sssd.git/src/confdb, branch f23

PAM: authenticate agains cache

2015-07-06T18:19:09+00:00

Enable authenticating users from cache even when SSSD is in online mode.

Introduce new option `cached_auth_timeout`.

Resolves:
https://fedorahosted.org/sssd/ticket/1807

Reviewed-by: Jakub Hrozek

SYSDB: Add a forest root attribute to sss_domain_info

2015-06-14T19:44:39+00:00

Instead of complex forest root search methods, establish forest root
during subdomain list update. The subdomain code can then just use the
forest_root pointer.

Reviewed-by: Sumit Bose

SYSDB: Store trust direction for subdomains

2015-06-14T19:44:39+00:00

We need to store the subdomain trust direction in order to recover the
structure after SSSD restart.

The trust direction is a plain uint32_t to avoid leaking the knowledge
about AD trust directions to sysdb while at the same time making it easy
to compare values between sysdb and LDAP and avoid translating the
values.

Reviewed-by: Sumit Bose

confdb: Add new option subdomain_inherit

2015-06-05T14:39:18+00:00

Adds a new option subdomain_inherit that would allow administrators to pick
and choose which option to pass to subdomains.

This option is required for:
    https://fedorahosted.org/sssd/ticket/2644
as a short-term fix.

The proper solution is described in:
    https://fedorahosted.org/sssd/ticket/2599

Reviewed-by: Pavel Reichl

Add cache_credentials_minimal_first_factor_length config option

2015-05-08T07:14:12+00:00

Reviewed-by: Lukáš Slebodník

Add missing new lines to debug messages

2015-03-17T13:40:19+00:00

Reviewed-by: Jakub Hrozek

Use FQDN if default domain was set

2015-03-11T09:30:09+00:00

https://fedorahosted.org/sssd/ticket/2569

Reviewed-by: Lukáš Slebodník

Log reason in debug message why ldb_modify failed

2015-03-11T09:04:30+00:00

Reviewed-by: Sumit Bose

PAM: new option pam_account_expired_message

2015-02-23T12:47:53+00:00

This option sets string to be printed when authenticating using SSH
keys and account is expired.

Resolves:
https://fedorahosted.org/sssd/ticket/2050

Reviewed-by: Sumit Bose

CONFDB: Typo in debug message

2015-01-05T15:37:39+00:00

Reviewed-by: Sumit Bose