sssd.git - sssd with jhrozek's patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	Accept be_req instead if be_ctx in LDAP access provider	Jan Zeleny	2012-04-24	1	-1/+1
\|
*	LDAP: Make sdap_access_send/recv public	Stephen Gallagher	2012-03-09	1	-0/+9
\| \| \| \|	We want to consume this in the IPA provider.
*	Cleanup of unused function in ldap access provider	Jan Zeleny	2011-11-02	1	-2/+0
\|
*	Add LDAP access control based on NDS attributes	Sumit Bose	2011-07-08	1	-0/+1
\|
*	Add host access control support	Pierre Ossman	2011-03-24	1	-0/+2
\| \| \| \|	https://fedorahosted.org/sssd/ticket/746
*	Add LDAP expire policy base RHDS/IPA attribute	Sumit Bose	2011-01-19	1	-0/+3
\| \| \| \| \|	The attribute nsAccountLock is used by RHDS, IPA and other directory servers to indicate that the account is locked.
*	Add LDAP expire policy based on AD attributes	Sumit Bose	2011-01-19	1	-0/+1
\| \| \| \| \| \|	The second bit of userAccountControl is used to determine if the account is enabled or disabled. accountExpires is checked to see if the account is expired.
*	Add authorizedService support	Stephen Gallagher	2010-12-21	1	-0/+2
\| \| \| \|	https://fedorahosted.org/sssd/ticket/670
*	Add new account expired rule to LDAP access provider	Sumit Bose	2010-12-06	1	-1/+14
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Two new options are added to the LDAP access provider to allow a broader range of access control rules to be evaluated. 'ldap_access_order' makes it possible to run more than one rule. To keep compatibility with older versions the default is 'filter'. This patch adds a new rule 'expire'. 'ldap_account_expire_policy' specifies which LDAP attribute should be used to determine if an account is expired or not. Currently only 'shadow' is supported which evaluates the ldap_user_shadow_expire attribute.
*	Add ldap_access_filter option	Stephen Gallagher	2010-05-27	1	-0/+39
	This option (applicable to access_provider=ldap) allows the admin to set an additional LDAP search filter that must match in order for a user to be granted access to the system. Common examples for this would be limiting access to users by in a particular group, for example: ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com