summaryrefslogtreecommitdiffstats
path: root/src/providers
Commit message (Expand)AuthorAgeFilesLines
* PROXY: fix negative cache1.9.2-38Ondrej Kos2012-12-141-20/+24
* LDAP: Continue adjusting group membership even if there is nothing to add1.9.2-37Jakub Hrozek2012-12-071-2/+1
* Add backchannel NSS provider query on initgr callsSimo Sorce2012-12-061-0/+165
* Hook for mmap cache update on initgroup callsSimo Sorce2012-12-061-0/+1
* Hook to perform a mmap cache update from sssd_nssSimo Sorce2012-12-061-0/+6
* Missing parameter in DEBUG message.Michal Zidek2012-12-061-1/+2
* warn user if password is about to expirePavel Březina2012-12-061-3/+4
* IPA: Handle bad results from c-ares lookupStephen Gallagher2012-12-061-1/+11
* idmap: Silence DEBUG messages when dealing with built-in SIDs.Michal Zidek2012-11-284-79/+108
* do not default fullname to gecos when schema = adPavel Březina2012-11-281-0/+14
* fix SIGSEGV in IPA provider when ldap_sasl_authid is not setPavel Březina2012-11-271-1/+1
* LDAP: fix uninitialized variableOndrej Kos2012-11-271-1/+1
* LDAP: Only convert direct parents' ghost attribute to memberJakub Hrozek2012-11-214-9/+39
* KRB5: Work around const warning for krb5 releases older than 1.11Sumit Bose2012-11-201-1/+1
* backend: add PAC to the list of known clientsPavel Březina2012-11-201-0/+2
* Disable canonicalization during password changesSumit Bose2012-11-201-2/+43
* Fix compare_principal_realm() checkSumit Bose2012-11-201-9/+3
* Just use the service name with krb5_get_init_creds_password()Sumit Bose2012-11-201-24/+2
* LDAP: Make it possible to use full principal in ldap_sasl_authid againJakub Hrozek2012-11-201-4/+16
* LDAP: Checking the principal should not be considered fatalJakub Hrozek2012-11-201-6/+10
* LDAP: Provide a common sdap_set_sasl_options init functionJakub Hrozek2012-11-204-91/+95
* LDAP: Expire even non authenticated connectionsJakub Hrozek2012-11-191-8/+11
* Do not save HBAC rules in subdomain subtreeSumit Bose2012-11-193-16/+32
* Refactor the way subdomain accounts are savedSimo Sorce2012-11-192-4/+61
* LDAP: Refactor saving ghost usersJakub Hrozek2012-11-191-88/+99
* LDAP: Better debug logging when saving groupsStephen Gallagher2012-11-191-11/+75
* LDAP: use the correct memory contextJakub Hrozek2012-11-191-1/+1
* LDAP: Fix saving empty groupsJakub Hrozek2012-11-191-2/+4
* LDAP: Allocate the temporary context on NULL, not memctxJakub Hrozek2012-11-191-1/+1
* sudo: store rules with no sudoHost attributePavel Březina2012-11-191-0/+7
* Do not always return PAM_SYSTEM_ERR when offline krb5 authentication failsJakub Hrozek2012-11-151-1/+2
* Only build extract_and_send_pac on platforms that support itJakub Hrozek2012-11-151-104/+18
* KRB5: Rename variable to avoid shadowing a global declarationJakub Hrozek2012-11-141-4/+4
* subdomains: check request type on one place onlyPavel Březina2012-11-141-6/+0
* Run IPA subdomain provider if IPA ID provider is configuredSumit Bose2012-11-142-2/+69
* Do not remove a group if it has members from subdomainsSumit Bose2012-11-121-4/+15
* Clarify debug message about initgroups and subdomainsSumit Bose2012-11-121-0/+7
* LDAP: Fix off-by-one error when saving ghost usersJakub Hrozek2012-11-061-1/+1
* Make sub-domains case-insensitiveSumit Bose2012-11-051-2/+23
* krb5_auth: update with correct UPN if neededSumit Bose2012-11-053-0/+133
* Use find_or_guess_upn() where neededSumit Bose2012-11-054-34/+49
* Add new call find_or_guess_upn()Sumit Bose2012-11-054-8/+54
* krb5_child: send back the client principalSumit Bose2012-11-054-5/+42
* krb5_mod_ccname: replace wrong memory contextSumit Bose2012-11-051-1/+1
* krb5_child: send PAC to PAC responderSumit Bose2012-11-051-1/+139
* krb5_auth: send different_realm flag to krb5_childSumit Bose2012-11-052-1/+8
* krb5_auth: check if principal belongs to a different realmSumit Bose2012-11-054-0/+43
* check_ccache_files: search sub-domains as wellSumit Bose2012-11-051-4/+14
* krb5_auth_send: check for sub-domainsSumit Bose2012-11-054-11/+37
* subdomain-id: Generate homedir only for users not groupsSumit Bose2012-11-051-10/+12