summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa/ipa_auth.c
Commit message (Collapse)AuthorAgeFilesLines
* LDAP: sdap_id_ctx might contain several connectionsJakub Hrozek2013-06-071-1/+2
| | | | | | | | | | | | | | | | | | | With some LDAP server implementations, one server might provide different "views" of the identites on different ports. One example is the Active Directory Global catalog. The provider would contact different view depending on which operation it is performing and against which SSSD domain. At the same time, these views run on the same server, which means the same server options, enumeration, cleanup or Kerberos service should be used. So instead of using several different failover ports or several instances of sdap_id_ctx, this patch introduces a new "struct sdap_id_conn_ctx" that contains the connection cache to the particular view and an instance of "struct sdap_options" that contains the URI. No functional changes are present in this patch, currently all providers use a single connection. Multiple connections will be used later in the upcoming patches.
* Making the authtok structure really opaque.Lukas Slebodnik2013-04-021-1/+1
| | | | | | | | | | | | | | | | | | | | Definition of structure sss_auth_token was removed from header file authtok.h and there left only declaration of this structure. Therefore only way how to use this structure is to use accessory function from same header file. To creating new empty authotok can only be used newly created function sss_authtok_new(). TALLOC context was removed from copy and setter functions, because pointer to stuct sss_auth_token is used as a memory context. All declaration of struct sss_auth_token variables was replaced with pointer to this structure and related changes was made in source code. Function copy_pam_data can copy from argument src which was dynamically allocated with function create_pam_data() or zero initialized struct pam_data allocated on stack. https://fedorahosted.org/sssd/ticket/1830
* Use common error facility instead of sdap_resultSimo Sorce2013-03-191-11/+13
| | | | | | | | | Simplifies and consolidates error reporting for ldap authentication paths. Adds 3 new error codes: ERR_CHPASS_DENIED - Used when password constraints deny password changes ERR_ACCOUNT_EXPIRED - Account is expired ERR_PASSWORD_EXPIRED - Password is expired
* Add be_req_get_data() helper funciton.Simo Sorce2013-01-211-1/+2
| | | | In preparation for making struct be_req opaque.
* Add be_req_get_be_ctx() helper.Simo Sorce2013-01-211-10/+12
| | | | In preparation for making be_req opaque
* Introduce be_req_terminate() helperSimo Sorce2013-01-211-11/+6
| | | | | Call it everywhere instead of directly dereferencing be_req->fn This is in preparation of making be_req opaque.
* Remove sysdb as a be context structure memberSimo Sorce2013-01-211-1/+1
| | | | The sysdb context is already available through the 'domain' structure.
* Add domain to sysdb_search_user_by_name()Simo Sorce2013-01-151-0/+1
| | | | Also remove unused sysdb_search_domuser_by_name()
* Change pam data auth tokens.Simo Sorce2013-01-101-5/+1
| | | | Use the new authtok abstraction and interfaces throught the code.
* krb5_auth_send: check for sub-domainsSumit Bose2012-10-261-6/+0
| | | | | | If there is an authentication request for a user from a sub-domain a temporary sysdb context is generated to allow lookups in the corresponding sub-tree in the cache.
* Basic support for subdomains in auth providerJan Zeleny2012-04-241-0/+6
|
* Make password migration code use the IPA config retrieval codeJan Zeleny2012-02-061-57/+14
|
* IPA migration fixesJakub Hrozek2011-11-291-97/+131
| | | | | | | * use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924
* Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek2011-11-291-1/+1
|
* sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny2011-08-151-1/+0
| | | | | The patch also updates code using modified functions. Tests have also been adjusted.
* Use realm for basedn instead of IPA domainJakub Hrozek2011-02-281-6/+6
| | | | https://fedorahosted.org/sssd/ticket/807
* Add timeout parameter to sdap_get_generic_send()Sumit Bose2011-01-171-1/+3
|
* ldap: add checks to determine if USN features are available.Simo Sorce2010-12-071-1/+1
|
* Store rootdse supported features in sdap_handlerSumit Bose2010-09-151-2/+2
|
* Cleaned some dead assignmentsJan Zeleny2010-09-071-1/+1
| | | | | | Two needless assignments were deleted, two were complemented with code checking function results. Ticket: #582
* Avoid potential NULL dereferenceStephen Gallagher2010-06-101-3/+5
| | | | https://fedorahosted.org/sssd/ticket/506
* New version of IPA auth and password migrationSumit Bose2010-05-161-176/+328
| | | | | | | | | The current version modified some global structures to be able to use Kerberos and LDAP authentication during the IPA password migration. This new version only uses tevent requests. Additionally the ipaMigrationEnabled attribute is read from the IPA server to see if password migration is allowed or not.
* Rename server/ directory to src/Stephen Gallagher2010-02-181-0/+313
Also update BUILD.txt
generated by cgit (git 2.34.1) at 2024-05-04 09:24:07 +0000