sssd.git/src/config, branch srvbackport

LDAP: Add option to disable paging control

2013-05-02T17:44:31+00:00

Fixes https://fedorahosted.org/sssd/ticket/967

Conflicts:

	src/config/SSSDConfig.py
	src/config/etc/sssd.api.d/sssd-ipa.conf
	src/config/etc/sssd.api.d/sssd-ldap.conf
	src/man/sssd-ldap.5.xml
	src/providers/ipa/ipa_common.c
	src/providers/ipa/ipa_common.h
	src/providers/ldap/ldap_common.c
	src/providers/ldap/sdap.h

Add ipa_hbac_support_srchost option to IPA provider

2012-08-21T10:12:35+00:00

don't fetch all host groups if this option is false
https://fedorahosted.org/sssd/ticket/1078

RESPONDERS: Make the fd_limit setting configurable

2012-06-22T19:37:42+00:00

This code will now attempt first to see if it has privilege to set
the value as specified, and if not it will fall back to the
previous behavior. So on systems with the CAP_SYS_RESOURCE
capability granted to SSSD, it will be able to ignore the
limits.conf hard limit.

https://fedorahosted.org/sssd/ticket/1197

Conflicts:
	src/config/SSSDConfig.py
	src/config/SSSDConfigTest.py
	src/config/etc/sssd.api.conf

Make the client idle timeout configurable

2012-06-18T18:39:07+00:00

Add missing options to sssd.api.conf

2011-09-20T14:46:23+00:00

Add option to specify the kerberos replay cache dir

2011-09-02T13:58:29+00:00

Adds a configure option to set the distribution default as well as
an sssd.conf option to override it.

https://fedorahosted.org/sssd/ticket/980

Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON

2011-08-26T20:54:12+00:00

https://fedorahosted.org/sssd/ticket/978

Add vetoed_shells option

2011-08-02T11:47:59+00:00

There may be users in LDAP that have a valid but unwelcome shell
set in their account. This adds a blacklist of shells that should
always be replaced by the fallback_shell.

Signed-off-by: Stephen Gallagher

Add ipa_hbac_treat_deny_as option

2011-08-01T16:18:33+00:00

By default, we will treat the presence of any DENY rule as denying
all users. This option will allow the admin to explicitly ignore
DENY rules during a transitional period.

Add ipa_hbac_refresh option

2011-08-01T16:18:33+00:00

This option describes the time between refreshes of the HBAC rules
on the IPA server.