summaryrefslogtreecommitdiffstats
path: root/server/providers/krb5
Commit message (Collapse)AuthorAgeFilesLines
...
* added child timeout handlerSumit Bose2009-09-142-6/+90
|
* fix the wrong usage of an offsetSumit Bose2009-09-141-1/+1
|
* add krb5ccache_dir and krb5ccname_template optionSumit Bose2009-09-145-50/+356
| | | | | | | | The configuration options krb5ccache_dir and krb5ccname_template are added to the Kerberos provider to create the user's credential caches the same way as pam_krb5 does. Due to the design of the sssd and the supported ccache types of MIT Kerberos only files are allowed.
* Make the offline status backend-globalSimo Sorce2009-09-141-4/+13
| | | | | Add helpers functions to query/set the offline status per backend. Now all providers share the same offline status.
* use fork+exec for kerberos helperSumit Bose2009-09-113-193/+463
|
* add change password target to krb5 backendSumit Bose2009-09-114-207/+447
|
* send SSSD_REALM and SSSD_KDCIP environment to the clientSumit Bose2009-08-281-2/+31
| | | | | | Currently the kerberos locator plugin needs these two variables to be set to find a KDC which is configured in sssd but not in /etc/krb5.conf.
* some UPN handling fixesSumit Bose2009-08-242-23/+12
| | | | | | - making the realm part upper case is now optional and done in the LDAP backend - using a username@realm UPN is now optional
* use stored upn if availableSumit Bose2009-08-211-20/+101
| | | | | | If a user principle name (upn) can be found in sysdb the krb5 backend will use this otherwise is build as username@realm. It is checked that the realm is upper case only.
* Make socket paths a compile-time optionStephen Gallagher2009-08-111-1/+0
| | | | | | Previously, we had hardcoded the paths for the NSS, PAM and private PAM sockets to /var/lib/sss/pipes. With this patch, we will specify the sockets with --with-pipe-path.
* Consolidate tevent helpersJakub Hrozek2009-08-051-16/+0
|
* add infrastructure to handle new backend targetsSumit Bose2009-07-201-4/+5
|
* let krb5 backend safe valid credentials for offline authenticationSumit Bose2009-07-101-0/+43
|
* fix return code of krb5 child to indicate that the kdc is unavailableSumit Bose2009-07-081-1/+5
|
* Cleanup warnings in client and server codeSimo Sorce2009-07-031-3/+0
|
* added kerberos backend with tevent_req event handlingSumit Bose2009-07-023-0/+837