sssd.git - sssd with jhrozek's patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	AD: Add a utility function to create list of connections	Jakub Hrozek	2013-12-19	1	-15/+1
\| \| \| \| \| \| \| \| \| \|	ad_id.c and ad_access.c used the same block of code. With the upcoming option to disable GC lookups, we should unify the code in a function to avoid breaking one of the code paths. The same applies for the LDAP connection to the trusted AD DC. Includes a unit test.
*	AD: Fix ad_access_filter parsing with empty filter	Jakub Hrozek	2013-10-30	1	-0/+8
\|
*	AD: Add extended access filter	Jakub Hrozek	2013-10-25	1	-1/+212
\| \| \| \| \| \| \|	https://fedorahosted.org/sssd/ticket/2082 Adds a new option that allows the admin to specify a LDAP access filter that can be applied globally, per-domain or per-forest.
*	AD: Search GC by default during access control, fall back to LDAP	Jakub Hrozek	2013-10-25	1	-7/+157
\| \| \| \| \| \| \| \| \| \|	Resolves: https://fedorahosted.org/sssd/ticket/2082 In order to allow the ad_access_filter option to work for subdomain users as well, the Global Catalog must be searched. This patch adds a wrapper request atop sdap_access_send that selects the right connection (GC or LDAP) and optionally falls back to LDAP.
*	LDAP: Amend sdap_access_check to allow any connection	Jakub Hrozek	2013-10-25	1	-1/+3
\| \| \| \| \| \| \| \| \|	Related: https://fedorahosted.org/sssd/ticket/2082 Also move the check for subdomain to the handler. I think it is the job of the handler to decide which domain the request belongs to, not the request itself.
*	Replace new_subdomain() with find_subdomain_by_name()	Sumit Bose	2013-06-28	1	-3/+2
\| \| \| \| \| \|	new_subdomain() will create a new domain object and should not be used anymore in the priovder code directly. Instead a reference to the domain from the common domain object should be used.
*	handle ERR_ACCOUNT_EXPIRED properly	Pavel Březina	2013-06-17	1	-0/+4
\| \| \| \|	https://fedorahosted.org/sssd/ticket/1953
*	Convert sdap_access to new error codes	Simo Sorce	2013-03-19	1	-17/+15
\| \| \| \|	Also simplify sdap_access_send to avoid completely fake _send() routines.
*	Add realm info to sss_domain_info	Simo Sorce	2013-02-10	1	-1/+1
\|
*	Add be_req_get_data() helper funciton.	Simo Sorce	2013-01-21	1	-3/+4
\| \| \| \|	In preparation for making struct be_req opaque.
*	Add be_req_get_be_ctx() helper.	Simo Sorce	2013-01-21	1	-9/+7
\| \| \| \|	In preparation for making be_req opaque
*	Introduce be_req_terminate() helper	Simo Sorce	2013-01-21	1	-5/+6
\| \| \| \| \|	Call it everywhere instead of directly dereferencing be_req->fn This is in preparation of making be_req opaque.
*	Pass domain not be_req to access check functions	Simo Sorce	2013-01-21	1	-4/+7
\|
*	Remove sysdb as a be request structure member	Simo Sorce	2013-01-21	1	-1/+0
\| \| \| \|	The sysdb context is already available through the 'domain' context.
*	AD: Add AD access-control provider	Stephen Gallagher	2012-07-06	1	-0/+96
	This patch adds support for checking whether a user is expired or disabled in AD.