sssd.git, branch sid_index

SYSDB: Index the objectSIDString attribute

2015-06-25T15:33:47+00:00

SDAP: Remove user from cache for missing user in LDAP

2015-06-22T08:55:08+00:00

Function sysdb_get_real_name overrode reurned code LDAP
and thus user was not removed from cache after removing it from LDAP.
This patch also do not try to set initgroups flag if user
does not exist. It reduce some error message.

Resolves:
https://fedorahosted.org/sssd/ticket/2681

Reviewed-by: Michal Židek 
(cherry picked from commit 9fc96a4a2b07b92585b02dba161ab1eb2dbdad98)

Updating version for the 1.12.6 release

2015-06-12T10:56:17+00:00

Updating translations for the 1.12.5 release

2015-06-12T09:02:30+00:00

subdomains: Inherit cleanup period and tokengroup settings from parent domain

2015-06-08T11:00:33+00:00

Allows the administrator to extend the functionality of
ldap_purge_cache_timeout, ldap_user_principal and ldap_use_tokengroups to
the subdomains.

This is a less intrusive way of achieving:
    https://fedorahosted.org/sssd/ticket/2627

Reviewed-by: Pavel Reichl 
(cherry picked from commit 9b162bf39ef75629f54ffa1d0bd5f9c13119b650)

UTIL: Inherit ignore_group_members

2015-06-08T10:55:29+00:00

Resolves:
    https://fedorahosted.org/sssd/ticket/2644

Allows the administrators to extend ignore_group_members to subdomains
as well by setting:
    subdomain_inherit = ignore_group_members
in the domain section.

Reviewed-by: Pavel Reichl 
(cherry picked from commit 01c049ceef55c7bbfca1e47cecb2a0a2cf0a5d44)

SDAP: Add sdap_copy_map_entry

2015-06-08T10:55:29+00:00

Reviewed-by: Pavel Reichl 
(cherry picked from commit 12089241f6a6eabf4f0c95669e5fc2bb3b503c06)

DP: Add a function to inherit DP options, if set

2015-06-08T10:55:29+00:00

Related to:
    https://fedorahosted.org/sssd/ticket/2644

Adds a utility function that checks if a DP option is present in
the subdomain_inherit list. If it is, then the option is set from source
to destination dp_option array.

Reviewed-by: Pavel Reichl 
(cherry picked from commit b3d110fbc424a03674a6e50e489a7cbab9702f0b)

confdb: Add new option subdomain_inherit

2015-06-08T10:55:29+00:00

Adds a new option subdomain_inherit that would allow administrators to pick
and choose which option to pass to subdomains.

This option is required for:
    https://fedorahosted.org/sssd/ticket/2644
as a short-term fix.

The proper solution is described in:
    https://fedorahosted.org/sssd/ticket/2599

Reviewed-by: Pavel Reichl 
(cherry picked from commit 1711cbfd2e36d44af1ae50e3a2beeec3a1f0b5e8)

ldap: use proper sysdb name in groups_by_user_done()

2015-06-01T13:50:17+00:00

In a recent change set_initgroups_expire_attribute() was added to
groups_by_user_done() to make sure that the initgroups timeout is only
added to the user object until all groups added to the cache.

This change (and the original code in groups_by_user_done() as well)
didn't took sub-domain users into account where the name in sysdb might
different form the original request and the domain is not the configured
domain. This patch tries to ensure that the right name and domain are
used.

https://fedorahosted.org/sssd/ticket/2663

Reviewed-by: Lukáš Slebodník 
(cherry picked from commit d0b7e5fcfca7d0db9e3d19be7b51f34d03d3d720)