summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap
Commit message (Collapse)AuthorAgeFilesLines
* Missing debug message if sdap_sudo_refresh_set_timer failsPavel Březina2012-03-091-1/+5
| | | | https://fedorahosted.org/sssd/ticket/1238
* LDAP: Make sdap_access_send/recv publicStephen Gallagher2012-03-092-12/+17
| | | | We want to consume this in the IPA provider.
* Fix nested groups processingJakub Hrozek2012-03-081-26/+60
| | | | | | | Instead of keeping the number of parent groups in "state" and having to reset the count when moving to another group on the same level, keep track of the all groups on a particular level along with their parents and parent count.
* Detect cycle in the fail over on subsequent resolve requests onlyJakub Hrozek2012-03-082-3/+6
|
* krb5_child: set debugging soonerJakub Hrozek2012-03-061-11/+17
|
* Only do one cycle when resolving a serverJakub Hrozek2012-03-062-9/+9
| | | | https://fedorahosted.org/sssd/ticket/1214
* Use proper errno codeJakub Hrozek2012-03-051-1/+1
|
* IPA: Set the DNS discovery domain to match ipa_domainStephen Gallagher2012-03-011-1/+2
| | | | https://fedorahosted.org/sssd/ticket/1217
* LDAP: Remove unnecessary filter sanitizeStephen Gallagher2012-02-261-11/+5
| | | | | | The orig_dn here isn't being passed to a filter and therefore must not be santized, as the sanitization process would break DNs that contain (among other things) parentheses.
* Modifications to simplify list_missing_attrsJan Zeleny2012-02-248-44/+21
|
* Delete missing attributes from netgroups to be storedJan Zeleny2012-02-241-1/+26
| | | | https://fedorahosted.org/sssd/ticket/1136
* IPA hosts refactoringJan Zeleny2012-02-241-2/+0
|
* LDAP: Only use paging control on requests for multiple entriesStephen Gallagher2012-02-2410-25/+79
| | | | | | | | | | The paging control can cause issues on servers that put limits on how many paging controls can be active at one time (on some servers, it is limited to one per connection). We need to reduce our usage so that we only activate the paging control when making a request that may return an arbitrary number of results. https://fedorahosted.org/sssd/ticket/1202 phase one
* AUTOFS: Search all search bases for automounter map entriesJakub Hrozek2012-02-231-18/+86
| | | | https://fedorahosted.org/sssd/ticket/1168
* LDAP: Properly assign orig_dnStephen Gallagher2012-02-231-0/+1
| | | | This was only used for properly identifying debug messages.
* IPA: Add ipa_parse_search_base()Stephen Gallagher2012-02-232-10/+28
| | | | | | | | | | Previously, we were using sdap_parse_search_base() for setting up the search_base objects for use in IPA. However, this was generating unfriendly log messages about unknown search base types. This patch creates a new common_parse_search_base() routine that can be used with either LDAP or IPA providers. https://fedorahosted.org/sssd/ticket/1151
* Don't give memory context in confdb where not neededJan Zeleny2012-02-211-1/+1
|
* End request if ldap_parse_result failsJakub Hrozek2012-02-211-0/+3
|
* LDAP: Ignore group member users that do not have name attributesStephen Gallagher2012-02-171-2/+2
| | | | | | | | Instead of failing the group lookup, just skip them. This was impacting some users of ActiveDirectory where not all users had the appropriate attributes. https://fedorahosted.org/sssd/ticket/1169
* Redesign purging of the sudo cachePavel Březina2012-02-171-19/+55
| | | | https://fedorahosted.org/sssd/ticket/1173
* Fix memory hierarchy when processing nested group membershipsJakub Hrozek2012-02-144-11/+14
