Commits - SSSD/sssd

Updating the version for the 1.11.9 release

Jakub Hrozek • 9 years ago

290eff3

sudo: use "higher value wins" when ordering rules

Pavel Březina • 9 years ago

caa1686

NSS: Fix memory leak netgroup

Pavel Reichl • 9 years ago

5232e1e

NSS: fix memory leak in sysdb_getnetgr

Pavel Reichl • 9 years ago

af08342

NSS: sysdb_getnetgr refactor

Pavel Reichl • 9 years ago

e25867d

NSS: sysdb_getnetgr check return value first

Pavel Reichl • 9 years ago

e78fc9b

BUILD: Fix linking issues on debian

Lukas Slebodnik • 9 years ago

2465c60

KRB5: Adding DNS SRV lookup for krb5 provider

Petr Cech • 9 years ago

f4b0442

BUILD: Accept krb5 1.14 for building the PAC plugin

Lukas Slebodnik • 9 years ago

e46ee9a

LDAP: Fix leak of file descriptors

Lukas Slebodnik • 9 years ago

1916410

Fix memory leak in sssdpac_verify()

Thomas Oulevey • 9 years ago

96ad95f

SDAP: Relax POSIX check

Pavel Reichl • 9 years ago

91a6cda

LDAP: Sanitize group dn before using in filter

Lukas Slebodnik • 9 years ago

17191a0

SDAP: Remove user from cache for missing user in LDAP

Lukas Slebodnik • 9 years ago

7f73635

ldap: use proper sysdb name in groups_by_user_done()

Sumit Bose • 9 years ago

1c8b34b

DP: Set extra_value to NULL for enum requests

Jakub Hrozek • 9 years ago

1525b4d

Download complete groups if ignore_group_members is set with tokengroups

Jakub Hrozek • 9 years ago

2dad4fa

SDAP: Set initgroups expire attribute at the end

Lukas Slebodnik • 9 years ago

cf81e43

nss: Do not ignore default vaue of SYSDB_INITGR_EXPIRE

Lukas Slebodnik • 9 years ago

79c0159

autofs: fix 'Cannot allocate memory' with FQDNs

Aron Parsons • 9 years ago

e4bba97

Option filter_users had no effect for retrieving sudo rules

Adam Tkac • 9 years ago

947ade0

SDAP: Do not set gid 0 twice

Lukas Slebodnik • 9 years ago

f2bb2c6

sudo: sanitize filter values

Pavel Březina • 9 years ago

73b68bb

LDAP: unlink ccname_file_dummy if there is an error

Daniel Hjorth • 9 years ago

c4dfffc

KRB5: Go offline in case of clock skew

Jakub Hrozek • 9 years ago

fcb0280

memberof: check for empty arrays to avoid segfaults

Sumit Bose • 9 years ago

7d63f9c

UTIL: Do not change SSSD domains in get_domains_head

Stephen Gallagher • 9 years ago

8c2cbe4

Accept krb5 1.13 for building the PAC plugin

Nalin Dahyabhai • 9 years ago

58190a0

build: Don't install ad and ipa man pages unnecessarily

Nikolai Kondrashov • 9 years ago

2ba6c83

TESTS: sysdb_search_return_ENOENT - check mem leaks

Pavel Reichl • 9 years ago

be7685e

SYSDB: sysdb_search_custom fix memory leak

Pavel Reichl • 9 years ago

8488fba

SYSDB: sysdb_search_entry fix memory leak

Pavel Reichl • 9 years ago

fd2ff8f

TEST: Test empty results from functions sysdb_search_*

Lukas Slebodnik • 9 years ago

e19c67a

MONITOR: Fix double free

Lukas Slebodnik • 9 years ago

31e351c

monitor: Service restart fixes

Stephen Gallagher • 9 years ago

95fd266

monitor: memory-leak bug

Pavel Reichl • 9 years ago

392371c

monitor: monitor_kill_service - refactor

Pavel Reichl • 9 years ago

985e95d

monitor: use-after-free bugfix

Pavel Reichl • 9 years ago

50ecac0

pysss_nss_idmap: Use wrapper for older python

Lukas Slebodnik • 10 years ago

0ffc58e

LDAP: return after tevent_req_error

Jakub Hrozek • 10 years ago

1ec5ef6

enumeration: fix talloc context

Pavel Březina • 10 years ago

c34ac0d

sudo: return after tevent_req_error

Pavel Reichl • 10 years ago

2dd4676

SDAP: return after tevent_req_error

Pavel Reichl • 10 years ago

f160d64

PROXY: Fix use after free

Lukas Slebodnik • 10 years ago

697d13a

LDAP: retain external members

Pavel Reichl • 10 years ago

dcb1603

Signals: Remove unused functions

Simo Sorce • 10 years ago

fea2d8c

PAC: krb5_pac_verify failures should not be fatal

Jakub Hrozek • 11 years ago

df62ac0

LDAP: Do not clobber return value when multiple controls are returned

Jakub Hrozek • 11 years ago

d164404

sss_client: Fix race condition in memory cache

Lukas Slebodnik • 11 years ago

efe9536

sss_client: Extract destroying of mmap cache to function

Lukas Slebodnik • 11 years ago

bbaa6a4

MAN: page edit for ldap_use_tokengroups

Dan Lavu • 11 years ago

3cc9377

LDAP: Disable token groups by default

Lukas Slebodnik • 11 years ago

6037341

Revert "LDAP: Change defaults for ldap_user/group_objectsid"

Lukas Slebodnik • 11 years ago

c6a7cf7

IPA: use ipaUserGroup object class for groups

Pavel Březina • 11 years ago

f070a93

build: call AC_BUILD_AUX_DIR before anything else

Jan Engelhardt • 11 years ago

e6546e2

LDAP: Change defaults for ldap_user/group_objectsid

Michal Zidek • 11 years ago

29e5b5d

IPA: Use GC for group lookups in server mode

Jakub Hrozek • 11 years ago

16e2463

Updating the version for the 1.11.8 development

Jakub Hrozek • 11 years ago

d3365e7

Updating the translations for the 1.11.7 release

Jakub Hrozek • 11 years ago

9901769

Use the alternative objectclass in group maps.

Michal Zidek • 11 years ago

9e99c00

Add alternative objectClass to group attribute maps

Michal Zidek • 11 years ago

cfa74fc

Ignore referrals in deref and ASQ, too

Jakub Hrozek • 11 years ago

3f85578

LDAP: Skip dereferenced entries that we are not permitted to read

Jakub Hrozek • 11 years ago

ffe42e0

AD: process non-posix nested groups using tokenGroups

Pavel Reichl • 11 years ago

191d7f7

AD: process non-posix nested groups w/o tokenGroups

Pavel Reichl • 11 years ago

4da27d5

IPA: process non-posix nested groups

Pavel Reichl • 11 years ago

0b6b4b7

Add user lookup and session dependencies to systemd service file.

