dea636af4d1902a081ee891f1b19ee2f8729d759 |
|
20-Jun-2016 |
Pavel Březina <pbrezina@redhat.com> |
DP: Switch to new interface
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> |
6dff95bdfe437afc0b62b5270d0d84140981c786 |
|
24-Mar-2015 |
Jakub Hrozek <jhrozek@redhat.com> |
IPA: Remove the ipa_hbac_treat_deny_as option
https://fedorahosted.org/sssd/ticket/2603
Since deny rules are no longer supported on the server, the client
should no longer support them either. Remove the option.
Reviewed-by: Pavel Březina <pbrezina@redhat.com> |
ffbd3f324558fe7e04d6007761391889800baa95 |
|
21-Jan-2013 |
Simo Sorce <simo@redhat.com> |
Move hbac_ctx_is_offline() |
1f5965110f3f4e1a8d35cf1e308b156e912c8639 |
|
21-Jan-2013 |
Simo Sorce <simo@redhat.com> |
Remove hbac_ctx_sdap_id_[ctx|op]() |
051491353666d0be95316dc62a1e7f280b4bad57 |
|
21-Jan-2013 |
Simo Sorce <simo@redhat.com> |
Remove hbac_ctx_ev() |
f67c42ad2b6b23bda8232d3adb51ed75b9f30f38 |
|
21-Jan-2013 |
Simo Sorce <simo@redhat.com> |
Remove hbac_ctx_be() |
b860f8b6b6b03982c80268e9f6fd35f6455b6b37 |
|
21-Jan-2013 |
Simo Sorce <simo@redhat.com> |
Remove hbac_ctx_sysdb() |
28c0e7ebc857bf488bbc043c9574de6abc1efea7 |
|
21-Jan-2013 |
Simo Sorce <simo@redhat.com> |
Remove sysdb argument from hbac_get_cached_rules() |
24b715f096613d18f182cf0fff537e1fc79647fa |
|
21-Jan-2013 |
Simo Sorce <simo@redhat.com> |
Remove sysdb as a be request structure member
The sysdb context is already available through the 'domain' context. |
770896b194b7b66b09c2a30545b4d091fd86b1f4 |
|
15-Jan-2013 |
Simo Sorce <simo@redhat.com> |
Add domain argument to sysdb_search_custom()
Also changes sysdb_search_custom_by_name() |
1390b5db218b0ecf0a806ab206bbda4d485658fb |
|
31-Jul-2012 |
Jan Zeleny <jzeleny@redhat.com> |
Modify hbac_get_cached_rules() so it can be used outside of HBAC code |
84c5d214242c3846a1b4c8f80e1935e77fe1c5c7 |
|
24-Apr-2012 |
Jan Zeleny <jzeleny@redhat.com> |
Utilize sysdb context within be_req in HBAC |
d10350e1854cd2156567f058f5a76041994e7f2b |
|
09-Mar-2012 |
Stephen Gallagher <sgallagh@redhat.com> |
IPA: Check nsAccountLock during PAM_ACCT_MGMT
https://fedorahosted.org/sssd/ticket/1227 |
fdab7bbf8933351f6254438c30ff361cd748b15a |
|
24-Feb-2012 |
Jan Zeleny <jzeleny@redhat.com> |
IPA hosts refactoring |
16dff70ac66222e3b457790443cb283b1486e59e |
|
06-Feb-2012 |
Jan Zeleny <jzeleny@redhat.com> |
Delete unused structure in IPA access code |
ad07ed37b6b51ef134d4524edaf2259e19ac984f |
|
06-Feb-2012 |
Jan Zeleny <jzeleny@redhat.com> |
Separate the host-retrieval code from IPA HBAC to common IPA code |
71ad247500b417836a1a2edec257a4433a7c415f |
|
06-Feb-2012 |
Jan Zeleny <jzeleny@redhat.com> |
Implemented support for multiple search bases in HBAC rules and services |
c935271de3b99d35112e0faf854cbfa9dfaa104a |
|
14-Jan-2012 |
Jan Zeleny <jzeleny@redhat.com> |
Support multiple search bases in HBAC |
1360b4f4d6e948023daeda8787f575e7f8117444 |
|
08-Jul-2011 |
Stephen Gallagher <sgallagh@redhat.com> |
Add ipa_hbac_refresh option
This option describes the time between refreshes of the HBAC rules
on the IPA server. |
32a5516cc2822cf6ad9950278e3c9701a9389bb4 |
|
08-Jul-2011 |
Stephen Gallagher <sgallagh@redhat.com> |
Add new HBAC lookup and evaluation routines |
90890b6f4ee75194db0e6dc9c99a8d21f34dd8be |
|
08-Jul-2011 |
Stephen Gallagher <sgallagh@redhat.com> |
Remove old HBAC implementation |
56789cfa13f85071f5fb37575fa1f1071f587efc |
|
19-Jan-2011 |
Sumit Bose <sbose@redhat.com> |
Add ipa_hbac_search_base config option |
ff76f3e78451b78d8acad95121273ae385726393 |
|
23-Sep-2010 |
Sumit Bose <sbose@redhat.com> |
Handle host objects like other objects |
056901f031d8df43ec4fc7e67bc43dd5d967de71 |
|
09-Jul-2010 |
eindenbom <eindenbom@gmail.com> |
Use new LDAP connection framework in IPA access backend. |
07a093af8274f7b051184ec7be8f0807e05eb68e |
|
02-Jun-2010 |
Sumit Bose <sbose@redhat.com> |
Remove service groups
Because the memberOf attribute is now set for the service objects we do
not need to fetch the service groups separately anymore. |
c5b4479301dbf1ac9dd82b6b41e436ec28d08c82 |
|
02-Jun-2010 |
Sumit Bose <sbose@redhat.com> |
Use new schema for HBAC service checks |
beaaf02fe968b216d0633c92592a1fd9daad30ec |
|
25-Mar-2010 |
Sumit Bose <sbose@redhat.com> |
Fix LDAP search paths for IPA HBAC
- use domain_to_basedn() to construct LDAP search paths for IPA HBAC
- move domain_to_basedn() to a separate file to simplify the build of
a test |
1c48b5a62f73234ed26bb20f0ab345ab61cda0ab |
|
18-Feb-2010 |
Stephen Gallagher <sgallagh@redhat.com> |
Rename server/ directory to src/
Also update BUILD.txt |