summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap
Commit message (Collapse)AuthorAgeFilesLines
* Modifications to simplify list_missing_attrsJan Zeleny2012-02-248-44/+21
|
* Delete missing attributes from netgroups to be storedJan Zeleny2012-02-241-1/+26
| | | | https://fedorahosted.org/sssd/ticket/1136
* IPA hosts refactoringJan Zeleny2012-02-241-2/+0
|
* LDAP: Only use paging control on requests for multiple entriesStephen Gallagher2012-02-2410-25/+79
| | | | | | | | | | The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
* AUTOFS: Search all search bases for automounter map entriesJakub Hrozek2012-02-231-18/+86
| | | | https://fedorahosted.org/sssd/ticket/1168
* LDAP: Properly assign orig_dnStephen Gallagher2012-02-231-0/+1
| | | | This was only used for properly identifying debug messages.
* IPA: Add ipa_parse_search_base()Stephen Gallagher2012-02-232-10/+28
| | | | | | | | | | Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151
* Don't give memory context in confdb where not neededJan Zeleny2012-02-211-1/+1
|
* End request if ldap_parse_result failsJakub Hrozek2012-02-211-0/+3
|
* LDAP: Ignore group member users that do not have name attributesStephen Gallagher2012-02-171-2/+2
| | | | | | | | Instead of failing the group lookup, just skip them. This was impacting some users of ActiveDirectory where not all users had the appropriate attributes. https://fedorahosted.org/sssd/ticket/1169
* Redesign purging of the sudo cachePavel Březina2012-02-171-19/+55
| | | | https://fedorahosted.org/sssd/ticket/1173
* Fix memory hierarchy when processing nested group membershipsJakub Hrozek2012-02-144-11/+14
| | | | https://fedorahosted.org/sssd/ticket/1186
* Fix uninitialized in_transactionStephen Gallagher2012-02-131-1/+1
| | | | Coverity #12521 and #12491
* Add missing breaks to switch statementsStephen Gallagher2012-02-132-0/+2
| | | | Coverity #12525 and #12524
* AUTOFS: IPA providerJakub Hrozek2012-02-071-0/+3
|
* LDAP: Add support for SSH user public keysJan Cholasta2012-02-073-4/+23
|
* Update shadowLastChanged attribute during LDAP password changeJan Zeleny2012-02-065-0/+189
| | | | https://fedorahosted.org/sssd/ticket/1019
* Session target in IPA providerJan Zeleny2012-02-061-0/+1
|
* Do not call sudo functions if built without-sudoJakub Hrozek2012-02-052-7/+7
|
* AUTOFS: LDAP providerJakub Hrozek2012-02-058-1/+1344
|
* Move BUILD_SUDO outside the generic LDAP source filesJakub Hrozek2012-02-045-95/+127
| | | | Avoid #ifdefs in the general part of the code
* NSS: Add individual timeouts for entry typesStephen Gallagher2012-02-046-13/+10
| | | | https://fedorahosted.org/sssd/ticket/1016
* LDAP: Fix incorrect search timeoutsStephen Gallagher2012-02-042-2/+2
|
* LDAP: Do not fail if RootDSE check cannot determine search basesStephen Gallagher2012-02-048-5/+88
| | | | https://fedorahosted.org/sssd/ticket/1152
* KRB5: Add syslog messages for Kerberos failuresStephen Gallagher2012-01-311-0/+8
| | | | https://fedorahosted.org/sssd/ticket/1137
* LDAP: Add enumeration support for servicesStephen Gallagher2012-01-317-3/+215
|
* LDAP: Add support for service lookups (non-enum)Stephen Gallagher2012-01-318-0/+891
|
* SUDO Integration - prepare data provider for new responder commandsPavel Březina2012-01-273-134/+189
| | | | https://fedorahosted.org/sssd/ticket/1143
* LDAP: Improve debugging for sdap_parse_derefStephen Gallagher2012-01-231-4/+7
| | | | | | Move the debug statement identifying the DN to an earlier line, so if we get a reply with no attributes, we know which entry is at fault.
* LDAP: Add option to disable paging controlStephen Gallagher2012-01-183-3/+9
| | | | Fixes https://fedorahosted.org/sssd/ticket/967
* Do not use sudo symbols in LDAP provider unconditionallyJakub Hrozek2012-01-181-0/+2
|
* SUDO Integration - periodical update of rules in data providerPavel Březina2012-01-176-0/+345
| | | | | | | | https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period)
* SUDO Integration - wrap data provider with tevent_reqPavel Březina2012-01-172-43/+138
| | | | https://fedorahosted.org/sssd/ticket/1110
* SUDO Integration review issuesPavel Březina2012-01-172-3/+2
|
* LDAP: Copy URI instead of pointing at failover service recordStephen Gallagher2012-01-141-2/+8
| | | | | | | | In a heavy load environment, sometimes the failover service record would be updated and free the URI value. We need to guarantee that this URI string remains valid throughout the entire request. https://fedorahosted.org/sssd/ticket/1139
* Log fixes for sdap_call_conn_cbStephen Gallagher2012-01-141-1/+2
|
* Add compatibility layer for Heimdal Kerberos implementationStephen Gallagher2011-12-221-0/+5
|
* Save original memberof, not memberofJakub Hrozek2011-12-201-4/+16
|
* SUDO Integration - fixed memory leak in sdap_sudo_handler()Pavel Březina2011-12-201-0/+1
|
* SUDO Integration - be_sudo_req removed from sudo_ctxPavel Březina2011-12-202-2/+0
|
* Pass sdap_id_ctx to online check from IPA providerJakub Hrozek2011-12-192-17/+42
|
* Move child_common routines to utilStephen Gallagher2011-12-193-3/+3
|
* Logically dead code in sdap_nested_group_lookup_groupPavel Březina2011-12-161-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1113
* SUDO integration - LDAP providerPavel Březina2011-12-164-0/+657
|
* SUDO Integration - LDAP provider - save sudo rules functionsJakub Hrozek2011-12-162-0/+125
|
* SUDO Integration - LDAP configuration optionsPavel Březina2011-12-164-2/+110
|
* Export the function to convert ldb_result to sysdb_attrsJakub Hrozek2011-12-161-29/+0
| | | | It will be reused later in the sudo responder
* Use the case sensitivity flag in the LDAP providerJakub Hrozek2011-12-166-11/+31
|
* Refactor saving sdap entitiesJakub Hrozek2011-12-165-179/+146
| | | | | There was too much code duplication between sdap_save_{user,group,netgroup}. This patch removes the most egregious ones.
* Support search bases in netgroup members translationPavel Březina2011-12-141-1/+11
|