summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa
Commit message (Collapse)AuthorAgeFilesLines
* Add sdap_connection_expire_timeout optionStephen Gallagher2011-12-122-2/+3
| | | | https://fedorahosted.org/sssd/ticket/1036
* Fix uninitialized value error in ipa_netgroups.cStephen Gallagher2011-12-121-0/+1
| | | | | | | DEBUG message can print an unitialized value if the first netgroup has no members. Coverity 12382
* Fixed IPA netgroup processingJan Zeleny2011-12-093-2/+7
| | | | | | | | In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future.
* Add ldap_sasl_minssf optionJan Zeleny2011-12-082-1/+2
| | | | https://fedorahosted.org/sssd/ticket/1075
* Allow using Glib for UTF8 supportStephen Gallagher2011-12-051-33/+11
|
* Add ipa_hbac_support_srchost option to IPA providerJan Zeleny2011-11-296-36/+151
| | | | | don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
* IPA migration fixesJakub Hrozek2011-11-293-97/+141
| | | | | | | * use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924
* Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek2011-11-291-1/+1
|
* Fixed logically dead code in netgroup processingJan Zeleny2011-11-281-1/+1
|
* Fixed uninitialized pointer read in netgroups processingJan Zeleny2011-11-281-0/+6
|
* Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA providerJakub Hrozek2011-11-252-2/+4
| | | | | This was causing a segfault during HBAC processing and any ID lookups except for netgroups
* Added IPA account info handlerJan Zeleny2011-11-233-1/+373
| | | | | Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider.
* Added support for fetching netgroups in IPA providerJan Zeleny2011-11-231-0/+992
|
* New IPA ID contextJan Zeleny2011-11-233-22/+37
|
* Added and modified options for IPA netgroupsJan Zeleny2011-11-232-24/+69
|
* Modified sdap_parse_search_base()Jan Zeleny2011-11-231-4/+4
|
* Cleanup: Remove unused parametersJakub Hrozek2011-11-2210-40/+6
|
* Support to request canonicalization in LDAP/IPA providerJan Zeleny2011-11-022-1/+2
| | | | https://fedorahosted.org/sssd/ticket/957
* Add support to request canonicalization on krb AS requestsJan Zeleny2011-11-022-2/+3
| | | | https://fedorahosted.org/sssd/ticket/957
* LDAP: Add parser for multiple search basesStephen Gallagher2011-11-021-0/+20
|
* Add a missing breakJakub Hrozek2011-10-171-0/+1
|
* HBAC: Use originalMember for identifying hostgroupsStephen Gallagher2011-10-143-45/+165
|
* HBAC: Use originalMember for identifying servicegroupsStephen Gallagher2011-10-143-41/+169
|
* HBAC: Do not save member/memberOf linksStephen Gallagher2011-10-141-120/+0
| | | | We can just trust the values from the FreeIPA server
* HBAC: fix typos preventing proper hostgroup evaluationStephen Gallagher2011-09-281-3/+3
|
* IPA access: hostname comparison should be case-insensitiveJakub Hrozek2011-09-281-1/+1
|
* Multiline macro cleanupJakub Hrozek2011-09-282-2/+2
| | | | | | | | | | This is mostly a cosmetic patch. The purpose of wrapping a multi-line macro in a do { } while(0) is to make the macro usable as a regular statement, not a compound statement. When the while(0) is terminated with a semicolon, the do { } while(0); block becomes a compound statement again.
* Improve documentation of libipa_hbacStephen Gallagher2011-09-082-21/+1697
|
* Do not access memory out of boundsSumit Bose2011-09-071-2/+2
|
* HBAC: Properly skip all non-group memberOf entriesStephen Gallagher2011-08-291-1/+2
|
* HBAC: Use of hostgroups for targethost or sourcehost was brokenStephen Gallagher2011-08-261-4/+4
| | | | | We were trying to look up the wrong attribute for the name of the hostgroup.
* HBAC: Handle saving groups that have no membersStephen Gallagher2011-08-261-7/+21
|
* Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANONJakub Hrozek2011-08-262-2/+3
| | | | https://fedorahosted.org/sssd/ticket/978
* IPA dyndns: do not segfault if the server cannot be resolvedJakub Hrozek2011-08-251-4/+2
| | | | https://fedorahosted.org/sssd/ticket/963
* sysdb refactoring: memory context deletedJan Zeleny2011-08-152-3/+3
| | | | | | This patch deletes memory context parameter in those places in sysdb where it is not necessary. The code using modified functions has been updated. Tests updated as well.
* sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny2011-08-156-17/+12
| | | | | The patch also updates code using modified functions. Tests have also been adjusted.
* Change the default value of ldap_tls_cacert in IPA providerJakub Hrozek2011-08-011-1/+1
| | | | https://fedorahosted.org/sssd/ticket/944
* Add rule validator to libipa_hbacStephen Gallagher2011-08-012-0/+74
| | | | https://fedorahosted.org/sssd/ticket/943
* Remove incorrect private variableStephen Gallagher2011-08-011-1/+1
| | | | | | This caused no ill effects, since it wasn't used in the callback. However, it is a layering violation (especially since req is freed in the callback)
* Fix incorrect NULL check in ipa_hbac_common.cStephen Gallagher2011-07-291-1/+1
| | | | https://fedorahosted.org/sssd/ticket/936
* Fix memory leak in ipa_hbac_evaluate_rulesStephen Gallagher2011-07-291-0/+1
| | | | https://fedorahosted.org/sssd/ticket/933
* libipa_hbac: Support case-insensitive comparisons with UTF8Stephen Gallagher2011-07-291-16/+98
|
* fo_get_server_name() getter for a server nameJakub Hrozek2011-07-211-1/+9
| | | | | Allows to be more concise in tests and more defensive in resolve callbacks
* Rename fo_get_server_name to fo_get_server_str_nameJakub Hrozek2011-07-211-2/+2
|
* Remove unused krb5_service structure memberJakub Hrozek2011-07-131-2/+0
|
* Check DNS records before updatingJakub Hrozek2011-07-114-25/+470
| | | | https://fedorahosted.org/sssd/ticket/802
* Escape IP address in kdcinfoJakub Hrozek2011-07-111-10/+10
| | | | https://fedorahosted.org/sssd/ticket/909
* Move IP adress escaping from the LDAP namespaceJakub Hrozek2011-07-111-3/+3
|
* Add LDAP access control based on NDS attributesSumit Bose2011-07-081-1/+4
|
* Treat NULL or empty rhost as unknownStephen Gallagher2011-07-082-11/+25
| | | | | | | Previously, we were assuming this meant it was coming from the localhost, but this is not a safe assumption. We will now treat it as unknown and it will fail to match any rule that requires a specified srchost or group of srchosts.
generated by cgit (git 2.34.1) at 2024-05-26 11:28:17 +0000