summaryrefslogtreecommitdiffstats
path: root/src/providers/krb5/krb5_access.c
Commit message (Collapse)AuthorAgeFilesLines
* krb5: save canonical upn to sysdbSumit Bose2013-09-231-2/+3
| | | | | | | | | | | | | If the returned TGT contains a different user principal name (upn) than used in the request, i.e. the upn was canonicalized, we currently save it to sysdb into the same attribute where the upn coming from an LDAP server is stored as well. This means the canonical upn might be overwritten when the user data is re-read from the LDAP server. To avoid this this patch add a new attribute to sysdb where the canonical upn is stored and makes sure it is used when available. Fixes https://fedorahosted.org/sssd/ticket/2060
* KRB5: guess UPN for subdomain usersJakub Hrozek2013-06-271-1/+1
|
* Remove sysdb as a be context structure memberSimo Sorce2013-01-211-1/+1
| | | | The sysdb context is already available through the 'domain' structure.
* Add domain argument to sysdb_get_user_attr()Simo Sorce2013-01-151-2/+2
|
* Fix tevent_req style for krb5_authSimo Sorce2012-12-041-3/+3
| | | | | | No functionality changes, just make the code respect the tevent_req style and naming conventions and enhance readability by adding some helper functions.
* Use find_or_guess_upn() where neededSumit Bose2012-10-261-9/+7
|
* sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny2011-08-151-2/+2
| | | | | The patch also updates code using modified functions. Tests have also been adjusted.
* Call krb5_child to check access permissionsSumit Bose2010-11-041-4/+121
|
* Add infrastructure for Kerberos access providerSumit Bose2010-11-041-0/+91