summaryrefslogtreecommitdiffstats
path: root/src/providers/ad/ad_access.h
Commit message (Collapse)AuthorAgeFilesLines
* AD: Add a utility function to create list of connectionsJakub Hrozek2013-12-191-3/+1
| | | | | | | | | | ad_id.c and ad_access.c used the same block of code. With the upcoming option to disable GC lookups, we should unify the code in a function to avoid breaking one of the code paths. The same applies for the LDAP connection to the trusted AD DC. Includes a unit test.
* AD: Search GC by default during access control, fall back to LDAPJakub Hrozek2013-10-251-1/+3
| | | | | | | | | | Resolves: https://fedorahosted.org/sssd/ticket/2082 In order to allow the ad_access_filter option to work for subdomain users as well, the Global Catalog must be searched. This patch adds a wrapper request atop sdap_access_send that selects the right connection (GC or LDAP) and optionally falls back to LDAP.
* AD: Add AD access-control providerStephen Gallagher2012-07-061-0/+35
This patch adds support for checking whether a user is expired or disabled in AD.