Ian Lee • 11 years ago

ddbcd08

LDAP: Ignore returned referrals if referral support is disabled

Jakub Hrozek • 11 years ago

e6c56ab

Replace space: add some checks

Sumit Bose • 11 years ago

bc4b852

LDAP: Enable tokenGroups with Windows Server 2003

Jakub Hrozek • 11 years ago

7f59cc4

LDAP: Fall back to functional level of Windows Server 2003

Jakub Hrozek • 11 years ago

aaab5cd

LDAP: Add Windows Server 2012 R2 functional level

Jakub Hrozek • 11 years ago

de4788b

MAN: options 'lockout' and 'ldap_pwdlockout_dn'

Pavel Reichl • 11 years ago

c4998e7

SDAP: account lockout to restrict access via ssh key

Pavel Reichl • 11 years ago

54164c8

SDAP: new option - DN to ppolicy on LDAP

Pavel Reichl • 11 years ago

6ff7563

SDAP: refactor AC offline checks

Pavel Reichl • 11 years ago

2c8c42d

SDAP: don't log error on access denied

Pavel Reichl • 11 years ago

bd7052b

SDAP: refactor sdap_access_filter_done

Pavel Reichl • 11 years ago

13c41d8

SDAP: nitpicks in sdap_access_filter_get_access_done

Pavel Reichl • 11 years ago

80cef0e

SDAP: refactor sdap_access_filter_send

Pavel Reichl • 11 years ago

15089df

SDAP: split sdap_access_filter_get_access_done

Pavel Reichl • 11 years ago

b5455e1

SDAP: Update groups for user just once.

Lukas Slebodnik • 11 years ago

414f520

SDAP: Use different talloc_context for array of names

Lukas Slebodnik • 11 years ago

6656b81

SDAP: Immediately finish request for empty array

Lukas Slebodnik • 11 years ago

97e5ea0

LDAP: Use randomized ccname for storing credentials

Jakub Hrozek • 11 years ago

1cd03a9

LDAP: Use tmp_ctx in ldap_child for temporary data

Jakub Hrozek • 11 years ago

485c915

LDAP: Don't add a user member twice when adding a primary group

Jakub Hrozek • 11 years ago

25ff0ec

LDAP: Split out linking primary group members into a separate function

Jakub Hrozek • 11 years ago

2d1e4d2

LDAP: Do not shortcut on ret != EOK during password expiry check

Jakub Hrozek • 11 years ago

7454855

sss_client: Fix "struct sss_cli_mc_ctx" reinitialize-on-errors

Nalin Dahyabhai • 11 years ago

49a73ff

SDAP: free subrequest in sdap_dyndns_update_addrs_done

Lukas Slebodnik • 11 years ago

5446f2a

test_dyndns: sss_iface_addr_list_get can return more values

Lukas Slebodnik • 11 years ago

79d007f

dyndns: Fix talloc hierarchy of "struct sss_iface_addr"

Lukas Slebodnik • 11 years ago

03cfd27

TESTS: leak_check functions shouldn't be called with NULL context

Lukas Slebodnik • 11 years ago

103f2f3

test_dyndns: Use different talloc context in wrapped functions.

Lukas Slebodnik • 11 years ago

d111a01

responder-get-domains-tests: fix checking of leaks

Lukas Slebodnik • 11 years ago

5b8ed57

dyndns_test: Use right socket length of for IPv4 address.

Lukas Slebodnik • 11 years ago

0789077

Revert "IPA: try to resolve nested groups as poxix group"

Jakub Hrozek • 11 years ago

6feac54

Revert "IPA: process non-posix nested groups"

Jakub Hrozek • 11 years ago

6c7e10c

Revert "IPA: new attribute map for non-posix groups"

Jakub Hrozek • 11 years ago

d37b809

IPA: try to resolve nested groups as poxix group

Pavel Reichl • 11 years ago

1fe6776

IPA: process non-posix nested groups

Pavel Reichl • 11 years ago

4417c87

IPA: new attribute map for non-posix groups

Pavel Reichl • 11 years ago

b7afe5c

IPA: handle searches by SID in apply_subdomain_homedir

Jakub Hrozek • 11 years ago

895f045

MAN: How much time sssd spends offline

Michal Zidek • 11 years ago

ce16e21

sudo: work with correct D-Bus iterator

Pavel Březina • 11 years ago

fd7ff2b

SUDO: Use the override_space option

Jakub Hrozek • 11 years ago

3fa3163

IFP: Use the override_space option

Jakub Hrozek • 11 years ago

6bbb1da

PAM: Use the override_space option

Jakub Hrozek • 11 years ago

f9cab65

Make the space override responder-agnostic

Jakub Hrozek • 11 years ago

61cba55

Only replace space with the specified substitution

Jakub Hrozek • 11 years ago

5b4c81c

NSS: Ignore default_domain for netgroups

Jakub Hrozek • 11 years ago

484a9f2

ad initgroups: continue if resolved SID is still missing

Pavel Březina • 11 years ago

6e6c099

RPM: Restart service in %posttrans, not %post

Jakub Hrozek • 11 years ago

34e1d90

LDAP SUDO: sudo provider doesn't fetch 'EntryUSN'

Michal Šrubař • 11 years ago

a963daa

IFP: Fix lookups with fully-qualified names

Jakub Hrozek • 11 years ago

6a8ffd5

failover: set port status to not working if previous srv lookup failed

Pavel Březina • 11 years ago

8b0aeee

Exit offline mode only if server is available.

Michal Zidek • 11 years ago

f65efda

ptask: Add backoff feature to the ptask api.

Michal Zidek • 11 years ago

e552a21

ptask: Allow adding random_offset to scheduled execution time

Michal Zidek • 11 years ago

e9ca61c

sudo: replace asterisk with escape sequence in host filter

Pavel Březina • 11 years ago

552f9bc

NSS: Replace spaces with specified string in names.

Lukas Slebodnik • 11 years ago

c2859ee

UTIL: Add functions for replacing whitespaces.

Lukas Slebodnik • 11 years ago

50d2465

test_utils: Use common header file for libsss_util tests.

