summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* 2FA offline authSumit Bose2015-05-082-5/+107
* krb5: try delayed online authentication only for single factor authSumit Bose2015-05-081-0/+7
* krb5: save hash of the first authentication factor to the cacheSumit Bose2015-05-081-3/+23
* sysdb: add sysdb_cache_password_ex()Sumit Bose2015-05-083-3/+84
* Add cache_credentials_minimal_first_factor_length config optionSumit Bose2015-05-086-0/+42
* pam_sss: add pre-auth and 2fa supportSumit Bose2015-05-082-2/+234
* IPA: create preauth indicator file at startupSumit Bose2015-05-082-0/+68
* krb5-child: add preauth and split 2fa token supportSumit Bose2015-05-084-21/+257
* Add pre-auth requestSumit Bose2015-05-086-0/+17
* pam: handle 2FA authentication token in the responderSumit Bose2015-05-081-0/+4
* utils: add sss_authtok_[gs]et_2faSumit Bose2015-05-088-3/+564
* Add leak check and command line option to test_authtokSumit Bose2015-05-082-10/+60
* IPA: allow initgroups by UUID for FreeIPA usersSumit Bose2015-05-067-28/+64
* NSS: check for overrides before calling backendSumit Bose2015-05-061-5/+20
* IPA: do not add domain name unconditionallySumit Bose2015-05-063-1/+4
* IPA: search for overrides during initgroups in sever modeSumit Bose2015-05-051-0/+69
* IPA: enhance ipa_initgr_get_overrides_send()Sumit Bose2015-05-053-17/+61
* IPA: update initgr expire timestamp conditionallySumit Bose2015-05-051-8/+11
* IPA: do initgroups if extdom exop supports itSumit Bose2015-05-053-10/+21
* SPEC: Fix cyclic dependencies between sssd-{krb5,}-commonLukas Slebodnik2015-05-051-1/+1
* SDAP: Fix id mapping with disabled subdomainsLukas Slebodnik2015-05-051-0/+7
* sss_nss_idmap-tests: Use different prepared buffers for big endianLukas Slebodnik2015-05-041-0/+12
* GPO: Do not ignore missing attrs for GPOsLukas Slebodnik2015-04-301-3/+9
* autofs: fix 'Cannot allocate memory' with FQDNsAron Parsons2015-04-301-9/+0
* IPA: fix segfault in ipa_s2n_exopAron Parsons2015-04-291-1/+1
* IPA: allow initgroups by SID for AD usersSumit Bose2015-04-296-11/+56
* simple-access-provider: make user grp res more robustPavel Reichl2015-04-283-4/+24
* IPA: check ghosts in groups found by uuid as wellSumit Bose2015-04-271-9/+12
* IPA: use sysdb_attrs_add_string_safe to add group memberSumit Bose2015-04-271-2/+3
* IPA: do not try to save override data for the default viewSumit Bose2015-04-271-5/+10
* tests: Add NSS responder tests for bysid requestsJakub Hrozek2015-04-242-0/+220
* nss: Use negcache for getbysid requestsJakub Hrozek2015-04-241-0/+9
* sysdb: Add cache_expire to the default sysdb_search_object_by_str_attr setJakub Hrozek2015-04-241-1/+2
* BUILD: Write hints about optional python bindingsLukas Slebodnik2015-04-241-2/+22
* ad_opts: Use different default attribute for group nameLukas Slebodnik2015-04-171-1/+1
* subdom: Remove unused function get_flat_name_from_subdomain_nameJakub Hrozek2015-04-162-24/+0
* AD GPO: Always look up GPOs from machine domainStephen Gallagher2015-04-151-21/+33
* AD: Always get domain-specific ID connectionStephen Gallagher2015-04-152-11/+8
* AD: Clean up ad_access_gpoStephen Gallagher2015-04-151-7/+5
* selinux: Only call semanage if the context actually changesJakub Hrozek2015-04-144-4/+109
* selinux: Begin and end the transaction on the same nesting levelJakub Hrozek2015-04-141-6/+14
* selinux: Disconnect before closing the handleJakub Hrozek2015-04-141-3/+10
* Option filter_users had no effect for retrieving sudo rulesAdam Tkac2015-04-143-0/+39
* sysdb-tests: test return value before output argumentsLukas Slebodnik2015-04-141-0/+1
* sysdb-tests: Add missing assertionsLukas Slebodnik2015-04-141-0/+3
* simple_access-tests: Simplify assertionLukas Slebodnik2015-04-141-3/+1
* SDAP: Filter ad groups in initgroupsLukas Slebodnik2015-04-141-0/+12
* SDAP: Extract filtering AD group to functionLukas Slebodnik2015-04-145-47/+101
* SDAP: Do not set gid 0 twiceLukas Slebodnik2015-04-141-7/+0
* nsupdate: Append -d/-D to nsupdate with a high debug levelJakub Hrozek2015-04-141-1/+17