summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap/sdap.h
Commit message (Collapse)AuthorAgeFilesLines
* LDAP: Add attr_count return value to build_attrs_from_map()Stephen Gallagher2012-05-101-1/+3
| | | | | | | This is necessary because in several places in the code, we are appending to the attrs returned from this value, and if we relied on the map size macro, we would be appending after the NULL terminator if one or more attributes were defined as NULL.
* LDAP: Map the user's primaryGroupIDStephen Gallagher2012-05-031-0/+1
|
* LDAP: Allow setting a default domain for id-mapping slice 0Stephen Gallagher2012-05-031-0/+2
|
* LDAP: Add autorid compatibility modeStephen Gallagher2012-05-031-0/+1
|
* LDAP: Initialize ID mapping when configuredStephen Gallagher2012-05-031-0/+3
|
* LDAP: Add ID mapping range settingsStephen Gallagher2012-05-031-0/+3
|
* LDAP: Add id-mapping optionStephen Gallagher2012-05-031-0/+1
|
* LDAP: Add objectSID config optionStephen Gallagher2012-05-031-0/+2
|
* Add terminator for sdap_attr_mapStephen Gallagher2012-03-281-0/+1
|
* IPA hosts refactoringJan Zeleny2012-02-241-2/+0
|
* LDAP: Add support for SSH user public keysJan Cholasta2012-02-071-0/+1
|
* Update shadowLastChanged attribute during LDAP password changeJan Zeleny2012-02-061-0/+1
| | | | https://fedorahosted.org/sssd/ticket/1019
* Session target in IPA providerJan Zeleny2012-02-061-0/+1
|
* AUTOFS: LDAP providerJakub Hrozek2012-02-051-0/+19
|
* NSS: Add individual timeouts for entry typesStephen Gallagher2012-02-041-1/+0
| | | | https://fedorahosted.org/sssd/ticket/1016
* LDAP: Add enumeration support for servicesStephen Gallagher2012-01-311-0/+1
|
* LDAP: Add support for service lookups (non-enum)Stephen Gallagher2012-01-311-0/+13
|
* LDAP: Add option to disable paging controlStephen Gallagher2012-01-181-0/+1
| | | | Fixes https://fedorahosted.org/sssd/ticket/967
* SUDO Integration - periodical update of rules in data providerPavel Březina2012-01-171-0/+2
| | | | | | | | https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period)
* SUDO Integration - LDAP configuration optionsPavel Březina2011-12-161-0/+20
|
* Add sdap_connection_expire_timeout optionStephen Gallagher2011-12-121-0/+1
| | | | https://fedorahosted.org/sssd/ticket/1036
* Add ldap_sasl_minssf optionJan Zeleny2011-12-081-0/+1
| | | | https://fedorahosted.org/sssd/ticket/1075
* Renamed some LDAP routinesJan Zeleny2011-11-231-0/+1
| | | | | These were renamed just ot make sure they are not mistook for IPA netgroup functions.
* Cleanup: Remove unused parametersJakub Hrozek2011-11-221-2/+0
|
* Support to request canonicalization in LDAP/IPA providerJan Zeleny2011-11-021-0/+1
| | | | https://fedorahosted.org/sssd/ticket/957
* LDAP: Add parser for multiple search basesStephen Gallagher2011-11-021-0/+11
|
* Remove unused sdap_options attributesStephen Gallagher2011-11-021-3/+0
| | | | These DNs were never assigned or referenced anywhere.
* Improve error message for LDAP password constraint violationJakub Hrozek2011-09-061-0/+1
| | | | https://fedorahosted.org/sssd/ticket/985
* Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANONJakub Hrozek2011-08-261-0/+1
| | | | https://fedorahosted.org/sssd/ticket/978
* Add LDAP access control based on NDS attributesSumit Bose2011-07-081-0/+6
|
* Add sockaddr_storage to sdap_serviceSumit Bose2011-06-301-0/+1
|
* Use dereference when processing RFC2307bis nested groupsJakub Hrozek2011-05-201-0/+1
| | | | | | | | Instead of issuing N LDAP requests when processing a group with N users, utilize the dereference functionality to pull down all the members in a single LDAP request. https://fedorahosted.org/sssd/ticket/799
* OpenLDAP dereference searchesJakub Hrozek2011-05-201-0/+7
| | | | | | | | This dereference method is supported at least by OpenLDAP and 389DS/RHDS For more details, see: http://tools.ietf.org/html/draft-masarati-ldap-deref-00
* Generic dereference data structures and utilitiesJakub Hrozek2011-05-201-0/+10
| | | | These will be shared by both dereference methods in a later patch.
* Remove append_attrs_to_arrayJakub Hrozek2011-05-201-1/+0
| | | | This function was not used anywhere
* Add ldap_page_size configuration optionStephen Gallagher2011-04-271-0/+2
|
* Modify principal selection for keytab authenticationJan Zeleny2011-04-251-0/+1
| | | | | | | | | | | | | | | | Currently we construct the principal as host/fqdn@REALM. The problem with this is that this principal doesn't have to be in the keytab. In that case the provider fails to start. It is better to scan the keytab and find the most suitable principal to use. Only in case no suitable principal is found the backend should fail to start. The second issue solved by this patch is that the realm we are authenticating the machine to can be in general different from the realm our users are part of (in case of cross Kerberos trust). The patch adds new configuration option SDAP_SASL_REALM. https://fedorahosted.org/sssd/ticket/781
* Add value of the last USN to server configurationStephen Gallagher2011-04-191-0/+1
| | | | | Related: https://fedorahosted.org/sssd/ticket/734
* Don't pass NULL to printf for TLS errorsJakub Hrozek2011-04-081-10/+0
| | | | https://fedorahosted.org/sssd/ticket/643
* Add host access control supportPierre Ossman2011-03-241-0/+1
| | | | https://fedorahosted.org/sssd/ticket/746
* Add option to disable TLS for LDAP authsssd-1_5_1Stephen Gallagher2011-01-271-0/+1
| | | | | Option is named to discourage use in production environments and is intentionally not listed in the SSSDConfig API.
* Add ldap_tls_{cert,key,cipher_suite} config optionsTyson Whitehead2011-01-201-0/+3
| | | | Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
* Add LDAP expire policy base RHDS/IPA attributeSumit Bose2011-01-191-0/+3
| | | | | The attribute nsAccountLock is used by RHDS, IPA and other directory servers to indicate that the account is locked.
* Add LDAP expire policy based on AD attributesSumit Bose2011-01-191-0/+5
| | | | | | The second bit of userAccountControl is used to determine if the account is enabled or disabled. accountExpires is checked to see if the account is expired.
* Add ldap_search_enumeration_timeout config optionSumit Bose2011-01-171-0/+1
|
* Add authorizedService supportStephen Gallagher2010-12-211-0/+1
| | | | https://fedorahosted.org/sssd/ticket/670
* Replace krb5_kdcip by krb5_server in LDAP providerSumit Bose2010-12-071-1/+1
|
* ldap: Use USN entries if available.Simo Sorce2010-12-071-0/+7
| | | | Otherwise fallback to the default modifyTimestamp indicator
* ldap: add checks to determine if USN features are available.Simo Sorce2010-12-071-0/+17
|
* Add ldap_chpass_uri config optionSumit Bose2010-12-061-0/+2
|
generated by cgit (git 2.34.1) at 2024-04-27 19:09:35 +0000