Lukas Slebodnik • 11 years ago

31cd021

LDAP: Remove unused option ldap_user_uuid

Lukas Slebodnik • 11 years ago

842f930

LDAP: Remove unused option ldap_group_uuid

Lukas Slebodnik • 11 years ago

6415851

LDAP: Remove unused option ldap_netgroup_uuid

Lukas Slebodnik • 11 years ago

b7ce30e

sudo: use dbus array for rules refresh

Pavel Březina • 11 years ago

1d9b37a

sss_client: Fix memory leak in nss_mc_{group,passwd}

Lukas Slebodnik • 11 years ago

423acb8

sss_client: thread safe initialisation of sss_cli_mc_ctx

Lukas Slebodnik • 11 years ago

7b8b213

sudo: fetch sudoRunAs attribute

Pavel Březina • 11 years ago

e1c8821

ad: update membership after SIDs are resolved

Pavel Březina • 11 years ago

e00a71a

ad: comment ENOENT when id mapping is disabled

Pavel Březina • 11 years ago

c123f53

SDAP: Continue resolving SID even if some fail

Pavel Reichl • 11 years ago

5001bab

LDAP: tokengroups do not work with id_provider=ldap

Pavel Reichl • 11 years ago

deb0cc8

BUILD: Add the DBus service activation

Jakub Hrozek • 11 years ago

80af7e9

TOOLS: New helper tool sss_signal

Jakub Hrozek • 11 years ago

42b0c34

MONITOR: Signal InfoPipe to reconnect on SIGUSR2

Jakub Hrozek • 11 years ago

87d3c7d

IFP: Provide a SBUS method to reconnect to sysbus

Jakub Hrozek • 11 years ago

fbc3f00

IFP: Return a specific value on failure connecting to the system bus

Jakub Hrozek • 11 years ago

3e57c78

IFP: Fix DEBUG messages

Jakub Hrozek • 11 years ago

727f4bf

BUILD: dbusintrospectdir is not used anymore

Jakub Hrozek • 11 years ago

906177a

sbus_request: fix potential NULL dereference

Pavel Březina • 11 years ago

8f2ecee

build: Switch back to DISTCHECK_CONFIGURE_FLAGS

Nikolai Kondrashov • 11 years ago

c9ca60f

Don't use macro _XOPEN_SOURCE for function strptime

Lukas Slebodnik • 11 years ago

aa5cfe7

TESTS: sss_ssh - textual public key format

Pavel Reichl • 11 years ago

7e277b0

SSH: Allow newline at the end of public key values in LDAP

Jan Cholasta • 11 years ago

f5e1bb7

Updating the version for the 1.11.7 release

Jakub Hrozek • 11 years ago

67f9ca4

Updating the translations again for the 1.11.6 release

Jakub Hrozek • 11 years ago

d5f85d9

KRB: Prevent dereference of a null pointer

Lukas Slebodnik • 11 years ago

fa9d246

MAN: Add reference to manual page sssd-sudo

Lukas Slebodnik • 11 years ago

2d9df96

Updating the translations for the 1.11.6 release

Jakub Hrozek • 11 years ago

60250bc

BUILD: Disable dbus tests when running distcheck

Jakub Hrozek • 11 years ago

ba0d168

build: Switch to AM_DISTCHECK_CONFIGURE_FLAGS

Nikolai Kondrashov • 11 years ago

5b0f20d

MAN: Add sssd-ifp to the list of translatable manual pages

Jakub Hrozek • 11 years ago

0659af7

SBUS: remove unused variables

Pavel Březina • 11 years ago

8034344

Unify usage of function gethostname

Lukas Slebodnik • 11 years ago

8269d3c

SBUS: Include config.h for enabling function in stdio.h

Lukas Slebodnik • 11 years ago

973f2f3

SBUS: Define DBUS_ERROR_INIT for old version of dbus

Lukas Slebodnik • 11 years ago

2987475

PAM: Define compatible macros for some functions.

Lukas Slebodnik • 11 years ago

c05bf19

PAM: Use fallback version of some pam macros

Lukas Slebodnik • 11 years ago

ad962c5

PAM: Fix compilation of pam_test_client with openpam

Lukas Slebodnik • 11 years ago

e2f9f66

CONFIGURE: Enhance detection of pam

Lukas Slebodnik • 11 years ago

af6ac75

MAKE: Remove PAM libraries from libsss_simple

Lukas Slebodnik • 11 years ago

5791844

PAM: Include header file security/pam_appl.h

Lukas Slebodnik • 11 years ago

0eb41f7

SDAP: Use portable constant as level in setsockopt

Lukas Slebodnik • 11 years ago

0690f32

PAM: add ignore_authinfo_unavail option

Lukas Slebodnik • 11 years ago

368f03b

LDAP: Don't use macro _XOPEN_SOURCE for extra features

Lukas Slebodnik • 11 years ago

b6d7e01

UTIL: Fix order of header files.

Lukas Slebodnik • 11 years ago

0932853

PAM: Fix problem with missing declaration.

Lukas Slebodnik • 11 years ago

1659171

PAM: macro PAM_DATA_REPLACE isn't available in openpam.

Lukas Slebodnik • 11 years ago

13e0c41

CRYPTO: Use unprefixed version of function stpncpy

Lukas Slebodnik • 11 years ago

eb774af

CONFIGURE: Remove duplicate detection of pam

Lukas Slebodnik • 11 years ago

4d2d569

resolv: Do not try to free addrinfo in case of error

Lukas Slebodnik • 11 years ago

6f895da

Remove unused parameter from ifp_user_get_groups_reply

Lukas Slebodnik • 11 years ago

f278c89

Remove unused parameter from ifp_user_get_attr_handle_reply

Lukas Slebodnik • 11 years ago

b1b6c01

SBUS: Fix warning declaration shadows a global declaration

Lukas Slebodnik • 11 years ago

8b3af7d

IFP: Add a GetGroupsList method

Jakub Hrozek • 11 years ago

64f5e4b

SYSDB: return SYSDB_NAME from sysdb_initgroups

Jakub Hrozek • 11 years ago

bd8cf98

TEST: Remove unused variable

Pavel Reichl • 11 years ago

29bd4be

IFP: Per-attribute ACL for users

Jakub Hrozek • 11 years ago

dc8e542

IFP: Add GetUserAttrs call

Jakub Hrozek • 11 years ago

6ad198a

IFP: Initialize negative cache timeout

Jakub Hrozek • 11 years ago

78512c4

IFP: use a list of allowed_uids for authentication

Jakub Hrozek • 11 years ago

2c3fa3a

IFP: Add utility functions

Jakub Hrozek • 11 years ago

f0875d1

SBUS: Refactor sbus_message_handler to retrieve caller ID

Jakub Hrozek • 11 years ago

1cd6f16

SBUS: Add an async request to retrieve the caller ID

Jakub Hrozek • 11 years ago

c5651f3

SBUS: Add SBUS_CONN_TYPE_SYSBUS

Jakub Hrozek • 11 years ago

40074db

SBUS: Split out dbus_conn_send

Jakub Hrozek • 11 years ago

18cea3a

SBUS: Add a convenience function sbus_error_new

Jakub Hrozek • 11 years ago

dfaad00

SBUS: Fix error handling condition

Jakub Hrozek • 11 years ago

0ca2e68

SBUS: several trivial style fixes

Jakub Hrozek • 11 years ago

7daf068

IFP: Close memstream handle in introspect destructor

Jakub Hrozek • 11 years ago

d37429a

SPEC: Remove duplicate sssd_ifp.

