summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa
Commit message (Expand)AuthorAgeFilesLines
* IPA: Remove the ipa_hbac_treat_deny_as optionJakub Hrozek2015-03-248-79/+19
* IPA: Deprecate the ipa_hbac_treat_deny_as optionJakub Hrozek2015-03-241-0/+4
* IPA: Only treat malformed HBAC rules as fatal if deny rules are enabledJakub Hrozek2015-03-241-14/+54
* IPA: Drop useless sysdb parameterJakub Hrozek2015-03-241-16/+10
* IPA: Use custom error codes when validating HBAC rulesJakub Hrozek2015-03-244-29/+29
* SDAP: Make simple bind timeout configurableJakub Hrozek2015-03-231-1/+6
* IPA: set EINVAL if dn can't be linearizedPavel Reichl2015-03-191-0/+1
* IPA: make sure output variable is setSumit Bose2015-03-191-1/+3
* selinux: Handle setup with empty default and no configured rulesJakub Hrozek2015-03-172-4/+10
* IPA idviews: check if view name is setSumit Bose2015-03-171-1/+4
* Add missing new lines to debug messagesLukas Slebodnik2015-03-175-9/+9
* LDAP/AD: do not resolve group members during tokenGroups requestSumit Bose2015-03-171-1/+1
* ipa_selinux: Fix warning may be used uninitializedLukas Slebodnik2015-03-171-1/+1
* ipa: make sure extdom expo data is availableSumit Bose2015-03-131-0/+5
* ipa: do not treat missing sub-domain users as errorSumit Bose2015-03-131-3/+7
* be_refresh: add sdap_refresh_initPavel Březina2015-03-081-5/+2
* sdap_handle_acct_req_send: remove be_reqPavel Březina2015-03-081-1/+1
* selinux: Delete existing user mapping on empty defaultJakub Hrozek2015-03-042-7/+17
* FO: Use SRV TTL in fail over codeJakub Hrozek2015-03-032-0/+7
* Remove useless assignment to function parameterLukas Slebodnik2015-03-021-1/+0
* IPA: Remove unused argument from ipa_id_get_group_uuidsLukas Slebodnik2015-03-021-2/+0
* SELINUX: Check the return value of setuid and setgidJakub Hrozek2015-02-131-2/+12
* AD: use GC for SID requests as wellSumit Bose2015-01-301-0/+1
* ipa_s2n_save_objects: properly handle fully-qualified group namesSumit Bose2015-01-301-1/+1
* IPA: Resolve IPA user groups' overrideDN in non-default viewJakub Hrozek2015-01-301-8/+312
* SELINUX: Set and reset umask when caling set_seuser from deamon codeJakub Hrozek2015-01-271-1/+17
* SELINUX: Call setuid(0)/setgid(0) to also set the real IDs to rootJakub Hrozek2015-01-271-1/+17
* add missing '\n' in debug messagesPavel Reichl2015-01-271-3/+4
* IPA: Use attr's dom for users, tooJakub Hrozek2015-01-261-11/+11
* IPA: process_members() add ghosts only onceSumit Bose2015-01-261-2/+4
* IPA: resolve IPA group-memberships for AD usersSumit Bose2015-01-262-3/+44
* AD: support for AD site overridePavel Reichl2015-01-261-1/+5
* IPA: properly handle mixed-case trusted domainsSumit Bose2015-01-231-2/+14
* views: fix GID overrride for mpg domainsSumit Bose2015-01-211-1/+20
* UTIL: Unify the fd_nonblocking implementationJakub Hrozek2015-01-151-2/+2
* IPA: set SYSDB_INITGR_EXPIRE for RESP_USER_GROUPLISTSumit Bose2015-01-141-0/+14
* IPA: resolve missing membersSumit Bose2015-01-141-14/+48
* IPA: rename ipa_s2n_get_groups_send() to ipa_s2n_get_fqlist_send()Sumit Bose2015-01-141-50/+50
* IPA: process_members() optionally return missing members listSumit Bose2015-01-141-18/+67
* IPA: add missing breakSumit Bose2015-01-141-0/+1
* IPA: make version check more preciseSumit Bose2015-01-141-2/+2
* IPA: do not look up overrides on client with default viewSumit Bose2015-01-141-14/+49
* IPA: ipa_resolve_user_list_send() take care of overridesSumit Bose2015-01-131-10/+8
* IPA: resolve ghost members if a non-default view is appliedSumit Bose2015-01-132-0/+213
* IPA: add get_be_acct_req_for_user_name()Sumit Bose2015-01-132-0/+18
* UTIL: Allow dup-ing child pipe to a different FDJakub Hrozek2015-01-131-2/+1
* IPA: handle GID overrides for MPG domains on clientsSumit Bose2014-12-171-0/+26
* IPA: properly handle groups from different domainsLukas Slebodnik2014-12-171-2/+16
* IPA: verify group memberships of trusted domain usersSumit Bose2014-12-171-1/+144
* Skip CHAUTHTOK_PRELIM when using OTPsJakub Hrozek2014-12-131-0/+1