summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap/ldap_common.h
Commit message (Collapse)AuthorAgeFilesLines
* Rewrite HBAC rule evaluatorStephen Gallagher2011-10-261-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add helper function msgs2attrs_array This function converts a list of ldb_messages into a list of sysdb_attrs. Conflicts: src/providers/ldap/ldap_common.c src/providers/ldap/ldap_common.h Add HBAC evaluator and tests Add helper functions for looking up HBAC rule components Remove old HBAC implementation Add new HBAC lookup and evaluation routines Conflicts: Makefile.am Add ipa_hbac_refresh option This option describes the time between refreshes of the HBAC rules on the IPA server. Add ipa_hbac_treat_deny_as option By default, we will treat the presence of any DENY rule as denying all users. This option will allow the admin to explicitly ignore DENY rules during a transitional period. Treat NULL or empty rhost as unknown Previously, we were assuming this meant it was coming from the localhost, but this is not a safe assumption. We will now treat it as unknown and it will fail to match any rule that requires a specified srchost or group of srchosts. libipa_hbac: Support case-insensitive comparisons with UTF8 UTF8 HBAC test Fix memory leak in ipa_hbac_evaluate_rules https://fedorahosted.org/sssd/ticket/933 Fix incorrect NULL check in ipa_hbac_common.c https://fedorahosted.org/sssd/ticket/936 Require matched version and release for libipa_hbac Add rule validator to libipa_hbac https://fedorahosted.org/sssd/ticket/943
* Do not attempt to use START_TLS on SSL connectionsStephen Gallagher2011-02-151-0/+7
| | | | | | | Not all LDAP servers are capable of handling dual-encryption with both TLS and SSL. https://fedorahosted.org/sssd/ticket/795
* Delete attributes that are removed from LDAPStephen Gallagher2011-01-211-0/+13
| | | | | | | | Sometimes, a value in LDAP will cease to exist (the classic example being shadowExpire). We need to make sure we purge that value from SSSD's sysdb as well. https://fedorahosted.org/sssd/ticket/750
* Remove unused member of a structSumit Bose2010-12-211-1/+0
|
* ldap: Use USN entries if available.Simo Sorce2010-12-071-2/+1
| | | | Otherwise fallback to the default modifyTimestamp indicator
* ldap: remove variable that was never assigned nor usedSimo Sorce2010-12-071-2/+0
|
* Add ldap_chpass_uri config optionSumit Bose2010-12-061-0/+1
|
* Make string_to_shadowpw_days() publicSumit Bose2010-12-061-0/+2
|
* Add check_online method to LDAP ID providerSumit Bose2010-12-011-0/+1
|
* Implement netgroup support for LDAP providerSumit Bose2010-10-131-0/+6
|
* Initialize kerberos service for GSSAPIJakub Hrozek2010-10-131-0/+20
|
* Store rootdse supported features in sdap_handlerSumit Bose2010-09-151-0/+3
|
* Remove remainder of now unused global LDAP connection handle.eindenbom2010-07-091-9/+0
|
* Use new LDAP connection framework to get group account info from LDAP.eindenbom2010-07-091-1/+1
|
* Use new LDAP connection framework to get user account info from LDAP.eindenbom2010-07-091-1/+1
|
* LDAP connection usage tracking, sharing and failover retry framework.eindenbom2010-07-091-0/+4
|
* Add ldap_access_filter optionStephen Gallagher2010-05-271-0/+3
| | | | | | | | | | This option (applicable to access_provider=ldap) allows the admin to set an additional LDAP search filter that must match in order for a user to be granted access to the system. Common examples for this would be limiting access to users by in a particular group, for example: ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com
* Add offline callback to disconnect global SDAP handleSumit Bose2010-05-271-0/+1
|
* Use service discovery in backendsJakub Hrozek2010-05-071-3/+5
| | | | | | | | | Integrate the failover improvements with our back ends. The DNS domain used in the SRV query is always the SSSD domain name. Please note that this patch changes the default value of ldap_uri from "ldap://localhost" to "NULL" in order to use service discovery with no server set.
* Rename server/ directory to src/Stephen Gallagher2010-02-181-0/+115
Also update BUILD.txt
generated by cgit (git 2.34.1) at 2024-06-07 04:02:58 +0000