Lukas Slebodnik • 11 years ago

5467d5e

sbus request: fix error initialization

Pavel Březina • 11 years ago

9805dad

sbus_tests: fix missing invoker in initializer

Pavel Březina • 11 years ago

0385ce1

sbus_codegen_tests: Add test case type-safe handler args

Stef Walter • 11 years ago

70dd9c6

sbus: Add type-safe DBus method handlers and finish functions

Stef Walter • 11 years ago

e38c58d

SBUS: Create an sbus_method_meta instance for Introspection

Jakub Hrozek • 11 years ago

8ded3b5

SBUS: Generate introspection from the interface meta structure

Jakub Hrozek • 11 years ago

e00e430

TEST: Add test for expand homedir

Lukas Slebodnik • 11 years ago

9cd08bf

NSS: Add option to expand homedir template format

Lukas Slebodnik • 11 years ago

00fb342

NSS: Refactor expand_homedir_template

Lukas Slebodnik • 11 years ago

f9b90ac

refactor calls of sss_parse_name

Pavel Reichl • 11 years ago

4deef23

UTIL: Add function sss_parse_name_const

Lukas Slebodnik • 11 years ago

99736ad

Add a unit test for sss_parse_name_for_domains

Jakub Hrozek • 11 years ago

ac10fd4

AD: Initialize user_map_cnt in server mode

Jakub Hrozek • 11 years ago

507c00d

Make LDAP extra attributes available to IPA and AD

Sumit Bose • 11 years ago

b14bb42

LDAP: Make it possible to extend an attribute map

Jakub Hrozek • 11 years ago

2969084

LDAP: Fix off-by-one bug in sdap_copy_opts

Jakub Hrozek • 11 years ago

7f42b25

TEST: Link ipa_ldap_opt test with openldap libs

Lukas Slebodnik • 11 years ago

a656aa3

RESPONDERS: Add a new request sss_parse_inp_send

Jakub Hrozek • 11 years ago

4f3e9da

TESTS: Split a separate common_mock_resp_dp module

Jakub Hrozek • 11 years ago

230eff7

TESTS: Create a default sss_names_ctx in create_dom_test_ctx

Jakub Hrozek • 11 years ago

71779f6

tests: add confdb_path to sss_test_ctx

Pavel Březina • 11 years ago

080edc7

IFP: do not create client socket

Pavel Březina • 11 years ago

c4a85f6

IFP: Connect to the system bus

Jakub Hrozek • 11 years ago

413c80b

IFP: Re-add the InfoPipe server

Jakub Hrozek • 11 years ago

fd6ab0a

IFP: Fix a typo in the Makefile

Jakub Hrozek • 11 years ago

c70d6b6

UTIL: Move sss_parse_name_for_domains declaration to util.h

Jakub Hrozek • 11 years ago

16203f9

Remove duplicate declaration

Jakub Hrozek • 11 years ago

def8984

TEST: Some macros aren't defined in older version of check.

Lukas Slebodnik • 11 years ago

b5fdc61

sbus: Add the sbus_request_parse_or_finish() method

Stef Walter • 11 years ago

4625928

sbus_tests: Add some testing of dispatch and handler code

Stef Walter • 11 years ago

c672fc5

sbus: Make sbus_new_server() work for non-priveleged processes

Stef Walter • 11 years ago

1f61185

sbus: Refactor how we export DBus interfaces

Stef Walter • 11 years ago

5312bab

sbus: Add struct sbus_request to represent a DBus invocation

Stef Walter • 11 years ago

0a001b4

SDAP: Add option to disable use of Token-Groups

Pavel Reichl • 11 years ago

4221bd7

SDAP: Make nesting_level = 0 to ignore nested groups

Pavel Reichl • 11 years ago

98052f6

MAN: Detailed ldap_group_nesting_level option

Pavel Reichl • 11 years ago

e97a7f5

sbus: Use constants to make dbus calls

Stef Walter • 11 years ago

f07527b

sbus: Generate constants from interface definitions

Stef Walter • 11 years ago

cfa913a

sbus: Rework sbus to use interface metadata and vtables

Stef Walter • 11 years ago

a76d7e1

nss: Stop using one DBus interface with totally different methods

Stef Walter • 11 years ago

1214ced

sbus: Add sbus_vtable and update codegen to support it

Stef Walter • 11 years ago

9355f5e

sbus: Add meta data structures and code generator

Stef Walter • 11 years ago

8ddfc4b

LDAP: fix - find primary group by gid

Pavel Reichl • 11 years ago

356b2dc

man: clarify refresh_expired_interval

Pavel Březina • 11 years ago

ca4514c

man: Substitute entity values for entity references

Lukas Slebodnik • 11 years ago

87abe5f

sss_autofs: Do not try to free empty autofs context

Lukas Slebodnik • 11 years ago

03d7e32

sss_autofs: Check return value of autofs make request

Lukas Slebodnik • 11 years ago

5fc8548

ipa subdomains provider: make sure search by SID works for homedir

Alexander Bokovoy • 11 years ago

899b9d9

BUILD: Explicitly link libsss_ad.so with sasl libs

Lukas Slebodnik • 11 years ago

43975ea

SYSDB: augmented logging when adding new group

Pavel Reichl • 11 years ago

07e2426

BUILD: Make samba4 libraries optional

Lukas Slebodnik • 11 years ago

d1da654

AD: Do not remove non-root domains when looking up root domain

Jakub Hrozek • 11 years ago

1f5eca3

LDAP: Check the LDAP handle before using it

Jakub Hrozek • 11 years ago

7ab7fd0

MONITOR: Fix start up with empty standard input

Lukas Slebodnik • 11 years ago

3e6e4b3

UTIL: Use constant instead of value for stdin.

