summaryrefslogtreecommitdiffstats
path: root/src/providers
Commit message (Collapse)AuthorAgeFilesLines
...
* Use the case sensitivity flag in the simple access providerJakub Hrozek2011-12-161-4/+15
|
* Use the case sensitivity flag in the LDAP providerJakub Hrozek2011-12-166-11/+31
|
* Refactor saving sdap entitiesJakub Hrozek2011-12-165-179/+146
| | | | | There was too much code duplication between sdap_save_{user,group,netgroup}. This patch removes the most egregious ones.
* Support search bases in netgroup members translationPavel Březina2011-12-141-1/+11
|
* Support search bases in RFC2307bis enumerationPavel Březina2011-12-141-10/+145
| | | | https://fedorahosted.org/sssd/ticket/960
* Add sdap_connection_expire_timeout optionStephen Gallagher2011-12-125-3/+18
| | | | https://fedorahosted.org/sssd/ticket/1036
* Fix uninitialized value error in ipa_netgroups.cStephen Gallagher2011-12-121-0/+1
| | | | | | | DEBUG message can print an unitialized value if the first netgroup has no members. Coverity 12382
* Fixed IPA netgroup processingJan Zeleny2011-12-093-2/+7
| | | | | | | | In case IPA netgroup had indirect member hosts, they wouldn't be detected. This patch also modifies debug messages for easier debugging in the future.
* LDAP: Fix missing break statements in force_tlsStephen Gallagher2011-12-081-6/+12
| | | | Also add a default case to protect against bad input
* LDAP provider: Error while setting the nocanon option should not be fatalJakub Hrozek2011-12-081-3/+9
| | | | https://fedorahosted.org/sssd/ticket/1100
* Add ldap_sasl_minssf optionJan Zeleny2011-12-085-1/+21
| | | | https://fedorahosted.org/sssd/ticket/1075
* Allow using Glib for UTF8 supportStephen Gallagher2011-12-051-33/+11
|
* Use dereference during IPA provider initgroupsJakub Hrozek2011-11-301-40/+149
| | | | https://fedorahosted.org/sssd/ticket/1099
* Fix two small bugs in group dereferencingJakub Hrozek2011-11-291-2/+5
|
* Add ipa_hbac_support_srchost option to IPA providerJan Zeleny2011-11-296-36/+151
| | | | | don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
* IPA migration fixesJakub Hrozek2011-11-293-97/+141
| | | | | | | * use the id connection for looking up the migration flag * force TLS on the password based authentication connection https://fedorahosted.org/sssd/ticket/924
* Provide means of forcing TLS and GSSAPI enabled/disabled for sdap connectionsJakub Hrozek2011-11-295-11/+43
|
* LDAP: Try next failover server on any errorStephen Gallagher2011-11-291-9/+5
|
* Fixed logically dead code in netgroup processingJan Zeleny2011-11-281-1/+1
|
* Fixed uninitialized pointer read in netgroups processingJan Zeleny2011-11-281-0/+6
|
* Fix sdap_id_ctx/ipa_id_ctx mismatch in IPA providerJakub Hrozek2011-11-254-4/+18
| | | | | This was causing a segfault during HBAC processing and any ID lookups except for netgroups
* Added IPA account info handlerJan Zeleny2011-11-233-1/+373
| | | | | Currently it is only handling netgroups by itself, other requests are forwarded to LDAP provider.
* Added support for fetching netgroups in IPA providerJan Zeleny2011-11-231-0/+992
|
* New IPA ID contextJan Zeleny2011-11-233-22/+37
|
* Added and modified options for IPA netgroupsJan Zeleny2011-11-232-24/+69
|
* Modified sdap_parse_search_base()Jan Zeleny2011-11-234-16/+14
|
* Renamed some LDAP routinesJan Zeleny2011-11-236-41/+49
| | | | | These were renamed just ot make sure they are not mistook for IPA netgroup functions.
* Set more strict permissions on keyringSimo Sorce2011-11-221-1/+1
| | | | | We want to confine access to the keyring to the current process and not let root easily peek into the keyring contents.
* Fixed unchecked value of setenv() in check_and_export_options()Jan Zeleny2011-11-221-2/+5
| | | | https://fedorahosted.org/sssd/ticket/1080
* Cleanup: Remove unused parametersJakub Hrozek2011-11-2225-119/+38
|
* Prevent printing NULL in several places of LDAP providerJakub Hrozek2011-11-182-5/+9
|
* Use one transaction instead of two during RFC2307bis group processingJakub Hrozek2011-11-111-31/+55
| | | | https://fedorahosted.org/sssd/ticket/1054
* Squash transactions in sdap_initgr_common_storeJakub Hrozek2011-11-111-6/+25
| | | | https://fedorahosted.org/sssd/ticket/1053
* LDAP: Remove redundant groups from the lookup listStephen Gallagher2011-11-081-23/+0
|
* Fixed empty loginShell in proxy providerJan Zeleny2011-11-071-4/+32
| | | | https://fedorahosted.org/sssd/ticket/892
* Use correct state struct in sdap_initgr_rfc2307bis_next_baseJakub Hrozek2011-11-071-2/+3
|
* Fix segfault in sdap_get_initgr_userJakub Hrozek2011-11-071-1/+2
|
* Support to request canonicalization in LDAP/IPA providerJan Zeleny2011-11-027-1/+28
| | | | https://fedorahosted.org/sssd/ticket/957
* Add support to request canonicalization on krb AS requestsJan Zeleny2011-11-025-3/+28
| | | | https://fedorahosted.org/sssd/ticket/957
* LDAP: Add support for multiple search bases for group enumerationStephen Gallagher2011-11-024-24/+101
|
* LDAP: Add support for multiple search bases for user enumerationStephen Gallagher2011-11-024-8/+49
|
* LDAP: Convert ldap_*_search_filterStephen Gallagher2011-11-023-59/+23
| | | | | | Instead of making this a global option for all user lookups, make it only used if the search base is passed without an explicit filter.
* LDAP: Add multiple search bases for initgroups (RFC2307bis groups)Stephen Gallagher2011-11-021-77/+225
|
* LDAP: Add multiple search bases for initgroups (RFC2307 groups)Stephen Gallagher2011-11-021-17/+99
|
* LDAP: Add multiple search bases for initgroups (users)Stephen Gallagher2011-11-021-30/+72
|
* LDAP: Support multiple group search bases (non-enumeration, RFC2307)Stephen Gallagher2011-11-024-16/+74
|
* LDAP: Support multiple netgroup search basesStephen Gallagher2011-11-023-14/+65
|
* LDAP: Support multiple user search bases (non-enumeration)Stephen Gallagher2011-11-024-14/+70
|
* LDAP: Add parser for multiple search basesStephen Gallagher2011-11-025-26/+380
|
* Make sdap_get_id_specific_filter() more strictStephen Gallagher2011-11-022-4/+4
|