summaryrefslogtreecommitdiffstats
path: root/src/providers
Commit message (Expand)AuthorAgeFilesLines
* Improve performance of HBAC with large numbers of hostsStephen Gallagher2011-10-144-206/+334
* Append PID to sbus server socket name, let clients use a symlinkJakub Hrozek2011-10-132-2/+2
* Use explicit base 10 for converting strings to integerssssd-1.5.1-54.el6Jakub Hrozek2011-10-062-4/+4
* Better handling for aliasesJakub Hrozek2011-10-063-94/+225
* IPA access: hostname comparison should be case-insensitiveJakub Hrozek2011-09-301-1/+1
* HBAC: fix typos preventing proper hostgroup evaluationStephen Gallagher2011-09-301-3/+3
* Fix uninitialized pointer read in sdap_gssapi_get_default_realm()Jakub Hrozek2011-09-201-1/+1
* Use sss_ldap_err2string() instead of ldap_err2string()sssd-1.5.1-51.el6Pavel Březina2011-09-123-37/+35
* Improve error message for LDAP password constraint violationJakub Hrozek2011-09-123-16/+29
* Do not access memory out of boundsSumit Bose2011-09-071-2/+2
* HBAC: Properly skip all non-group memberOf entriesStephen Gallagher2011-08-291-1/+2
* Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANONJakub Hrozek2011-08-295-3/+17
* HBAC: Use of hostgroups for targethost or sourcehost was brokenStephen Gallagher2011-08-291-4/+4
* HBAC: Handle saving groups that have no membersStephen Gallagher2011-08-291-7/+21
* Improve password policy error code and messageSumit Bose2011-08-291-4/+9
* Use sysdb attribute name for GID, not LDAP attributeStephen Gallagher2011-08-291-3/+3
* Use the default Kerberos realm for LDAP with GSSAPI authJakub Hrozek2011-08-291-3/+55
* Fix returning groups when gidNumber attribute is not orderedJakub Hrozek2011-08-043-4/+10
* Explicitly ignore groups with gidNumber=0Jakub Hrozek2011-08-042-11/+18
* Set gidNumber of non-posix groups to 0 even on updatesJakub Hrozek2011-08-041-8/+44
* Rewrite HBAC rule evaluatorStephen Gallagher2011-08-0415-1697/+3614
* Request password control unconditionally during bindJakub Hrozek2011-08-041-6/+6
* Do not add a NULL host parsed from LDAP URIJakub Hrozek2011-08-041-1/+8
* ipa_dyndns: Use sockaddr_storage for storing IP addressesJakub Hrozek2011-07-131-12/+17
* Fix TLS/SSL validation after switch to ldap_init_fdSumit Bose2011-07-138-71/+149
* Honor the TTL value of SRV record lookupsJakub Hrozek2011-07-136-29/+30
* Delete cached ccache file if password is expiredSumit Bose2011-07-131-8/+63
* Do not check pwdAttributeSumit Bose2011-07-131-9/+0
* Handle non-POSIX groups in nestingsssd-1.5.1-40.el6Jan Zeleny2011-06-022-28/+69
* Properly support IPv6 in LDAP URIs for IPA and LDAP providersJakub Hrozek2011-06-023-23/+82
* Add online callback only once for TGT renewalSumit Bose2011-06-021-25/+44
* Sanitize username during initgroups callsssd-1.5.1-37.el6Sumit Bose2011-05-251-1/+7
* Always generate kpasswdinfo filesssd-1.5.1-36.el6Stephen Gallagher2011-05-241-2/+1
* IPA Provider: don't fail if user is not a member of any groupsStephen Gallagher2011-05-241-2/+5
* Enable paging support for LDAPStephen Gallagher2011-05-246-26/+132
* simple provider: Don't treat primary GID lookup failures as fatalStephen Gallagher2011-05-241-13/+19
* Only save members for successfully saved groupsJakub Hrozek2011-05-241-2/+17
* Make "password" the default for ldap_default_authtok_typeStephen Gallagher2011-05-241-1/+1
* Return pam data to the renewal item if renewal failsSumit Bose2011-05-021-4/+9
* Fix bad password caching when using automatic TGT renewalStephen Gallagher2011-04-291-3/+12
* Fix regressions in the negative cachesssd-1.5.1-30.el6Stephen Gallagher2011-04-151-4/+4
* Never remove gecos from the sysdb cachesssd-1.5.1-28.el6Stephen Gallagher2011-04-121-0/+9
* Initialise rootdse to NULL if not availablesssd-1.5.1-27.el6Sumit Bose2011-04-121-0/+1
* Initialise srv_opts even if rootDSE is missingsssd-1.5.1-26.el6Sumit Bose2011-04-112-46/+49
* Remove detection of duplicates from SRV result processingJakub Hrozek2011-04-111-9/+0
* Read only rootDSE data if rootDSE is availableSumit Bose2011-04-081-20/+22
* Do not attempt to resolve nameless serverssssd-1.5.1-24.el6Jakub Hrozek2011-04-011-1/+1
* Fall back to cn if gecos is not availablesssd-1.5.1-23.el6Stephen Gallagher2011-03-301-0/+9
* Always complete the transaction in sdap_process_group_members_2307sssd-1.5.1-21.el6Stephen Gallagher2011-03-281-3/+24
* Return from functions in LDAP provider after marking request as failedsssd-1.5.1-20.el6Jakub Hrozek2011-03-251-1/+4