Lukas Slebodnik • 11 years ago

c6cfd06

Remove DEBUG macro support for old debug levels

Nikolai Kondrashov • 11 years ago

4cb9844

Update debug level in sysdb_check_upgrade_02

Nikolai Kondrashov • 11 years ago

a59e6f8

Update debug levels in sss_semanage_error_callback

Nikolai Kondrashov • 11 years ago

6e40f8e

Update DEBUG* invocations to use new levels

Nikolai Kondrashov • 11 years ago

46c28ba

Fixup DEBUG macro invocations update

Nikolai Kondrashov • 11 years ago

dad68b3

Make DEBUG macro invocations variadic

Nikolai Kondrashov • 11 years ago

b0d759c

Make DEBUG macro definition variadic

Nikolai Kondrashov • 11 years ago

b9afd88

Cleanup debug_fn

Nikolai Kondrashov • 11 years ago

38e51a2

Remove extra flushing from debug message output

Nikolai Kondrashov • 11 years ago

7f3b9e0

Move DEBUG macro body to debug_fn

Nikolai Kondrashov • 11 years ago

dab43bc

Add cscope inverted index files to .gitignore

Nikolai Kondrashov • 11 years ago

0a32467

AD Provider: bugfix use-after-free

Pavel Reichl • 11 years ago

a392c08

AD Provider: bug-fix uninitialized variable

Pavel Reichl • 11 years ago

7344bde

BUILD: Link libsss_krb5_common.so to libkeyutils.so

Benjamin Franzke • 11 years ago

917ff0a

SDAP: augmented logging for group saving

Pavel Reichl • 11 years ago

2ba0b0b

AUTOMAKE: Do not include generated files into tarball

Lukas Slebodnik • 11 years ago

4795d71

Updating the version for the 1.11.6 development

Jakub Hrozek • 11 years ago

a24e28c

Updating the translations for the 1.11.5.1 release

Jakub Hrozek • 11 years ago

fc15ae7

Setting the version to 1.11.5.1 for the release

Jakub Hrozek • 11 years ago

570ceae

AUTOMAKE: Do not include makefile generated files into tarball

Lukas Slebodnik • 11 years ago

baf3646

AD Provider: Fix crash looking up forest on Samba 4

Stephen Gallagher • 11 years ago

4140552

Updating the version for the 1.11.6 release

Jakub Hrozek • 11 years ago

c86587c

Updating the translations for the 1.11.5 release

Jakub Hrozek • 11 years ago

4f7af9a

Makefile: Use alternative method to replace *bindir

Lukas Slebodnik • 11 years ago

1f4df57

Possible null dereference in SELinux code

Michal Zidek • 11 years ago

bda38dd

TESTS: Link libsss_test_common with tevent

Lukas Slebodnik • 11 years ago

826ebfc

Makefile: Add missing library to the dp_opt_tests

Lukas Slebodnik • 11 years ago

77f380a

IPA: Fix SELinux mapping order memory hierarchy

Jakub Hrozek • 11 years ago

ac93a2d

AD: connect to forest root when downloading the list of subdomains

Jakub Hrozek • 11 years ago

c410cb3

IPA: Use function sysdb_attrs_get_el in safe way

Lukas Slebodnik • 11 years ago

a73c892

KRB5: Do not attempt to get a TGT after a password change using OTP

Jakub Hrozek • 11 years ago

1c1693e

krb5-child: add revert_changepw_options()

Sumit Bose • 11 years ago

cf13b90

krb5_client: rename krb5_set_canonicalize() to set_canonicalize_option()

Sumit Bose • 11 years ago

5744811

krb5-child: extract lifetime settings into set_lifetime_options()

Sumit Bose • 11 years ago

8f692f2

krb5_child: remove unused option lifetime_str from k5c_setup_fast()

Sumit Bose • 11 years ago

aebb22f

SYSV: Do not call functions success and fail itself

Lukas Slebodnik • 11 years ago

d4ebaeb

Use KRB5_CFLAGS where appropriate

Alexey Shabalin • 11 years ago

a90c31f

PAM: add ignore_unknown_user option

Pete Fritchman • 11 years ago

cb7e16f

providers: Fix types passed to dbus varargs functions

Stef Walter • 11 years ago

e657a39

IPA: Write SELinux usernames in the right case

Jakub Hrozek • 11 years ago

0a7b705

AD: Continue if sssd failes to check extra members

Lukas Slebodnik • 11 years ago

5376ee9

IPA/KRB5: handle KRB5_PROG_ETYPE_NOSUPP during IPA password migration

Sumit Bose • 11 years ago

bd4a4ee

IPA: Use the correct domain when processing SELinux rules

Jakub Hrozek • 11 years ago

809e531

MAN: Clarify the GC support a bit

Jakub Hrozek • 11 years ago

6fc597a

AD: Only connect to GC for subdomain users

Jakub Hrozek • 11 years ago

fe2bbd6

IPA: Use GC for AD initgroup requests

Sumit Bose • 11 years ago

43a6235

Fix krb5 changepw when FAST-only preauth methods are used (like OTP)

Nathaniel McCallum • 11 years ago

bd7fdca

IPA: Do not save intermediate data to sysdb

Jakub Hrozek • 11 years ago

5f90450

ipa-server-mode: use lower-case user name for home dir

Sumit Bose • 11 years ago

dd89da0

SUDO: AD provider

Sumit Bose • 11 years ago

77cb1c5

config API: add missing subdomain target to AD provider test

Sumit Bose • 11 years ago

056402b

libsss_idmap: bump version-info

Sumit Bose • 11 years ago

c179960

DOC: Fix names of arguments in doxygen comments

Lukas Slebodnik • 11 years ago

6409a87

MAN: Clarify that changing ID mapping options might require purging the cache

Jakub Hrozek • 11 years ago

0aa145f

MAN: Clarify the ldap_access_filter option further

Jakub Hrozek • 11 years ago

1e45bf2

DP: Provide separate dp_copy_defaults function

Jakub Hrozek • 11 years ago

802220c

OPTS: Allow using defaults for blobs

Jakub Hrozek • 11 years ago

d07cb60

IPA: check ranges for collisions before saving them

Sumit Bose • 11 years ago

c916093

IPA: refactor idmap code and add test

Sumit Bose • 11 years ago

751a77c

IDMAP: add sss_idmap_check_collision(_ex)

Sumit Bose • 11 years ago

b71e463

UTIL: Sanitize whitespaces.

Lukas Slebodnik • 11 years ago

6d2f47c

LDAP: Setup periodic task only once.

Lukas Slebodnik • 11 years ago

b52c7b1

IPA: Don't fail if apply_subdomain_homedir returns ENOENT

Jakub Hrozek • 11 years ago

9d4a3d9

SPEC: Use systemd on available platforms

Lukas Slebodnik • 11 years ago

50c85b3

IPA: Don't call tevent_req_post outside _send

Jakub Hrozek • 11 years ago

7f3f413

Updating the version for the 1.11.5 release

Jakub Hrozek • 11 years ago

d0f9a82

Updating translations for the 1.11.4 release

Jakub Hrozek • 11 years ago

c313898

MAN: Clarify the new krb5_use_fast IPA default

Jakub Hrozek • 11 years ago

e9139e8

IPA: default krb5_fast_principal to host/$client@$realm

Pavel Březina • 11 years ago

e832462

IPA: Default to krb5_use_fast=try

Jakub Hrozek • 11 years ago

f22b44f

SSS_CACHE: Reset the initgroups attribute when resetting users

Jakub Hrozek • 11 years ago

e2191e5

LDAP: Handle errors from sdap_id_op properly in enum code

Jakub Hrozek • 11 years ago

afce835

AD: Remove dead code

Jakub Hrozek • 11 years ago

945003a

AD: Only download domains that are set to enumerate

Jakub Hrozek • 11 years ago

018e87a

LDAP: Detect the presence of POSIX attributes

Jakub Hrozek • 11 years ago

86c2e80

utils: handling NULL params in sss_parse_name

Pavel Reichl • 11 years ago

fba393b

MAN: update of subdomain_homedir usage

Pavel Reichl • 11 years ago

653e517

AD: support for subdomain_homedir

Pavel Reichl • 11 years ago

b85f4ea

Revert "NSS: add support for subdomain_homedir"

