summaryrefslogtreecommitdiffstats
path: root/server/config/etc
Commit message (Collapse)AuthorAgeFilesLines
* Remove default for ldap_use_start_tls in IPA providersStephen Gallagher2009-12-101-1/+1
|
* Add 'permit' and 'deny' access providers to SSSDConfig APIStephen Gallagher2009-12-101-0/+9
|
* Add missing options to sssd-ipa configuraionStephen Gallagher2009-12-091-0/+72
|
* Add ldap_pwd_policy optionSumit Bose2009-11-231-0/+1
|
* Validate Kerberos credentials with local keytabSumit Bose2009-11-201-1/+3
|
* Convert SSSDConfig API to ipachangeconfJakub Hrozek2009-11-201-1/+2
| | | | | | | With this patch, SSSDConfigAPI is able to keep comments and ordering of sections. Fixes: #226
* Make the password field configurable in NSSJakub Hrozek2009-11-181-0/+1
| | | | | | | | Per the discussion on sssd-devel list, nss_sss should not return a hardcoded value but this should rather be configurable to allow whatever the OS or distribution thinks is the best for the particular case. Fixes: #266
* Add cleanup taskSimo Sorce2009-11-101-0/+1
|
* Update midpoint refresh logic to be relative to cache timeoutStephen Gallagher2009-11-051-1/+1
|
* Rename sdap_id_map to sdap_attr_mapSimo Sorce2009-11-031-0/+2
| | | | | | Also start adding some infrastructure to use the USN counter when available. In particular add a place to add generic attrs mapping, ie attributes that are neither user nor group specific.
* Remove magic_private_groups from SSSDConfig API schemaStephen Gallagher2009-11-031-1/+0
|
* Make config_file_version a hidden setting in SSSDConfig APIStephen Gallagher2009-11-031-1/+0
| | | | | | | | The config_file_version should never be changed by the API, so we will hide the option inside the SSSDConfig API and remove it from the schema. Guarantee that the config file is of the correct version
* Tidy up ipa optionsSimo Sorce2009-10-292-5/+1
| | | | | | | | | | | | | | Do not replicate every and each option we may want to set in ipa. Just read out ldap and krb provider options (added reference in the manual too, and removed mention of ipa specific timeout values, use ldap options for that) Avoid calling auth module initialization twice, just pass the auth context to the chpass module too. Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be used for both users and groups. the user and group search bases can still be set separately if necessary but they are now optional and set to be identical to SDAP_SEARCH_BASE if not explicitly specified in the configuration.
* Fix sssd.api.conf with correct entry_cache_timeoutStephen Gallagher2009-10-281-2/+3
| | | | | Changeset 3a21103f61bf9b60256cc2d0da54b757b634319f moved the wrong option to the domain list, and also didn't update the unit tests.
* Move responsibility for entry expiration timeoutSimo Sorce2009-10-272-2/+1
| | | | | The providers are now responsible for determining how long a cached entry is considered valid. The default is the same as before (600s)
* Add IPA conf templateSimo Sorce2009-10-261-0/+9
|
* Add support for offline auth cache timeoutStephen Gallagher2009-10-221-0/+1
| | | | | | | | | This adds a new option (offline_credentials_expiration) to the [PAM] section of the sssd.conf If the user does not perform an online authentication within the timeout (in days), they will be denied auth once the timeout passes.
* Bring SSSDConfig API options up-to-dateStephen Gallagher2009-10-222-12/+48
|
* Add plugin configuration schema for proxy providerStephen Gallagher2009-10-131-0/+7
|
* Add new SSSDConfig python APIStephen Gallagher2009-10-124-0/+104
Also adds unit tests for the SSSDConfig API
generated by cgit (git 2.34.1) at 2024-04-25 05:12:32 +0000