| | | | https://fedorahosted.org/sssd/ticket/1186
* Fix uninitialized in_transactionStephen Gallagher2012-02-131-1/+1
| | | | Coverity #12521 and #12491
* Add missing breaks to switch statementsStephen Gallagher2012-02-132-0/+2
| | | | Coverity #12525 and #12524
* AUTOFS: IPA providerJakub Hrozek2012-02-071-0/+3
|
* LDAP: Add support for SSH user public keysJan Cholasta2012-02-073-4/+23
|
* Update shadowLastChanged attribute during LDAP password changeJan Zeleny2012-02-065-0/+189
| | | | https://fedorahosted.org/sssd/ticket/1019
* Session target in IPA providerJan Zeleny2012-02-061-0/+1
|
* Do not call sudo functions if built without-sudoJakub Hrozek2012-02-052-7/+7
|
* AUTOFS: LDAP providerJakub Hrozek2012-02-058-1/+1344
|
* Move BUILD_SUDO outside the generic LDAP source filesJakub Hrozek2012-02-045-95/+127
| | | | Avoid #ifdefs in the general part of the code
* NSS: Add individual timeouts for entry typesStephen Gallagher2012-02-046-13/+10
| | | | https://fedorahosted.org/sssd/ticket/1016
* LDAP: Fix incorrect search timeoutsStephen Gallagher2012-02-042-2/+2
|
* LDAP: Do not fail if RootDSE check cannot determine search basesStephen Gallagher2012-02-048-5/+88
| | | | https://fedorahosted.org/sssd/ticket/1152
* KRB5: Add syslog messages for Kerberos failuresStephen Gallagher2012-01-311-0/+8
| | | | https://fedorahosted.org/sssd/ticket/1137
* LDAP: Add enumeration support for servicesStephen Gallagher2012-01-317-3/+215
|
* LDAP: Add support for service lookups (non-enum)Stephen Gallagher2012-01-318-0/+891
|
* SUDO Integration - prepare data provider for new responder commandsPavel Březina2012-01-273-134/+189
| | | | https://fedorahosted.org/sssd/ticket/1143
* LDAP: Improve debugging for sdap_parse_derefStephen Gallagher2012-01-231-4/+7
| | | | | | Move the debug statement identifying the DN to an earlier line, so if we get a reply with no attributes, we know which entry is at fault.
* LDAP: Add option to disable paging controlStephen Gallagher2012-01-183-3/+9
| | | | Fixes https://fedorahosted.org/sssd/ticket/967
* Do not use sudo symbols in LDAP provider unconditionallyJakub Hrozek2012-01-181-0/+2
|
* SUDO Integration - periodical update of rules in data providerPavel Březina2012-01-176-0/+345
| | | | | | | | https://fedorahosted.org/sssd/ticket/1110 Adds new configuration options: - ldap_sudo_refresh_enabled - enable/disable periodical updates - ldap_sudo_refresh_timeout - rules timeout (refresh period)
* SUDO Integration - wrap data provider with tevent_reqPavel Březina2012-01-172-43/+138
| | | | https://fedorahosted.org/sssd/ticket/1110
* SUDO Integration review issuesPavel Březina2012-01-172-3/+2
|
* LDAP: Copy URI instead of pointing at failover service recordStephen Gallagher2012-01-141-2/+8
| | | | | | | | In a heavy load environment, sometimes the failover service record would be updated and free the URI value. We need to guarantee that this URI string remains valid throughout the entire request. https://fedorahosted.org/sssd/ticket/1139
* Log fixes for sdap_call_conn_cbStephen Gallagher2012-01-141-1/+2
|
* Add compatibility layer for Heimdal Kerberos implementationStephen Gallagher2011-12-221-0/+5
|
* Save original memberof, not memberofJakub Hrozek2011-12-201-4/+16
|
* SUDO Integration - fixed memory leak in sdap_sudo_handler()Pavel Březina2011-12-201-0/+1
|
* SUDO Integration - be_sudo_req removed from sudo_ctxPavel Březina2011-12-202-2/+0
|
* Pass sdap_id_ctx to online check from IPA providerJakub Hrozek2011-12-192-17/+42
|
generated by cgit (git 2.34.1) at 2024-06-30 17:39:59 +0000