summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa/ipa_hbac_common.c
Commit message (Collapse)AuthorAgeFilesLines
* Add ipa_hbac_support_srchost option to IPA providerJan Zeleny2012-08-211-0/+3
| | | | | don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
* HBAC: create empty groups with one NULL elementJakub Hrozek2012-06-221-16/+15
| | | | https://fedorahosted.org/sssd/ticket/1130
* Add a missing breakJakub Hrozek2011-10-171-0/+1
|
* HBAC: Use originalMember for identifying hostgroupsStephen Gallagher2011-10-141-45/+51
|
* HBAC: Use originalMember for identifying servicegroupsStephen Gallagher2011-10-141-41/+55
|
* HBAC: Do not save member/memberOf linksStephen Gallagher2011-10-141-120/+0
| | | | We can just trust the values from the FreeIPA server
* HBAC: fix typos preventing proper hostgroup evaluationStephen Gallagher2011-09-281-3/+3
|
* HBAC: Handle saving groups that have no membersStephen Gallagher2011-08-261-7/+21
|
* Fix incorrect NULL check in ipa_hbac_common.cStephen Gallagher2011-08-011-1/+1
| | | | https://fedorahosted.org/sssd/ticket/936
* Treat NULL or empty rhost as unknownStephen Gallagher2011-08-011-9/+21
| | | | | | | Previously, we were assuming this meant it was coming from the localhost, but this is not a safe assumption. We will now treat it as unknown and it will fail to match any rule that requires a specified srchost or group of srchosts.
* Add helper functions for looking up HBAC rule componentsStephen Gallagher2011-08-011-0/+871