sssd.git/src/config, branch nonroot

AD/IPA: add krb5_confd_path configuration option

2014-11-25T12:28:39+00:00

With this new parameter the directory where Kerberos configuration
snippets are created can be specified.

Fixes https://fedorahosted.org/sssd/ticket/2473

Reviewed-by: Jakub Hrozek

Revert "LDAP: Remove unused option ldap_group_uuid"

2014-11-06T18:25:16+00:00

This reverts commit b5242c146cc0ca96e2b898a74fb060efda15bc77.

Reviewed-by: Lukáš Slebodník

Revert "LDAP: Remove unused option ldap_user_uuid"

2014-11-06T18:25:09+00:00

This reverts commit dfb2960ab251f609466fa660449703835c97f99a.

Reviewed-by: Lukáš Slebodník

SSSD: Load a user to run a service as from configuration

2014-10-22T13:44:13+00:00

Related:
    https://fedorahosted.org/sssd/ticket/2370

Adds a option, user to run as, that is specified in the [sssd] section. When
this option is specified, SSSD will run as this user and his private
group. When these are not specified, SSSD will run as the configure-time
user and group (usually root).

Currently all services and providers are started as root. There is a
temporary svc_supported_as_nonroot() function that returns true for a
service if that service runs and was tested as nonroot and false
otherwise. Currently this function always returns false, but will be
amended in future patches.

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce

IPA: add view support and get view name

2014-10-16T15:55:56+00:00

Related to https://fedorahosted.org/sssd/ticket/2375

Reviewed-by: Pavel Březina

sssd.api.conf: Declare case_sensitive as string

2014-10-01T15:23:43+00:00

Fixes:
https://fedorahosted.org/sssd/ticket/2452

Reviewed-by: Pavel Reichl

PAM: new options pam_trusted_users & pam_public_domains

2014-09-29T16:27:07+00:00

pam_public_domains option is a list of numerical UIDs or user names
that are trusted.

pam_public_domains option is a list of domains accessible even for
untrusted users.

Based on:
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM

Reviewed-by: Lukáš Slebodník

AD-GPO: config changes for gpo_map_* options

2014-09-08T15:39:53+00:00

Reviewed-by: Sumit Bose 
Reviewed-by: Lukáš Slebodník

SSS_CACHE: Allow sss_cache tool to flush SSH hosts cache

2014-09-05T09:40:39+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2358

Signed-off-by: Jan Cholasta 

Reviewed-by: Jan Cholasta 
Reviewed-by: Pavel Reichl

SDAP: new option - DN to ppolicy on LDAP

2014-08-27T12:25:05+00:00

To check value of pwdLockout attribute on LDAP server, DN of ppolicy
must be set.

Resolves:
https://fedorahosted.org/sssd/ticket/2364

Reviewed-by: Pavel Březina