Pavel Reichl • 11 years ago

007c086

MONITOR: Incorrect permissions on sssd.conf

Pavel Reichl • 11 years ago

a54c7b1

LDAP: require attribute groupType for AD groups

Lukas Slebodnik • 11 years ago

cb0f731

LDAP: store group if subdomain cannot be found by sid

Lukas Slebodnik • 11 years ago

5a3c166

krb5: fix warning may be used uninitialized

Lukas Slebodnik • 11 years ago

701bf3c

dlopen-tests: Check the result of asprintf

Benjamin Franzke • 11 years ago

317d423

MAN: clarify which shell option takes precedence

Jakub Hrozek • 11 years ago

294547f

AD: Establish cross-domain memberships after enumeration finishes

Jakub Hrozek • 11 years ago

580221e

DB: Add sss_ldb_el_to_string_list

Jakub Hrozek • 11 years ago

407a7e0

LDAP: Don't clobber original_member during enumeration

Jakub Hrozek • 11 years ago

ff4ca56

AD: Enumerate users from GC, other entities from LDAP

Jakub Hrozek • 11 years ago

8c12702

LDAP: Add enum request with custom connection

Jakub Hrozek • 11 years ago

c5ae054

LDAP: Pass a private context to enumeration ptask instead of hardcoded connection

Jakub Hrozek • 11 years ago

e0502a6

AD: Store info on whether a subdomain is set to enumerate

Jakub Hrozek • 11 years ago

02abb93

AD: Don't mark domain as enumerated twice

Jakub Hrozek • 11 years ago

0dcfd63

sudo: memset tm when converting time attributes

Pavel Březina • 11 years ago

1cab8aa

AD SRV: use right domain name for CLDAP ping

Sumit Bose • 11 years ago

0eff997

LDAP: Don't abort request if no id mapping domain matches

Jakub Hrozek • 11 years ago

3a091bd

krb5: hint to increase krb5_auth_timeout

Pavel Reichl • 11 years ago

863b086

sdap_idamp: Fall back to another method if sid is wrong

Lukas Slebodnik • 11 years ago

0a33b13

LDAP: update id mapping detection for ldap provider

Lukas Slebodnik • 11 years ago

507c0d9

LDAP: Don't fail if subdomain cannot be found by sid

Lukas Slebodnik • 11 years ago

2e5645a

LDAP: Fix error check

Jakub Hrozek • 11 years ago

c3c87d6

MAN: Fix a typo

Jakub Hrozek • 11 years ago

94b126f

AD: Don't fail the request if ad_account_can_shortcut fails

Jakub Hrozek • 11 years ago

76b51d8

AD: Return right error code from netlogon_get_flat_name

Lukas Slebodnik • 11 years ago

99214d0

NSS: add support for subdomain_homedir

Pavel Reichl • 11 years ago

f2e7b69

simple access: refresh master domain info

Pavel Reichl • 11 years ago

e493c90

simple access: match objects using flat name

Pavel Reichl • 11 years ago

bd95940

NSS: Use plain user name when expanding homedir

Jakub Hrozek • 11 years ago

654fa15

UTIL: Inherit parent domain's default_shell

Jakub Hrozek • 11 years ago

156bbc9

tests: Remove tests that check creating public directories

Jakub Hrozek • 11 years ago

0ce8120

LDAP: Add a new error code for malformed access control filter

Jakub Hrozek • 11 years ago

cb85329

responder: Set forest attribute in AD domains

Pavel Reichl • 11 years ago

98869bb

FAST: when parsing krb5_child response, make sure to not miss OTP message if it was last one

Alexander Bokovoy • 11 years ago

153efc7

LDAP: Fix typo and use the right attribute map

Jakub Hrozek • 11 years ago

1ff814c

IPA: fix for recent AD group membership changes

Sumit Bose • 11 years ago

0970f33

Updating the version for the 1.11.4 release

Jakub Hrozek • 11 years ago

159d8cf

Updating translations for the 1.11.3 release

Jakub Hrozek • 11 years ago

fea9a74

Bump sss_idmap version to 3:0:3

Pavel Březina • 11 years ago

faaa498

AD: Enable fallback to LDAP of trusted domain

Jakub Hrozek • 11 years ago

9d0d272

AD: Add a new option to turn off GC lookups

Jakub Hrozek • 11 years ago

d26b5b2

AD: Add a utility function to create list of connections

Jakub Hrozek • 11 years ago

97d3ef2

AD: cross-domain membership fix

Sumit Bose • 11 years ago

4cd1cb2

AD: filter domain local groups for trusted/sub domains

Sumit Bose • 11 years ago

b615184

Add sysdb_attrs_get_int32_t

Sumit Bose • 11 years ago

4c106dc

Add new option ldap_group_type

Sumit Bose • 11 years ago

3a25e63

Use lower-case name for case-insensitive searches

Sumit Bose • 11 years ago

cbbbde7

Use sysdb_attrs_add_lc_name_alias to add case-insensitive alias

Sumit Bose • 11 years ago

2e96a84

Add sysdb_attrs_add_lc_name_alias

Sumit Bose • 11 years ago

9af7428

sss_cache: fix case-sensitivity issue

Sumit Bose • 11 years ago

de9d48d

sss_cache: initialize names member of sss_domain_info

Sumit Bose • 11 years ago

66dfef9

IPA: Call ipa_ad_subdom_refresh when server mode is initialized

Jakub Hrozek • 11 years ago

2f127bc

IPA: Refresh subdomain data structures on startup

Jakub Hrozek • 11 years ago

495ae80

AD: Refresh subdomain data structures on startup

Jakub Hrozek • 11 years ago

6df9372

ad: use tokengroups even when id mapping is disabled

Pavel Březina • 11 years ago

214481d

ad: refactor tokengroups initgroups

Pavel Březina • 11 years ago

df82d71

AD: use LDAP for group lookups

Sumit Bose • 12 years ago

cab9dae

AUTOTOOLS: krb5 1.12 is also supported krb5 libs

Lukas Slebodnik • 12 years ago

2b55e39

NSS: Fix memory leak in sss_setnetgrent

Lukas Slebodnik • 12 years ago

8696135

SUBDOMAINS: Reuse cached results if DP is offline

Jakub Hrozek • 12 years ago

3405f6c

failover: check dns_domain if primary servers lookup failed

Pavel Březina • 12 years ago

11193fe

sysv/gentoo: Send debug output to a file instead of stderr

Markos Chandras • 12 years ago

ad3d520

sysv/gentoo: Use xdm if possible

Markos Chandras • 12 years ago

14302af

SSSD: Unit test - sss_ldap_dn_in_search_bases

Pavel Reichl • 12 years ago

d0f9bd3

SSSD: Improved domain detection

Pavel Reichl • 12 years ago

7417b20

SYSDB: Sanitize filter before removing ghost attrs

Lukas Slebodnik • 12 years ago

956be66

SYSDB: Sanitize filter before sysdb_search_groups

Lukas Slebodnik • 12 years ago

fec7eab

LDAP: Initialize user count for AD matching rule

Jakub Hrozek • 12 years ago

c55ba11

AD: Fix a typo in the man page

Jakub Hrozek • 12 years ago

33232c1

monitor: Specific error message for missing sssd.conf

Pavel Reichl • 12 years ago

867124e

pac: fix potential memory leaks

Pavel Březina • 12 years ago

82e97a9

pac: fix double free

Pavel Březina • 12 years ago

e4a1a7d

LDAP: Search for original DN during auth if it's missing

Jakub Hrozek • 12 years ago

75d5eb6

LDAP: Split out a request to search for a user w/o saving

Jakub Hrozek • 12 years ago

80445dc

do not use default_domain_suffix with autofs

Aron Parsons • 12 years ago

f0f1388

SYSDB: Skip malformed netgroup attribute.

