sssd.git/src/config/SSSDConfig, branch nonroot

AD/IPA: add krb5_confd_path configuration option

2014-11-25T12:28:39+00:00

With this new parameter the directory where Kerberos configuration
snippets are created can be specified.

Fixes https://fedorahosted.org/sssd/ticket/2473

Reviewed-by: Jakub Hrozek

Revert "LDAP: Remove unused option ldap_group_uuid"

2014-11-06T18:25:16+00:00

This reverts commit b5242c146cc0ca96e2b898a74fb060efda15bc77.

Reviewed-by: Lukáš Slebodník

Revert "LDAP: Remove unused option ldap_user_uuid"

2014-11-06T18:25:09+00:00

This reverts commit dfb2960ab251f609466fa660449703835c97f99a.

Reviewed-by: Lukáš Slebodník

SSSD: Load a user to run a service as from configuration

2014-10-22T13:44:13+00:00

Related:
    https://fedorahosted.org/sssd/ticket/2370

Adds a option, user to run as, that is specified in the [sssd] section. When
this option is specified, SSSD will run as this user and his private
group. When these are not specified, SSSD will run as the configure-time
user and group (usually root).

Currently all services and providers are started as root. There is a
temporary svc_supported_as_nonroot() function that returns true for a
service if that service runs and was tested as nonroot and false
otherwise. Currently this function always returns false, but will be
amended in future patches.

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce

IPA: add view support and get view name

2014-10-16T15:55:56+00:00

Related to https://fedorahosted.org/sssd/ticket/2375

Reviewed-by: Pavel Březina

PAM: new options pam_trusted_users & pam_public_domains

2014-09-29T16:27:07+00:00

pam_public_domains option is a list of numerical UIDs or user names
that are trusted.

pam_public_domains option is a list of domains accessible even for
untrusted users.

Based on:
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM

Reviewed-by: Lukáš Slebodník

AD-GPO: config changes for gpo_map_* options

2014-09-08T15:39:53+00:00

Reviewed-by: Sumit Bose 
Reviewed-by: Lukáš Slebodník

SDAP: new option - DN to ppolicy on LDAP

2014-08-27T12:25:05+00:00

To check value of pwdLockout attribute on LDAP server, DN of ppolicy
must be set.

Resolves:
https://fedorahosted.org/sssd/ticket/2364

Reviewed-by: Pavel Březina

Only replace space with the specified substitution

2014-08-13T13:10:22+00:00

https://fedorahosted.org/sssd/ticket/2397

- make sss_replace_whitespaces only replace space (' ') not any
  whitespace
- make sss_replace_whitespaces only replace a single char, not the whole
  string
- rename CONFDB_NSS_OVERRIDE_DEFAULT_WHITESPACE to
  CONFDB_NSS_OVERRIDE_DEFAULT_SPACE
- rename the override_default_whitespace option to override_space
- rename sss_replace_whitespaces() to sss_replace_space()
- rename sss_reverse_replace_whitespaces() to sss_reverse_replace_space()
- rename nctx->override_default_wsp_str to nctx->override_space
- make the return value of sss_replace_space non-const to avoid freeing
  the result without compilation warnings

Reviewed-by: Pavel Březina 
Reviewed-by: Lukáš Slebodník

AD-GPO: add ad_gpo_cache_timeout option

2014-07-31T16:59:07+00:00

Reviewed-by: Jakub Hrozek