sssd.git/src/config, branch f23

PAM: authenticate agains cache

2015-07-06T18:19:09+00:00

Enable authenticating users from cache even when SSSD is in online mode.

Introduce new option `cached_auth_timeout`.

Resolves:
https://fedorahosted.org/sssd/ticket/1807

Reviewed-by: Jakub Hrozek

LDAP: add ldap_user_certificate option

2015-06-19T15:21:24+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

adding ldap_user_auth_type where missing

2015-06-19T15:21:17+00:00

Reviewed-by: Pavel Březina

confdb: Add new option subdomain_inherit

2015-06-05T14:39:18+00:00

Adds a new option subdomain_inherit that would allow administrators to pick
and choose which option to pass to subdomains.

This option is required for:
    https://fedorahosted.org/sssd/ticket/2644
as a short-term fix.

The proper solution is described in:
    https://fedorahosted.org/sssd/ticket/2599

Reviewed-by: Pavel Reichl

krb5: new option krb5_map_user

2015-05-28T09:04:28+00:00

New option `krb5_map_user` providing mapping of ID provider names to
Kerberos principals.

Resolves:
https://fedorahosted.org/sssd/ticket/2509

Reviewed-by: Jakub Hrozek

SSSDConfigTest: Use unique temporary directory

2015-05-26T13:10:56+00:00

Test SSSDConfigTest is executed twice with make check
if python2 and python3 are available.
Tests are executed in parallel with new automake
and therefore it caused sometimes failures e.g.

ERROR: testModifyExistingConfig (__main__.SSSDConfigTestValid)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/tmp/sssd/src/config/SSSDConfigTest.py", line 215, in testModifyExistingConfig
    mode = os.stat(of)[ST_MODE]
FileNotFoundError: [Errno 2] No such file or directory: '/tmp/testModifyExistingConfig.conf'

Reviewed-by: Jakub Hrozek

Add cache_credentials_minimal_first_factor_length config option

2015-05-08T07:14:12+00:00

Reviewed-by: Lukáš Slebodník

IPA: Remove the ipa_hbac_treat_deny_as option

2015-03-24T20:03:41+00:00

https://fedorahosted.org/sssd/ticket/2603

Since deny rules are no longer supported on the server, the client
should no longer support them either. Remove the option.

Reviewed-by: Pavel Březina

TESTS: Run python tests with all supported python versions

2015-02-25T07:38:42+00:00

This patch add simple bash wrappers for python tests.
They are executed either with python2 or python3.

Reviewed-by: Stephen Gallagher

PAM: new option pam_account_expired_message

2015-02-23T12:47:53+00:00

This option sets string to be printed when authenticating using SSH
keys and account is expired.

Resolves:
https://fedorahosted.org/sssd/ticket/2050

Reviewed-by: Sumit Bose