Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Provide python bindings for the HBAC evaluator library | Jakub Hrozek | 2011-07-08 | 1 | -3/+18 |
| | |||||
* | Add new HBAC lookup and evaluation routines | Stephen Gallagher | 2011-07-08 | 1 | -1/+2 |
| | |||||
* | Add helper functions for looking up HBAC rule components | Stephen Gallagher | 2011-07-08 | 1 | -0/+6 |
| | |||||
* | Add HBAC evaluator and tests | Stephen Gallagher | 2011-07-08 | 1 | -1/+27 |
| | |||||
* | Add missing libsss_util to proxy provider | Sumit Bose | 2011-06-15 | 1 | -0/+1 |
| | |||||
* | Build sssd utils as a libtool helper library | Stephen Gallagher | 2011-05-23 | 1 | -88/+98 |
| | | | | | | This will speed up the build, as we are not recompiling the same sources multiple times for different binaries. These objects will now be built once and then statically linked in. | ||||
* | Build SSSD plugins without a version number | Stephen Gallagher | 2011-05-23 | 1 | -5/+5 |
| | | | | | | | The version is both fake and unused, so we'll stop creating the versioned file and use only the unversioned .so. This is safe to do for now because all of the plugins are built at the same time as the interface. | ||||
* | Add support for openldap24 package on RHEL 5.7 | Sumit Bose | 2011-05-06 | 1 | -2/+3 |
| | |||||
* | Cache cleaning tool | Jan Zeleny | 2011-05-04 | 1 | -1/+9 |
| | |||||
* | Provide a configuration option to use systemd unit file | Jakub Hrozek | 2011-04-12 | 1 | -3/+12 |
| | | | | https://fedorahosted.org/sssd/ticket/837 | ||||
* | Make 'make check' look nice again | Sumit Bose | 2011-02-11 | 1 | -3/+8 |
| | | | | | | | | | With current libldb releases 'make check' will print a lot of 'unable to dlopen' messages although the test will succeed. This patch place the memberof module into a directory of its own to avoid these messages. Additionally this patch introduces TESTS_ENVIRONMENT which allows us to remove the SYSDB_TEST preprocessor definition. | ||||
* | Fix module registration with newer LDB libraries. | Stephen Gallagher | 2011-02-11 | 1 | -0/+1 |
| | |||||
* | Build and install translated man pages by default | Sumit Bose | 2010-12-23 | 1 | -3/+0 |
| | |||||
* | Make manual pages translatable | Jakub Hrozek | 2010-12-22 | 1 | -37/+10 |
| | | | | | | | | | Utilizes PO4A to extract translatable strings from Docbook XML sources and allows translators to submit ordinary .PO files. PO4A then generates translated Docbook documents that can be used to generate translated end user documentation. https://fedorahosted.org/sssd/ticket/297 | ||||
* | Serialize requests of the same user in the krb5 provider | Sumit Bose | 2010-12-20 | 1 | -0/+2 |
| | |||||
* | Bye, bye, ipa_timerules | Sumit Bose | 2010-12-08 | 1 | -20/+0 |
| | | | | | | It was decided that IPA HBAC will move to a different format to specify time ranges in access control rules. The evaluation based on the old format is not needed anymore. | ||||
* | Add support for FAST in krb5 provider | Sumit Bose | 2010-12-07 | 1 | -0/+1 |
| | |||||
* | Make sure that sss_obfuscate installs as executable | Stephen Gallagher | 2010-12-06 | 1 | -1/+1 |
| | |||||
* | Add support for automatic Kerberos ticket renewal | Sumit Bose | 2010-12-03 | 1 | -0/+2 |
| | |||||
* | Add krb5_renewable_lifetime option | Sumit Bose | 2010-12-03 | 1 | -0/+1 |
| | |||||
* | Print correct error messages for dp_err_to_string() | Stephen Gallagher | 2010-11-24 | 1 | -1/+2 |
| | | | | | | | | | | | All errnum values passed into this function throughout the code are PAM error codes, but we were passing them through strerror() to print them, which is only meaningful for ERRNO error codes. This patch changes dp_err_to_string() to use pam_strerror() and renames it to dp_pam_err_to_string() for clarity. https://fedorahosted.org/sssd/ticket/636 | ||||
* | Sanitize search filters in memberOf plugin | Stephen Gallagher | 2010-11-15 | 1 | -1/+3 |
| | |||||
* | Make handle_child_* request public | Sumit Bose | 2010-11-04 | 1 | -1/+3 |
| | | | | | | I took the opportunity to move everything related to the handling of the krb5_child into a separate file and cleaned the interfaces and related structures a bit. | ||||
* | Add infrastructure for Kerberos access provider | Sumit Bose | 2010-11-04 | 1 | -1/+3 |
| | |||||
