summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap
Commit message (Collapse)AuthorAgeFilesLines
* SUDO Integration - prepare data provider for new responder commandsPavel Březina2012-01-273-134/+189
| | | | https://fedorahosted.org/sssd/ticket/1143
* LDAP: Improve debugging for sdap_parse_derefStephen Gallagher2012-01-231-4/+7
| | | | | | Move the debug statement identifying the DN to an earlier line, so if we get a reply with no attributes, we know which entry is at fault.
* LDAP: Add option to disable paging controlStephen Gallagher2012-01-183-3/+9
| | | | Fixes https://fedorahosted.org/sssd/ticket/967
* Do not use sudo symbols in LDAP provider unconditionallyJakub Hrozek2012-01-181-0/+2
|
* SUDO Integration - periodical update of rules in data providerPavel Březina2012-01-176-0/+345
| | | | | | | | https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period)
* SUDO Integration - wrap data provider with tevent_reqPavel Březina2012-01-172-43/+138
| | | | https://fedorahosted.org/sssd/ticket/1110
* SUDO Integration review issuesPavel Březina2012-01-172-3/+2
|
* LDAP: Copy URI instead of pointing at failover service recordStephen Gallagher2012-01-141-2/+8
| | | | | | | | In a heavy load environment, sometimes the failover service record would be updated and free the URI value. We need to guarantee that this URI string remains valid throughout the entire request. https://fedorahosted.org/sssd/ticket/1139
* Log fixes for sdap_call_conn_cbStephen Gallagher2012-01-141-1/+2
|
* Add compatibility layer for Heimdal Kerberos implementationStephen Gallagher2011-12-221-0/+5
|
* Save original memberof, not memberofJakub Hrozek2011-12-201-4/+16
|
* SUDO Integration - fixed memory leak in sdap_sudo_handler()Pavel Březina2011-12-201-0/+1
|
* SUDO Integration - be_sudo_req removed from sudo_ctxPavel Březina2011-12-202-2/+0
|
* Pass sdap_id_ctx to online check from IPA providerJakub Hrozek2011-12-192-17/+42
|
* Move child_common routines to utilStephen Gallagher2011-12-193-3/+3
|
* Logically dead code in sdap_nested_group_lookup_groupPavel Březina2011-12-161-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1113
* SUDO integration - LDAP providerPavel Březina2011-12-164-0/+657
|
* SUDO Integration - LDAP provider - save sudo rules functionsJakub Hrozek2011-12-162-0/+125
|
* SUDO Integration - LDAP configuration optionsPavel Březina2011-12-164-2/+110
|
* Export the function to convert ldb_result to sysdb_attrsJakub Hrozek2011-12-161-29/+0
| | | | It will be reused later in the sudo responder
* Use the case sensitivity flag in the LDAP providerJakub Hrozek2011-12-166-11/+31
|
* Refactor saving sdap entitiesJakub Hrozek2011-12-165-179/+146
| | | | | There was too much code duplication between sdap_save_{user,group,netgroup}. This patch removes the most egregious ones.
* Support search bases in netgroup members translationPavel Březina2011-12-141-1/+11
|
* Support search bases in RFC2307bis enumerationPavel Březina2011-12-141-10/+145
| | | | https://fedorahosted.org/sssd/ticket/960
* Add sdap_connection_expire_timeout optionStephen Gallagher2011-12-123-1/+15
| | | | https://fedorahosted.org/sssd/ticket/1036
* LDAP: Fix missing break statements in force_tlsStephen Gallagher2011-12-081-6/+12
| | | | Also add a default case to protect against bad input
* LDAP provider: Error while setting the nocanon option should not be fatalJakub Hrozek2011-12-081-3/+9
| | | | https://fedorahosted.org/sssd/ticket/1100
* Add ldap_sasl_minssf optionJan Zeleny2011-12-083-0/+19
| | | | https://fedorahosted.org/sssd/ticket/1075
* Use dereference during IPA provider initgroupsJakub Hrozek2011-11-301-40/+149
| | | | https://fedorahosted.org/sssd/ticket/1099
* Fix two small bugs in group dereferencingJakub Hrozek2011-11-291-2/+5
|
* Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek2011-11-294-10/+42
|
* LDAP: Try next failover server on any errorStephen Gallagher2011-11-291-9/+5
|
* Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA providerJakub Hrozek2011-11-252-2/+14
| | | | | This was causing a segfault during HBAC processing and any ID lookups except for netgroups
* Modified sdap_parse_search_base()Jan Zeleny2011-11-233-12/+10
|
* Renamed some LDAP routinesJan Zeleny2011-11-236-41/+49
| | | | | These were renamed just ot make sure they are not mistook for IPA netgroup functions.
* Cleanup: Remove unused parametersJakub Hrozek2011-11-2210-67/+27
|
* Prevent printing NULL in several places of LDAP providerJakub Hrozek2011-11-182-5/+9
|
* Use one transaction instead of two during RFC2307bis group processingJakub Hrozek2011-11-111-31/+55
| | | | https://fedorahosted.org/sssd/ticket/1054
* Squash transactions in sdap_initgr_common_storeJakub Hrozek2011-11-111-6/+25
| | | | https://fedorahosted.org/sssd/ticket/1053
* LDAP: Remove redundant groups from the lookup listStephen Gallagher2011-11-081-23/+0
|
* Use correct state struct in sdap_initgr_rfc2307bis_next_baseJakub Hrozek2011-11-071-2/+3
|
* Fix segfault in sdap_get_initgr_userJakub Hrozek2011-11-071-1/+2
|
* Support to request canonicalization in LDAP/IPA providerJan Zeleny2011-11-025-0/+26
| | | | https://fedorahosted.org/sssd/ticket/957
* LDAP: Add support for multiple search bases for group enumerationStephen Gallagher2011-11-024-24/+101
|
* LDAP: Add support for multiple search bases for user enumerationStephen Gallagher2011-11-024-8/+49
|
* LDAP: Convert ldap_*_search_filterStephen Gallagher2011-11-023-59/+23
| | | | | | Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter.
* LDAP: Add multiple search bases for initgroups (RFC2307bis groups)Stephen Gallagher2011-11-021-77/+225
|
* LDAP: Add multiple search bases for initgroups (RFC2307 groups)Stephen Gallagher2011-11-021-17/+99
|
* LDAP: Add multiple search bases for initgroups (users)Stephen Gallagher2011-11-021-30/+72
|
* LDAP: Support multiple group search bases (non-enumeration, RFC2307)Stephen Gallagher2011-11-024-16/+74
|