2015-01-201-67/+66
* nss: make fill_orig() multi-value awareSumit Bose2015-01-202-21/+198
* krb5: fix entry order in MEMORY keytabSumit Bose2015-01-191-28/+90
* krb5_child: Return ERR_NETWORK_IO on KRB5_KDCREP_SKEWJakub Hrozek2015-01-141-0/+1
* IPA: set SYSDB_INITGR_EXPIRE for RESP_USER_GROUPLISTSumit Bose2015-01-141-0/+14
* IPA: resolve missing membersSumit Bose2015-01-141-14/+48
* IPA: rename ipa_s2n_get_groups_send() to ipa_s2n_get_fqlist_send()Sumit Bose2015-01-141-50/+50
* IPA: process_members() optionally return missing members listSumit Bose2015-01-141-18/+67
* IPA: add missing breakSumit Bose2015-01-141-0/+1
* IPA: make version check more preciseSumit Bose2015-01-141-2/+2
* IPA: do not look up overrides on client with default viewSumit Bose2015-01-141-14/+49