Lukas Slebodnik • 12 years ago

1914ad0

LDAP: Prevent from using uninitialized sdap_options

Lukas Slebodnik • 12 years ago

6f9b5e7

build: fix ordering of linker flags

Jan Engelhardt • 12 years ago

cc6c85c

Initialize sid_str to NULL to avoid freeing random data

Jakub Hrozek • 12 years ago

7abc9b5

NSS: Set packet length for initgroups

Lukas Slebodnik • 12 years ago

4f9f570

free idmapped binary SIDs correctly

Pavel Březina • 12 years ago

3e94cea

free idmapped smb SIDs correctly

Pavel Březina • 12 years ago

d7b7f03

free idmapped dom SIDs correctly

Pavel Březina • 12 years ago

fa23b0a

free idmapped SIDs correctly

Pavel Březina • 12 years ago

58f0025

idmap: add API to free allocated SIDs

Pavel Březina • 12 years ago

aa0e78c

Updating the version for the 1.11.3 release

Jakub Hrozek • 12 years ago

bd3a633

Updating translation for the 1.11.2 release

Jakub Hrozek • 12 years ago

0b99c5e

AD: Fix ad_access_filter parsing with empty filter

Jakub Hrozek • 12 years ago

0fdc725

NSS: Fix parenthesis

Jakub Hrozek • 12 years ago

8b969e9

LDAP: Check all search bases during nested group processing

Jakub Hrozek • 12 years ago

90fffc3

nested groups: pick correct domain for cache lookups

Pavel Březina • 12 years ago

fc2dca9

sdap_fill_memberships: pick correct domain for every member

Pavel Březina • 12 years ago

d1fd726

ghosts: pick correct domain for every member

Pavel Březina • 12 years ago

3d82882

sdap: add sdap_domain_get_by_dn()

Pavel Březina • 12 years ago

4b868a1

sdap: store base dn in sdap_domain

Pavel Březina • 12 years ago

a2c1db6

ad: shortcut if possible during get object by ID or SID

Pavel Březina • 12 years ago

7cf785f

free sid obtained from sss_idmap_unix_to_sid()

Pavel Březina • 12 years ago

95b7dfd

be_spy_create: free be_req and not the long living data

Sumit Bose • 12 years ago

10b7a19

LDAP: Return correct error code

Lukas Slebodnik • 12 years ago

ea8baa5

Makefile: Remove unused variable TEST_MOCK_OBJ

Lukas Slebodnik • 12 years ago

c4217d5

Makefile: Add missing libraries

Lukas Slebodnik • 12 years ago

0efba0f

BUILD: Update bashrc macros

Stephen Gallagher • 12 years ago

fd61e3e

MAN: Document that krb5 directories can only be created as private

Jakub Hrozek • 12 years ago

dd9bc10

NSS: Fix service enumeration

Jakub Hrozek • 12 years ago

7812ef4

ad_subdom_store: check ID mapping of the domain not of the parent

Sumit Bose • 12 years ago

20d4e81

KRB5: Handle ERR_CHPASS_FAILED

Jakub Hrozek • 12 years ago

8c68952

NSS: Print FQDN for groups with mixed domain membership

Jakub Hrozek • 12 years ago

5292757

TEST: Test getgrnam with emphasis on members

Jakub Hrozek • 12 years ago

41af9b1

sdap_save_group: try to determine domain by SID

Pavel Březina • 12 years ago

58569fe

sdap_save_user: try to determine domain by SID

Pavel Březina • 12 years ago

09a4742

ad: destroy ptasks when subdomain is removed

Pavel Březina • 12 years ago

d71b1a2

ipa: destroy cleanup task when subdomain is removed

Pavel Březina • 12 years ago

8d368a6

dp: convert cleanup task to be_ptask

Pavel Březina • 12 years ago

3acf081

be_ptask: add be_ptask_create_sync()

Pavel Březina • 12 years ago

bc0d2a4

dp: free sdap domain if subdomain is removed

Pavel Březina • 12 years ago

e1ac589

dp: add function to terminate request of specific domain

Pavel Březina • 12 years ago

6f31312

dp: set request domain

Pavel Březina • 12 years ago

f6dee70

utils: add ERR_DOMAIN_NOT_FOUND error code

Pavel Březina • 12 years ago

ed01e2d

dp: store list of ongoing requests

Pavel Březina • 12 years ago

3b37e5e

dp: make subdomains refresh interval configurable

Pavel Březina • 12 years ago

4bee540

AD: Add extended access filter

Jakub Hrozek • 12 years ago

5e9833a

AD: Search GC by default during access control, fall back to LDAP

Jakub Hrozek • 12 years ago

2cbf205

AD: Use the ad_access_filter if it's set

Jakub Hrozek • 12 years ago

9dd62f0

AD: Add a new option ad_access_filter

Jakub Hrozek • 12 years ago

e37cbdd

LDAP: Parse FQDN into name/domain for subdomain users

Jakub Hrozek • 12 years ago

88ee068

LDAP: Amend sdap_access_check to allow any connection

Jakub Hrozek • 12 years ago

0b23970

tests: Use right format string for type size_t

Lukas Slebodnik • 12 years ago

d32961c

LDAP: Delete entry by SID if not found

Jakub Hrozek • 12 years ago

2dae2ae

SYSDB: Add sysdb_delete_by_sid

Jakub Hrozek • 12 years ago

0e12686

AD: fall back to LDAP if GC is not available.

Lukas Slebodnik • 12 years ago

7534f14

AD: Prefer GC port from SRV record

Lukas Slebodnik • 12 years ago

85297c5

IPA: add trusted domains with missing idrange

Sumit Bose • 12 years ago

726d644

sdap_idmap_domain_has_algorithmic_mapping: add domain name argument

Sumit Bose • 12 years ago

14b2def

idmap: add sss_idmap_domain_by_name_has_algorithmic_mapping()

Sumit Bose • 12 years ago

a5c7569

find_subdomain_by_sid: skip domains with missing domain_id

Sumit Bose • 12 years ago

a8e5bd2

subdomains: first destroy ptask then remove sdom

Pavel Březina • 12 years ago

528b513

Inherit ID limits of parent domains if set

Jakub Hrozek • 12 years ago

8a5b072

sdap_get_generic_ext_send: check if we a re still connected

Sumit Bose • 12 years ago

212fca4

IPA: add callback to reset subdomain timeouts

Sumit Bose • 12 years ago

8242211

Add unconditional online callbacks

Sumit Bose • 12 years ago

7c5c79e

krb5: Use right function to free data.

