summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap
Commit message (Collapse)AuthorAgeFilesLines
* Refactor saving sdap entitiesJakub Hrozek2011-12-165-179/+146
| | | | | There was too much code duplication between sdap_save_{user,group,netgroup}. This patch removes the most egregious ones.
* Support search bases in netgroup members translationPavel Březina2011-12-141-1/+11
|
* Support search bases in RFC2307bis enumerationPavel Březina2011-12-141-10/+145
| | | | https://fedorahosted.org/sssd/ticket/960
* Add sdap_connection_expire_timeout optionStephen Gallagher2011-12-123-1/+15
| | | | https://fedorahosted.org/sssd/ticket/1036
* LDAP: Fix missing break statements in force_tlsStephen Gallagher2011-12-081-6/+12
| | | | Also add a default case to protect against bad input
* LDAP provider: Error while setting the nocanon option should not be fatalJakub Hrozek2011-12-081-3/+9
| | | | https://fedorahosted.org/sssd/ticket/1100
* Add ldap_sasl_minssf optionJan Zeleny2011-12-083-0/+19
| | | | https://fedorahosted.org/sssd/ticket/1075
* Use dereference during IPA provider initgroupsJakub Hrozek2011-11-301-40/+149
| | | | https://fedorahosted.org/sssd/ticket/1099
* Fix two small bugs in group dereferencingJakub Hrozek2011-11-291-2/+5
|
* Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek2011-11-294-10/+42
|
* LDAP: Try next failover server on any errorStephen Gallagher2011-11-291-9/+5
|
* Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA providerJakub Hrozek2011-11-252-2/+14
| | | | | This was causing a segfault during HBAC processing and any ID lookups except for netgroups
* Modified sdap_parse_search_base()Jan Zeleny2011-11-233-12/+10
|
* Renamed some LDAP routinesJan Zeleny2011-11-236-41/+49
| | | | | These were renamed just ot make sure they are not mistook for IPA netgroup functions.
* Cleanup: Remove unused parametersJakub Hrozek2011-11-2210-67/+27
|
* Prevent printing NULL in several places of LDAP providerJakub Hrozek2011-11-182-5/+9
|
* Use one transaction instead of two during RFC2307bis group processingJakub Hrozek2011-11-111-31/+55
| | | | https://fedorahosted.org/sssd/ticket/1054
* Squash transactions in sdap_initgr_common_storeJakub Hrozek2011-11-111-6/+25
| | | | https://fedorahosted.org/sssd/ticket/1053
* LDAP: Remove redundant groups from the lookup listStephen Gallagher2011-11-081-23/+0
|
* Use correct state struct in sdap_initgr_rfc2307bis_next_baseJakub Hrozek2011-11-071-2/+3
|
* Fix segfault in sdap_get_initgr_userJakub Hrozek2011-11-071-1/+2
|
* Support to request canonicalization in LDAP/IPA providerJan Zeleny2011-11-025-0/+26
| | | | https://fedorahosted.org/sssd/ticket/957
* LDAP: Add support for multiple search bases for group enumerationStephen Gallagher2011-11-024-24/+101
|
* LDAP: Add support for multiple search bases for user enumerationStephen Gallagher2011-11-024-8/+49
|
* LDAP: Convert ldap_*_search_filterStephen Gallagher2011-11-023-59/+23
| | | | | | Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter.
* LDAP: Add multiple search bases for initgroups (RFC2307bis groups)Stephen Gallagher2011-11-021-77/+225
|
* LDAP: Add multiple search bases for initgroups (RFC2307 groups)Stephen Gallagher2011-11-021-17/+99
|
* LDAP: Add multiple search bases for initgroups (users)Stephen Gallagher2011-11-021-30/+72
|
* LDAP: Support multiple group search bases (non-enumeration, RFC2307)Stephen Gallagher2011-11-024-16/+74
|
* LDAP: Support multiple netgroup search basesStephen Gallagher2011-11-023-14/+65
|
* LDAP: Support multiple user search bases (non-enumeration)Stephen Gallagher2011-11-024-14/+70
|
* LDAP: Add parser for multiple search basesStephen Gallagher2011-11-024-26/+360
|
* Make sdap_get_id_specific_filter() more strictStephen Gallagher2011-11-022-4/+4
|
* Fix size return for split_on_separator()Stephen Gallagher2011-11-021-5/+5
| | | | | | | It was returning the size of the array, rather than the number of elements. (The array was NULL-terminated). This argument was only used in one place that was actually working around this odd return value.
* Remove unused sdap_options attributesStephen Gallagher2011-11-021-3/+0
| | | | These DNs were never assigned or referenced anywhere.
* Cleanup of unused function in ldap access providerJan Zeleny2011-11-021-2/+0
|
* Remove confusing do-while loopJakub Hrozek2011-11-021-35/+36
| | | | | The deref processing would return a single control back. The do-while loop was harmless but confusing.
* Use LDAPDerefSpec properlyJakub Hrozek2011-11-021-4/+6
| | | | | | | | ldap_create_deref_control_value expects an array of LDAPDerefSpec structures with LDAPDerefSpec.derefAttr == NULL as a sentinel. We were passing a single instance of a LDAPDerefSpec structure. https://fedorahosted.org/sssd/ticket/1050
* Steal result onto mem_ctx in sdap_initgr_nested_get_direct_parentsJakub Hrozek2011-10-311-2/+1
|
* RFC2307bis initgroups: fix nested groups processingJakub Hrozek2011-10-311-20/+33
| | | | | Due to incorrectly written loop, SSSD would go into infitite loop if it processed the same group on two different levels of membership.
* Plug memory leaks in LDAP providerJakub Hrozek2011-10-251-0/+3
|
* Cancel transactions correctly during initgroupsJakub Hrozek2011-10-171-13/+31
|
* Use fewer transactions during IPA initgroupsJakub Hrozek2011-10-171-171/+273
|
* Use fewer transactions during RFC2307bis initgroupsJakub Hrozek2011-10-171-346/+366
|
* Utility functions for LDAP nested schema initgroupsJakub Hrozek2011-10-171-0/+119
|
* SysDB commands that save lastUpdate allows this value to be passed inPavel Březina2011-10-135-21/+41
| | | | https://fedorahosted.org/sssd/ticket/836
* Fix small bug where TALLOC_CTX could end up unfreed.Pavel Zuna2011-10-061-3/+3
|
* Use explicit base 10 for converting strings to integersJakub Hrozek2011-10-031-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1013
* Store name aliases for users, groupsJakub Hrozek2011-09-285-37/+216
| | | | | | Also checks fake users for aliases when storing a real users so that getgrnam for a RFC2307 group that references a user by his secondary name followed by getpwnam for this user by his primary name works
* Add a sysdb_get_direct_parents functionJakub Hrozek2011-09-281-57/+5
|