sssd.git/src/config, branch nonroot-libcap

SSSD: Load a user to run a service as from configuration

2014-10-07T17:51:11+00:00

sssd.api.conf: Declare case_sensitive as string

2014-10-01T15:23:43+00:00

Fixes:
https://fedorahosted.org/sssd/ticket/2452

Reviewed-by: Pavel Reichl

PAM: new options pam_trusted_users & pam_public_domains

2014-09-29T16:27:07+00:00

pam_public_domains option is a list of numerical UIDs or user names
that are trusted.

pam_public_domains option is a list of domains accessible even for
untrusted users.

Based on:
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM

Reviewed-by: Lukáš Slebodník

AD-GPO: config changes for gpo_map_* options

2014-09-08T15:39:53+00:00

Reviewed-by: Sumit Bose 
Reviewed-by: Lukáš Slebodník

SSS_CACHE: Allow sss_cache tool to flush SSH hosts cache

2014-09-05T09:40:39+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2358

Signed-off-by: Jan Cholasta 

Reviewed-by: Jan Cholasta 
Reviewed-by: Pavel Reichl

SDAP: new option - DN to ppolicy on LDAP

2014-08-27T12:25:05+00:00

To check value of pwdLockout attribute on LDAP server, DN of ppolicy
must be set.

Resolves:
https://fedorahosted.org/sssd/ticket/2364

Reviewed-by: Pavel Březina

Only replace space with the specified substitution

2014-08-13T13:10:22+00:00

https://fedorahosted.org/sssd/ticket/2397

- make sss_replace_whitespaces only replace space (' ') not any
  whitespace
- make sss_replace_whitespaces only replace a single char, not the whole
  string
- rename CONFDB_NSS_OVERRIDE_DEFAULT_WHITESPACE to
  CONFDB_NSS_OVERRIDE_DEFAULT_SPACE
- rename the override_default_whitespace option to override_space
- rename sss_replace_whitespaces() to sss_replace_space()
- rename sss_reverse_replace_whitespaces() to sss_reverse_replace_space()
- rename nctx->override_default_wsp_str to nctx->override_space
- make the return value of sss_replace_space non-const to avoid freeing
  the result without compilation warnings

Reviewed-by: Pavel Březina 
Reviewed-by: Lukáš Slebodník

AD-GPO: add ad_gpo_cache_timeout option

2014-07-31T16:59:07+00:00

Reviewed-by: Jakub Hrozek

NSS: Replace spaces with specified string in names.

2014-07-28T08:11:51+00:00

This patch add possibility to replace whitespace in user and group names with
a specified string. With string "-", sssd will return the same result as
winbind enabled option "winbind normalize names"

Resolves:
https://fedorahosted.org/sssd/ticket/1854

Reviewed-by: Pavel Reichl 
Reviewed-by: Michal Židek

LDAP: Remove unused option ldap_user_uuid

2014-07-25T13:26:13+00:00

There is problem with OpenLDAP server and dereferencing of attributes
that is not in the schema  of the server?

sh-4.2$ ldapsearch -x -LLL -h openldap.server.test -b 'dc=example,dc=com' \
                   -E 'deref=member:uid,dummy_attr' cn=ref_grp
Protocol error (2)
Additional information: Dereference control: attribute decoding error
sh-4.2$ echo $?
2

The attribute nsUniqueID is a 389-only, non-standard attribute.
It is an operational attribute that is not in the rfc2307bis nor inetOrgPerson
nor posixAccount schema. It was a default value of option ldap_user_uuid,
but it was not use anywhere.

Resolves:
https://fedorahosted.org/sssd/ticket/2383

Reviewed-by: Jakub Hrozek