Lukas Slebodnik • 12 years ago

278cc65

PROXY: Fix memory hierarchy when enumerating services

Jakub Hrozek • 12 years ago

92d67a0

nss: wait for initial subdomains request to finish

Pavel Březina • 12 years ago

9885fed

krb5: Remove warning dereference of a null pointer

Lukas Slebodnik • 12 years ago

7ffb1a2

sdap_idmap: properly handle ranges for external mappings

Sumit Bose • 12 years ago

348faaa

sdap_idmap: add sdap_idmap_get_configured_external_range()

Sumit Bose • 12 years ago

ce8fb32

idmap: allow ranges with external mapping to overlap

Sumit Bose • 12 years ago

7e24fd6

idmap: fix a memory leak if a collision is detected

Sumit Bose • 12 years ago

fcfc041

idmap: add internal function to free a domain struct

Sumit Bose • 12 years ago

810e8df

KRB5: Return PAM_ACCT_EXPIRED when logging in as expired AD user

Jakub Hrozek • 12 years ago

e30fbb8

IPA server mode: properly initialize ext_groups

Sumit Bose • 12 years ago

3f422ba

LDAP: Set default value for dyndns update to false

Lukas Slebodnik • 12 years ago

a70bfa7

INI: Disable line-wrapping functionality

Jakub Hrozek • 12 years ago

34cd785

LDAP: handle SID requests if noexist_delete is set

Sumit Bose • 12 years ago

9f1883a

MAN: Reflow debug_levels.xml

Stephen Gallagher • 12 years ago

968928f

MAN: Clarify debug level documentation

Stephen Gallagher • 12 years ago

24f62f9

krb5: Fix unit tests

Jakub Hrozek • 12 years ago

a8d269b

krb5: Remove ability to create public directories

Simo Sorce • 12 years ago

9d45ab1

AD: properly intitialize GC from ad_server option

Sumit Bose • 12 years ago

4e34464

SYSDB: Fix incorrect DEBUG message

Stephen Gallagher • 12 years ago

9cd1cc7

sudo: improve time restrictions debug messages

Pavel Březina • 12 years ago

df30563

sudo: allow specifying only one time restriction

Pavel Březina • 12 years ago

9f3e9e9

Updating the version for the 1.11.2 release

Jakub Hrozek • 12 years ago

3aaf74d

Updating the translations for the 1.11.1 release

Jakub Hrozek • 12 years ago

9727162

MAN: Document that POSIX attributes must be replicated to GC

Jakub Hrozek • 12 years ago

4b96f0c

AD: talk to GC first even for local domain objects

Jakub Hrozek • 12 years ago

2a413fb

LDAP: Allow searching subdomain during RFC2307bis initgroups

Jakub Hrozek • 12 years ago

7830aea

LDAP: Require ID numbers when ID mapping is off

Jakub Hrozek • 12 years ago

85a5643

KRB5: Use the correct domain when authenticating with cached password

Jakub Hrozek • 12 years ago

3725fc8

KRB5: Return ERR_NETWORK_IO when trusted AD server can't be resolved

Jakub Hrozek • 12 years ago

3ebad26

Do not return DP_ERR_FATAL in case of success

Sumit Bose • 12 years ago

2ad3336

ipa_server_mode: write capaths to krb5 include file

Sumit Bose • 12 years ago

0ee14e8

IPA: store forest name for forest member domains

Sumit Bose • 12 years ago

a091e5b

IPA: Ignore dns_discovery_domain in server mode

Jakub Hrozek • 12 years ago

419cbf2

ad: store group in correct tree on initgroups via tokenGroups

Pavel Březina • 12 years ago

27a2608

sysdb: sysdb_update_members can take either name or dn

Pavel Březina • 12 years ago

15ef8f1

sysdb: get_sysdb_grouplist() can return either names or dn

Pavel Březina • 12 years ago

98cbf23

util: add get_domains_head()

Pavel Březina • 12 years ago

0784d1b

KRB5: Fix bad comparison

Jakub Hrozek • 12 years ago

b22b7fe

krb5: Be more lenient on failures for old ccache

Simo Sorce • 12 years ago

b5020bc

NSS: Failure to store entry negative cache should not be fatal

Jakub Hrozek • 12 years ago

a0b107d

NSS: Set UID and GID to negative cache after searching all domains

Jakub Hrozek • 12 years ago

20b158b

man: server side password policies always takes precedence

Pavel Březina • 12 years ago

539fdce

Convert IN_MULTICAST parameter to host order

Jakub Hrozek • 12 years ago

a9b2c8f

Check slot validity before MC_SLOT_TO_PTR.

Michal Zidek • 12 years ago

f1dba8e

krb5: do not expand enterprise principals is offline

Sumit Bose • 12 years ago

3be9a74

krb5: save canonical upn to sysdb

Sumit Bose • 12 years ago

6a9ef2c

LDAP: Use primary cn to search netgroup

Lukas Slebodnik • 12 years ago

9b4fccf

AD: Failure to get flat name is not fatal

Jakub Hrozek • 12 years ago

e5f1c41

sdap_domain_add: remove too strict consistency check

Sumit Bose • 12 years ago

1a874ba

man: improve sssd-sudo manual page

Pavel Březina • 12 years ago

5ba03a1

AD: Download master domain info when enumerating

Jakub Hrozek • 12 years ago

86809d5

LDAP: sdap_id_setup_tasks accepts a custom enum request

Jakub Hrozek • 12 years ago

55403f5

AD: async request to retrieve master domain info

Jakub Hrozek • 12 years ago

287e03a

KRB5: Call umask before mkstemp in the krb5 child code

Jakub Hrozek • 12 years ago

fd0ef16

simple provider: obey case sensitivity for subdomain users and groups

Pavel Březina • 12 years ago

bc37d07

simple access test: initialize be_ctx for all tests

Pavel Březina • 12 years ago

8673162

simple provider: support subdomain groups

Pavel Březina • 12 years ago

18b14d1

util: add find_subdomain_by_object_name()

Pavel Březina • 12 years ago

73cb76c

util: add find_subdomain_by_sid()

Pavel Březina • 12 years ago

1110ac9

simple provider: support subdomain users

Pavel Březina • 12 years ago

c4a1a67

simple access tests: fix typos

Pavel Březina • 12 years ago

27c0d8c

util: add sss_idmap_talloc[_free]

Pavel Březina • 12 years ago

786ccf0

man sssd: Add note about SSS_NSS_USE_MEMCACHE

Michal Zidek • 12 years ago

3c999b2

Rename _SSS_MC_SPECIAL

Michal Zidek • 12 years ago

bef7e40

miztake / SSSD / sssd

Commits 4880

miztake / SSSD / sssd

Source Code

Commits 4880