sssd.git/src/config/SSSDConfigTest.py, branch sid_index

confdb: Add new option subdomain_inherit

2015-06-08T10:55:29+00:00

Adds a new option subdomain_inherit that would allow administrators to pick
and choose which option to pass to subdomains.

This option is required for:
    https://fedorahosted.org/sssd/ticket/2644
as a short-term fix.

The proper solution is described in:
    https://fedorahosted.org/sssd/ticket/2599

Reviewed-by: Pavel Reichl 
(cherry picked from commit 1711cbfd2e36d44af1ae50e3a2beeec3a1f0b5e8)

krb5: new option krb5_map_user

2015-05-28T09:24:21+00:00

New option `krb5_map_user` providing mapping of ID provider names to
Kerberos principals.

Resolves:
https://fedorahosted.org/sssd/ticket/2509

Reviewed-by: Jakub Hrozek

Remove strict requirements of python2

2015-02-13T17:36:50+00:00

* fix hashbangs
* remove strict requirements of python2 in build system

Resolves:
https://fedorahosted.org/sssd/ticket/2017

Reviewed-by: Petr Viktorin 
(cherry picked from commit e8058322725ba050014777ee2484f7e833ab1e3a)

SSSDConfig: Port missing parts to python3

2015-02-13T17:36:50+00:00

* fix incompatible imports
* fix translation.[u]?gettext
* fix dict method has_key
* fix octal literals PEP 3127
* long is not defined in python3

Resolves:
https://fedorahosted.org/sssd/ticket/2017

Reviewed-by: Petr Viktorin 
(cherry picked from commit a71004c112cd5d61d3a9e37a4cfc5760dc9a1cec)

Python3 support in SSSD

2015-02-13T17:36:50+00:00

https://fedorahosted.org/sssd/ticket/2017
(cherry picked from commit 341a00311680a440d7f979f06c34c70d86c9367a)

SSSD: Load a user to run a service as from configuration

2014-10-22T13:44:13+00:00

Related:
    https://fedorahosted.org/sssd/ticket/2370

Adds a option, user to run as, that is specified in the [sssd] section. When
this option is specified, SSSD will run as this user and his private
group. When these are not specified, SSSD will run as the configure-time
user and group (usually root).

Currently all services and providers are started as root. There is a
temporary svc_supported_as_nonroot() function that returns true for a
service if that service runs and was tested as nonroot and false
otherwise. Currently this function always returns false, but will be
amended in future patches.

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce

SSS_CACHE: Allow sss_cache tool to flush SSH hosts cache

2014-09-05T09:40:39+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2358

Signed-off-by: Jan Cholasta 

Reviewed-by: Jan Cholasta 
Reviewed-by: Pavel Reichl

Use python2 in shebang for python scripts.

2014-06-18T12:48:43+00:00

https://fedorahosted.org/sssd/ticket/2356

The python scripts are not tested with python3 and /usr/bin/python can be
symbolic link to python3 on some distributions.

Reviewed-by: Sumit Bose

NSS: Add option to expand homedir template format

2014-06-02T17:07:57+00:00

LDAP server can contain template for home directory instead of plain string.
This patch adds new expand option "%H", which will be replaced with value
from configuration option homedir_substring (from sssd.conf)

Resolves:
https://fedorahosted.org/sssd/ticket/1853

IFP: use a list of allowed_uids for authentication

2014-05-13T19:46:57+00:00

Similar to the PAC responder, the InfoPipe uses a list of UIDs that are
allowed to communicate with the IFP responder.

Reviewed-by: Pavel Březina 
Reviewed-by: Stef Walter