* | Always use uint32_t for UID/GID numbers | Jakub Hrozek | 2010-10-26 | 1 | -0/+1 |
| | |||||
* | Improve versioning for automated builds | Stephen Gallagher | 2010-10-26 | 1 | -5/+5 |
| | | | | | | Also changes 'make srpms' and 'make prerelease-srpms' to 'make srpm' and 'make prerelease-srpm', as we are only building one SRPM. | ||||
* | Implement netgroups for proxy provider | Sumit Bose | 2010-10-25 | 1 | -0/+1 |
| | |||||
* | Write log opening failures to the syslog | Stephen Gallagher | 2010-10-19 | 1 | -1/+1 |
| | | | | | If there is a problem with reopening the logs, it can be an audit trail issue. | ||||
* | Fix 'make distcheck' for XML documentation | Stephen Gallagher | 2010-10-18 | 1 | -1/+1 |
| | | | | | A missing $(srcdir) variable was preventing 'make distcheck' from working if run from a parallel build directory. | ||||
* | Rename upgrade_config.py and build it properly | Stephen Gallagher | 2010-10-13 | 1 | -4/+2 |
| | | | | | | | | Previously, we were just copying the script into the libexec dir during installation. However, this causes problems for packaging multilib on several distributions. https://fedorahosted.org/sssd/ticket/641 | ||||
* | Implement netgroup support for LDAP provider | Sumit Bose | 2010-10-13 | 1 | -0/+4 |
| | |||||
* | Add netgroup support to the NSS responder | Stephen Gallagher | 2010-10-13 | 1 | -0/+3 |
| | |||||
* | Add support for netgroups to NSS sss_client | Stephen Gallagher | 2010-10-13 | 1 | -1/+3 |
| | |||||
* | Rename group.c and passwd.c for clarity | Stephen Gallagher | 2010-10-13 | 1 | -2/+2 |
| | | | | | Prefixing group.c and passwd.c with "nss_" similar to the way the PAM client sources are prefixed with "pam_" | ||||
* | Initialize kerberos service for GSSAPI | Jakub Hrozek | 2010-10-13 | 1 | -0/+1 |
| | |||||
* | Remove unused defines | Sumit Bose | 2010-10-13 | 1 | -2/+0 |
| | |||||
* | Distribute XML sources instead of man-pages | Sumit Bose | 2010-10-13 | 1 | -2/+3 |
| | |||||
* | Add common hash table setup | Stephen Gallagher | 2010-10-08 | 1 | -1/+2 |
| | | | | | sss_hash_create() produces a dhash table living in the talloc hierarchy. | ||||
* | Revert "Make ldap bind asynchronous" | Jakub Hrozek | 2010-09-15 | 1 | -3/+0 |
| | | | | This reverts 56d8d19ac9d857580a233d8264e851883b883c67 | ||||
* | Remove generated manpages when performing "make clean" | Stephen Gallagher | 2010-09-15 | 1 | -0/+1 |
| | | | | Fixes https://fedorahosted.org/sssd/ticket/614 | ||||
* | Deobfuscate password in back ends | Jakub Hrozek | 2010-09-08 | 1 | -2/+4 |
| | | | | | | When obfuscated password is used in config file, the LDAP backend converts it back to clear text and uses it to authenticate to the server. | ||||
* | sss_obfuscate tool | Jakub Hrozek | 2010-09-08 | 1 | -1/+9 |
| | | | | A tool to add obfuscated passwords into the SSSD config file | ||||
* | Fix pysss linking | Jakub Hrozek | 2010-09-08 | 1 | -0/+3 |
| | |||||
* | Password obfuscation utility functions | Jakub Hrozek | 2010-09-08 | 1 | -1/+18 |
| | | | | | | | Adds two utility functions to obfuscate a password and inverse to extract the cleartext password back. So far, only NSS-based implementation is provided. | ||||
* | Move crypto functions into its own subdir | Jakub Hrozek | 2010-09-08 | 1 | -3/+8 |
| | | | | | | A refactoring patch that creates a common util/crypto subdir with per-implementation subdirectories for each underlying crypto library supported by SSSD. | ||||
* | Remove useless /etc/dbus-1/system.d directory from installation | Maxim | 2010-09-02 | 1 | -2/+0 |
| | | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com> | ||||
* | Add custom pam module dir | Maxim | 2010-09-02 | 1 | -1/+1 |
| | | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com> | ||||
* | Add gentoo distrubutions | Maxim | 2010-09-02 | 1 | -0/+5 |
| | | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com> | ||||
* | Make ldap bind asynchronous | Martin Nagy | 2010-09-02 | 1 | -0/+3 |
| | | | | | | Every ldap function that could possibly create a new connection is now wrapped in a tevent_req. If the connection is created, we will call the function again after the socket is ready for writing. | ||||
* | Don't build SSSDConfig API when configured with --without-python-bindings | Stephen Gallagher | 2010-08-23 | 1 | -1/+14 |
| |