sssd.git/src/confdb, branch nonroot

confdb: Make confdb_set_string accept const char pointer

2014-11-28T15:09:53+00:00

The last parameter (value) in the confdb_set_string
is not modified, so it makes sense to make it const
to avoid unnecessary warnings or casts.

Reviewed-by: Pavel Reichl

CONFDB: Detect&fix misconf opt refresh_expired_interval

2014-11-04T11:35:41+00:00

Related to:
https://fedorahosted.org/sssd/ticket/2102

Reviewed-by: Pavel Březina

SSSD: Load a user to run a service as from configuration

2014-10-22T13:44:13+00:00

Related:
    https://fedorahosted.org/sssd/ticket/2370

Adds a option, user to run as, that is specified in the [sssd] section. When
this option is specified, SSSD will run as this user and his private
group. When these are not specified, SSSD will run as the configure-time
user and group (usually root).

Currently all services and providers are started as root. There is a
temporary svc_supported_as_nonroot() function that returns true for a
service if that service runs and was tested as nonroot and false
otherwise. Currently this function always returns false, but will be
amended in future patches.

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce

confdb: add has_views and view_name to sss_domain_info

2014-10-20T14:14:10+00:00

To let the responders know which view is applied and to make view
handling more efficiently especially when no view is applied/available
two new member are added to the sss_domain_info struct.

view_name is the name of the view if available. has_views is only true
if the client has a specific view applied, i.e. it is false for the case
when there are no views at all (e.g. plain LDAP provider) or the client
has the FreeIPA default view. This allows the responders to easily
bypass any view related code.

Reviewed-by: Pavel Březina

PAM: new options pam_trusted_users & pam_public_domains

2014-09-29T16:27:07+00:00

pam_public_domains option is a list of numerical UIDs or user names
that are trusted.

pam_public_domains option is a list of domains accessible even for
untrusted users.

Based on:
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM

Reviewed-by: Lukáš Slebodník

SSS_CACHE: Allow sss_cache tool to flush SSH hosts cache

2014-09-05T09:40:39+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2358

Signed-off-by: Jan Cholasta 

Reviewed-by: Jan Cholasta 
Reviewed-by: Pavel Reichl

Make the space override responder-agnostic

2014-08-13T13:10:30+00:00

https://fedorahosted.org/sssd/ticket/2397

In order to make the override_space option usable by other responders,
we need to move the override_space option to the generic responder
structure.

Reviewed-by: Pavel Březina 
Reviewed-by: Lukáš Slebodník

Only replace space with the specified substitution

2014-08-13T13:10:22+00:00

https://fedorahosted.org/sssd/ticket/2397

- make sss_replace_whitespaces only replace space (' ') not any
  whitespace
- make sss_replace_whitespaces only replace a single char, not the whole
  string
- rename CONFDB_NSS_OVERRIDE_DEFAULT_WHITESPACE to
  CONFDB_NSS_OVERRIDE_DEFAULT_SPACE
- rename the override_default_whitespace option to override_space
- rename sss_replace_whitespaces() to sss_replace_space()
- rename sss_reverse_replace_whitespaces() to sss_reverse_replace_space()
- rename nctx->override_default_wsp_str to nctx->override_space
- make the return value of sss_replace_space non-const to avoid freeing
  the result without compilation warnings

Reviewed-by: Pavel Březina 
Reviewed-by: Lukáš Slebodník

Remove unused function confdb_set_bool

2014-07-29T12:52:17+00:00

Reviewed-by: Pavel Reichl

case_sensitivity = preserving

2014-07-29T12:52:06+00:00

If case_sensitivity is set to 'preserving', getXXnam
returns name attribute in the same format as
stored in LDAP.

Fixes:
https://fedorahosted.org/sssd/ticket/2367

Reviewed-by: Pavel Reichl