| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
|
|
| |
There were two functions for parsing strings by a separator. This patch
consolidates on the one previously used in confdb. This also allows
stripping the tokens of whitespace.
Fixes: #319
|
| |
|
|
|
|
|
|
| |
When using GSSAPI we need a valid service ticket to talk to the LDAP
server. If the ticket is expired the LDAP client returns with 'Can't
contact LDAP server'. Currently we set the backend offline if this error
occurs although the server is still available. This patch checks if the
TGT is expired and tries to renew the credentials before going offline.
|
| |
|
|
|
|
|
| |
To avoid blocking in a synchronous call, the TGT is saved in a separate
process
Fixes: #277
|
| | |
|
| |
|
|
|
|
|
| |
The retun values are still not directly used with ldap libraries that still do
their own name resolution, but this patch introduces a very basic framework to
have a multiple providers in one domain use and share a single failover
service if they want to.
|
| |
|
|
|
| |
When using high debug levels or valgrind the code maybe slow enough that these
timeouts were too strict.
|
| | |
|
| |
|
|
| |
Split enum task in a separate file.
|
| |
|
|
|
|
| |
Also start adding some infrastructure to use the USN counter when available.
In particular add a place to add generic attrs mapping, ie attributes that are
neither user nor group specific.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Do not replicate every and each option we may want to set in ipa.
Just read out ldap and krb provider options (added reference in the manual too,
and removed mention of ipa specific timeout values, use ldap options for that)
Avoid calling auth module initialization twice, just pass the auth context to
the chpass module too.
Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be
used for both users and groups. the user and group search bases can still be set
separately if necessary but they are now optional and set to be identical to
SDAP_SEARCH_BASE if not explicitly specified in the configuration.
|
| |
|
|
|
| |
The providers are now responsible for determining how long a cached
entry is considered valid. The default is the same as before (600s)
|
| |
|
|
|
|
| |
Nested groups weren't properly handled.
Add 2 pass strategy to update groups memberships
Stuff work as expected when enumeration is enabled now.
|
| |
|
|
|
| |
Put all init functions in their own file so that the other files can be reused in
other providers w/o having them in the way.
|
| | |
|
| |
|
