summaryrefslogtreecommitdiffstats
path: root/server/providers/ldap/sdap.h
Commit message (Collapse)AuthorAgeFilesLines
* added generic LDAP search sdap_get_generic_send/_recvSumit Bose2009-10-221-0/+5
|
* Check for expired passwords in LDAP providerSumit Bose2009-10-151-1/+27
|
* Move ldap provider configuration into its own fileSimo Sorce2009-10-141-4/+11
|
* Make options parser available to all providersSimo Sorce2009-10-141-47/+4
|
* add a replacement if ldap_control_create is missingSumit Bose2009-10-131-1/+1
|
* Differentiate between search and network timeoutsSimo Sorce2009-10-091-0/+1
| | | | | | Network timeouts are used in quick operations like bind. Search timeout is used for operations that can "legally" require more time. Change defaults to 6 and 60 seconds respectively.
* add support for server side LDAP password policiesSumit Bose2009-10-081-1/+2
| | | | | | | - password policy request controls are send during bind and change password extended operation - the response control is evaluated to see if the password is expired or will expire, soon
* Initial implementation of sasl bind supportSimo Sorce2009-10-011-0/+6
| | | | | | Inits krb5 credentials, if sasl mech is GSSAPI. Tested with GSSAPI and host keytab as well as user credentials. Updates also manpages with the new options.
* add new config options ldap_tls_cacert and ldap_tls_cacertdirSumit Bose2009-09-251-0/+4
|
* Turn ldap driver options into multitypeSimo Sorce2009-09-141-53/+88
| | | | | | | | | | This patch makes basic options multiype, the init function assigns a type from the initialization array, and processes values fetched from confdb accordingly. 4 types are supported so far: string, number, blob and boolean Also convert defines into enums where appropriate. Add fetch functions that check the requested type.
* Complete the removal of "legacy" option.Simo Sorce2009-09-111-0/+3
| | | | | | | | | The code was still dependent on it for the ldap driver. Changed the driver code to depend on the schema type. Fix defaults for user and groups trees. ATM if you use the rfc2307bis schema you have to put users and groups in 2 separate trees (what people does by default anyway. If this limitation will turn to be too hard, we will change this later.
* fix internal order of ldap user mapping optionsSumit Bose2009-08-281-4/+4
|
* Make enumeration an independent taskSimo Sorce2009-08-271-3/+7
| | | | | | Always immediately return to DP, and update users/groups in the background. Also implements an optimization to retrieve only changed/new users/groups by filtering using the modifyTimestamp after the first query.
* some UPN handling fixesSumit Bose2009-08-241-1/+3
| | | | | | - making the realm part upper case is now optional and done in the LDAP backend - using a username@realm UPN is now optional
* Fix race condition in sdap codeSimo Sorce2009-08-041-1/+9
| | | | | | | Retrieving ldap results and storing users could sometimes results in race conditions where the final ldap result was retrieved before the store operations where finished resulting in the operations to be aborted before termination. Implement a serialization mechanism per operation.
* Rework the engine that deals with openldap librariesSimo Sorce2009-07-201-5/+23
| | | | | | | The way openldap libraries work, require to have a single engine per connection as all replies are read at the same time. So we need to always read anything that comes in from the wire and then loop to dispatch results to the requests that are waiting.
* Implement the ldap identity module.Simo Sorce2009-07-081-0/+7
| | | | This uses and exapands the async helpers.
* Add async helper functionsSimo Sorce2009-07-081-0/+132
These functions use the tevent_req async model, where a pair of _send/_recv functions pilot requests, with additional helpers like _done functions, and where needed multiple stage helpers.
generated by cgit (git 2.34.1) at 2024-05-09 13:03:13 +0000