summaryrefslogtreecommitdiffstats
path: root/src/providers
Commit message (Expand)AuthorAgeFilesLines
* Plug memory leaks in LDAP providerJakub Hrozek2011-10-261-0/+3
* Use fewer transactions during RFC2307bis initgroupsJakub Hrozek2011-10-261-539/+802
* Add a missing breakJakub Hrozek2011-10-261-0/+1
* Improve performance of HBAC with large numbers of hostsStephen Gallagher2011-10-264-206/+334
* Append PID to sbus server socket name, let clients use a symlinkJakub Hrozek2011-10-262-2/+2
* Use explicit base 10 for converting strings to integersJakub Hrozek2011-10-262-4/+4
* Better handling for aliasesJakub Hrozek2011-10-263-94/+225
* IPA access: hostname comparison should be case-insensitiveJakub Hrozek2011-10-261-1/+1
* HBAC: fix typos preventing proper hostgroup evaluationStephen Gallagher2011-10-261-3/+3
* Fix uninitialized pointer read in sdap_gssapi_get_default_realm()Jakub Hrozek2011-10-261-1/+1
* Use sss_ldap_err2string() instead of ldap_err2string()Pavel Březina2011-10-263-37/+35
* Improve error message for LDAP password constraint violationJakub Hrozek2011-10-263-16/+29
* Do not access memory out of boundsSumit Bose2011-10-261-2/+2
* HBAC: Properly skip all non-group memberOf entriesStephen Gallagher2011-10-261-1/+2
* Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANONJakub Hrozek2011-10-265-3/+17
* HBAC: Use of hostgroups for targethost or sourcehost was brokenStephen Gallagher2011-10-261-4/+4
* HBAC: Handle saving groups that have no membersStephen Gallagher2011-10-261-7/+21
* Improve password policy error code and messageSumit Bose2011-10-261-4/+9
* Use sysdb attribute name for GID, not LDAP attributeStephen Gallagher2011-10-261-3/+3
* Use the default Kerberos realm for LDAP with GSSAPI authJakub Hrozek2011-10-261-3/+55
* Fix returning groups when gidNumber attribute is not orderedJakub Hrozek2011-10-263-4/+10
* Explicitly ignore groups with gidNumber=0Jakub Hrozek2011-10-262-11/+18
* Set gidNumber of non-posix groups to 0 even on updatesJakub Hrozek2011-10-261-8/+44
* Rewrite HBAC rule evaluatorStephen Gallagher2011-10-2615-1697/+3614
* Request password control unconditionally during bindJakub Hrozek2011-10-261-6/+6
* Do not add a NULL host parsed from LDAP URIJakub Hrozek2011-10-261-1/+8
* ipa_dyndns: Use sockaddr_storage for storing IP addressesJakub Hrozek2011-10-261-12/+17
* Fix TLS/SSL validation after switch to ldap_init_fdSumit Bose2011-10-268-71/+149
* Honor the TTL value of SRV record lookupsJakub Hrozek2011-10-266-29/+30
* Delete cached ccache file if password is expiredSumit Bose2011-10-261-8/+63
* Do not check pwdAttributeSumit Bose2011-10-261-9/+0
* Handle non-POSIX groups in nestingJan Zeleny2011-10-262-28/+69
* Properly support IPv6 in LDAP URIs for IPA and LDAP providersJakub Hrozek2011-10-263-23/+82
* Add online callback only once for TGT renewalSumit Bose2011-10-261-25/+44
* Sanitize username during initgroups callSumit Bose2011-10-261-1/+7
* Always generate kpasswdinfo fileStephen Gallagher2011-10-261-2/+1
* IPA Provider: don't fail if user is not a member of any groupsStephen Gallagher2011-10-261-2/+5
* Enable paging support for LDAPStephen Gallagher2011-10-266-26/+132
* simple provider: Don't treat primary GID lookup failures as fatalStephen Gallagher2011-10-261-13/+19
* Only save members for successfully saved groupsJakub Hrozek2011-10-261-2/+17
* Make "password" the default for ldap_default_authtok_typesssd-1.5.1-35.el5Stephen Gallagher2011-05-251-1/+1
* Return pam data to the renewal item if renewal failsSumit Bose2011-05-021-4/+9
* Fix bad password caching when using automatic TGT renewalStephen Gallagher2011-04-291-3/+12
* Fix regressions in the negative cachesssd-1.5.1-30.el5Stephen Gallagher2011-04-151-4/+4
* Never remove gecos from the sysdb cachesssd-1.5.1-28.el5Stephen Gallagher2011-04-121-0/+9
* Initialise rootdse to NULL if not availablesssd-1.5.1-27.el5Sumit Bose2011-04-121-0/+1
* Initialise srv_opts even if rootDSE is missingsssd-1.5.1-26.el5Sumit Bose2011-04-112-46/+49
* Remove detection of duplicates from SRV result processingJakub Hrozek2011-04-111-9/+0
* Read only rootDSE data if rootDSE is availableSumit Bose2011-04-081-20/+22
* Do not attempt to resolve nameless serverssssd-1.5.1-24.el5Jakub Hrozek2011-04-011-1/+1