summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa
Commit message (Expand)AuthorAgeFilesLines
* IPA: Initialize hbac_ctx to NULLsssd-1.5.1-58.el5Stephen Gallagher2012-08-221-1/+1
* Add ipa_hbac_support_srchost option to IPA providersssd-1.5.1-57.el5Jan Zeleny2012-08-176-52/+398
* HBAC: create empty groups with one NULL elementJakub Hrozek2012-06-221-16/+15
* IPA: Check nsAccountLock during PAM_ACCT_MGMTStephen Gallagher2012-06-224-1/+69
* Only do one cycle when resolving a serverJakub Hrozek2012-06-041-2/+10
* LDAP: Add option to disable paging controlStephen Gallagher2012-03-222-2/+3
* IPA: Detect nsupdate support for the realm directiveStephen Gallagher2012-01-171-14/+40
* Log nsupdate messageJakub Hrozek2012-01-101-0/+3
* Allow using Glib for UTF8 supportStephen Gallagher2011-12-051-33/+11
* Revert "RHEL5: Remove UTF8 support for RHEL5"Stephen Gallagher2011-12-051-4/+32
* RHEL5: Remove UTF8 support for RHEL5Stephen Gallagher2011-10-261-32/+4
* Add a missing breakJakub Hrozek2011-10-261-0/+1
* Improve performance of HBAC with large numbers of hostsStephen Gallagher2011-10-264-206/+334
* IPA access: hostname comparison should be case-insensitiveJakub Hrozek2011-10-261-1/+1
* HBAC: fix typos preventing proper hostgroup evaluationStephen Gallagher2011-10-261-3/+3
* Do not access memory out of boundsSumit Bose2011-10-261-2/+2
* HBAC: Properly skip all non-group memberOf entriesStephen Gallagher2011-10-261-1/+2
* Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANONJakub Hrozek2011-10-262-2/+3
* HBAC: Use of hostgroups for targethost or sourcehost was brokenStephen Gallagher2011-10-261-4/+4
* HBAC: Handle saving groups that have no membersStephen Gallagher2011-10-261-7/+21
* Rewrite HBAC rule evaluatorStephen Gallagher2011-10-2613-1697/+3581
* ipa_dyndns: Use sockaddr_storage for storing IP addressesJakub Hrozek2011-10-261-12/+17
* Fix TLS/SSL validation after switch to ldap_init_fdSumit Bose2011-10-261-1/+11
* Honor the TTL value of SRV record lookupsJakub Hrozek2011-10-261-2/+2
* Properly support IPv6 in LDAP URIs for IPA and LDAP providersJakub Hrozek2011-10-261-8/+24
* Enable paging support for LDAPStephen Gallagher2011-10-262-2/+3
* Use realm for basedn instead of IPA domainJakub Hrozek2011-03-074-48/+50
* Fixes for dynamic DNS updateSumit Bose2011-03-071-16/+87
* Fix uninitialized value error in ipa_get_id_options()Stephen Gallagher2011-02-221-7/+7
* Add krb5_realm to the basic IPA optionsStephen Gallagher2011-02-222-2/+4
* Allow krb5_realm to override ipa_domainStephen Gallagher2011-02-223-18/+37
* Point the IPA provider at the compat tree for netgroupsStephen Gallagher2011-02-191-0/+19
* Add option to disable TLS for LDAP authsssd-1_5_1Stephen Gallagher2011-01-272-2/+6
* Add ldap_tls_{cert,key,cipher_suite} config optionsTyson Whitehead2011-01-202-1/+4
* Add ipa_hbac_search_base config optionSumit Bose2011-01-194-54/+43
* Add LDAP expire policy base RHDS/IPA attributeSumit Bose2011-01-191-1/+2
* Add LDAP expire policy based on AD attributesSumit Bose2011-01-191-1/+3
* Add ldap_search_enumeration_timeout config optionSumit Bose2011-01-173-6/+7
* Add timeout parameter to sdap_get_generic_send()Sumit Bose2011-01-172-23/+34
* Add authorizedService supportStephen Gallagher2010-12-211-1/+2
* Fix uninitialized value error in set_local_and_remote_host_infoStephen Gallagher2010-12-171-1/+1
* Fix unsafe return condition in ipa_access_handlerStephen Gallagher2010-12-171-1/+6
* Remove IPA_ACCESS_TIME defineStephen Gallagher2010-12-081-13/+11
* Bye, bye, ipa_timerulesSumit Bose2010-12-082-1243/+0
* Remove check_access_time() from IPA access providerSumit Bose2010-12-082-70/+0
* Replace krb5_kdcip by krb5_server in LDAP providerSumit Bose2010-12-071-2/+2
* ldap: Use USN entries if available.Simo Sorce2010-12-071-1/+3
* ldap: add checks to determine if USN features are available.Simo Sorce2010-12-071-1/+1
* Pass sdap_id_ctx in sdap_id_op functions.Simo Sorce2010-12-071-3/+1
* Add support for FAST in krb5 providerSumit Bose2010-12-073-3/+5