summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa
Commit message (Expand)AuthorAgeFilesLines
* selinux: Only call semanage if the context actually changesJakub Hrozek2015-04-151-4/+31
* IPA: set EINVAL if dn can't be linearizedPavel Reichl2015-03-201-0/+1
* IPA: make sure output variable is setSumit Bose2015-03-201-1/+3
* LDAP/AD: do not resolve group members during tokenGroups requestSumit Bose2015-03-201-1/+1
* selinux: Handle setup with empty default and no configured rulesJakub Hrozek2015-03-172-4/+10
* IPA idviews: check if view name is setSumit Bose2015-03-171-1/+4
* ipa_selinux: Fix warning may be used uninitializedLukas Slebodnik2015-03-171-1/+1
* ipa: make sure extdom expo data is availableSumit Bose2015-03-131-0/+5
* ipa: do not treat missing sub-domain users as errorSumit Bose2015-03-131-3/+7
* be_refresh: add sdap_refresh_initPavel Březina2015-03-081-5/+2
* sdap_handle_acct_req_send: remove be_reqPavel Březina2015-03-081-1/+1
* selinux: Delete existing user mapping on empty defaultJakub Hrozek2015-03-042-7/+17
* FO: Use SRV TTL in fail over codeJakub Hrozek2015-03-032-0/+7
* Add missing new lines to debug messagesLukas Slebodnik2015-02-186-12/+12
* SELINUX: Check the return value of setuid and setgidJakub Hrozek2015-02-131-2/+12
* AD: use GC for SID requests as wellSumit Bose2015-01-301-0/+1
* ipa_s2n_save_objects: properly handle fully-qualified group namesSumit Bose2015-01-301-1/+1
* IPA: Resolve IPA user groups' overrideDN in non-default viewJakub Hrozek2015-01-301-8/+312
* SELINUX: Set and reset umask when caling set_seuser from deamon codeJakub Hrozek2015-01-271-1/+17
* SELINUX: Call setuid(0)/setgid(0) to also set the real IDs to rootJakub Hrozek2015-01-271-1/+17
* IPA: Use attr's dom for users, tooJakub Hrozek2015-01-261-11/+11
* IPA: process_members() add ghosts only onceSumit Bose2015-01-261-2/+4
* IPA: resolve IPA group-memberships for AD usersSumit Bose2015-01-262-3/+44
* AD: support for AD site overridePavel Reichl2015-01-261-1/+5
* IPA: properly handle mixed-case trusted domainsSumit Bose2015-01-231-2/+14
* views: fix GID overrride for mpg domainsSumit Bose2015-01-211-1/+20
* IPA: set SYSDB_INITGR_EXPIRE for RESP_USER_GROUPLISTSumit Bose2015-01-141-0/+14
* IPA: resolve missing membersSumit Bose2015-01-141-14/+48
* IPA: rename ipa_s2n_get_groups_send() to ipa_s2n_get_fqlist_send()Sumit Bose2015-01-141-50/+50
* IPA: process_members() optionally return missing members listSumit Bose2015-01-141-18/+67
* IPA: add missing breakSumit Bose2015-01-141-0/+1
* IPA: make version check more preciseSumit Bose2015-01-141-2/+2
* IPA: do not look up overrides on client with default viewSumit Bose2015-01-141-14/+49
* IPA: ipa_resolve_user_list_send() take care of overridesSumit Bose2015-01-131-10/+8
* IPA: resolve ghost members if a non-default view is appliedSumit Bose2015-01-132-0/+213
* IPA: add get_be_acct_req_for_user_name()Sumit Bose2015-01-132-0/+18
* UTIL: Allow dup-ing child pipe to a different FDJakub Hrozek2015-01-131-2/+1
* IPA: handle GID overrides for MPG domains on clientsSumit Bose2014-12-171-0/+26
* IPA: properly handle groups from different domainsLukas Slebodnik2014-12-171-2/+16
* IPA: verify group memberships of trusted domain usersSumit Bose2014-12-171-1/+144
* Skip CHAUTHTOK_PRELIM when using OTPsJakub Hrozek2014-12-131-0/+1
* IPA: Do not append domain name to fq nameLukas Slebodnik2014-12-081-4/+17
* sss_atomic_write_s() return value is signedJakub Hrozek2014-12-031-1/+1
* Add extra_args to exec_child()Jakub Hrozek2014-12-031-1/+2
* IPA: only update view data if it really changedSumit Bose2014-12-021-50/+66
* krb5: make krb5 provider view awareSumit Bose2014-12-021-0/+13
* views: allow view name change at startupSumit Bose2014-11-251-16/+81
* AD/IPA: add krb5_confd_path configuration optionSumit Bose2014-11-253-0/+10
* Hint about removing sysdb if initializing ID map failsJakub Hrozek2014-11-241-1/+7
* IPA: Handle IPA groups returned from extop pluginJakub Hrozek2014-11-241-4/+9