sssd.git/src/db, branch f23

Minor code improvements

2015-07-06T18:19:12+00:00

pam_helpers.h had to be included after util.h.
Removed exara empty line.
Fixed code alignment

Reviewed-by: Jakub Hrozek

sysdb: new attribute lastOnlineAuthWithCurrentToken

2015-07-06T18:19:02+00:00

Introduce new user attribute lastOnlineAuthWithCurrentToken.
This attribute behaves similarly to lastOnlineAuth but is set to NULL
after password is changed.

This attribute is needed for use-case when cached authentication is used, to
request online authentication after password is locally changed.

Resolves:
https://fedorahosted.org/sssd/ticket/1807

Reviewed-by: Jakub Hrozek

views: Add is_default_view helper function

2015-07-02T11:37:38+00:00

Ticket:
https://fedorahosted.org/sssd/ticket/2641

Reviewed-by: Pavel Reichl

sysdb: add sysdb_search_user_by_cert() and sysdb_search_object_by_cert()

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

LDAP: add ldap_user_certificate option

2015-06-19T15:21:24+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

IFP: Implement org.freedesktop.sssd.infopipe.Cache[.Object]

2015-06-18T14:44:01+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2338

Example use:
 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users \
             org.freedesktop.sssd.infopipe.Users.FindByName \
             string:admin

   object path "/org/freedesktop/sssd/infopipe/Users/ipaldap/397400000"

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users \
             org.freedesktop.sssd.infopipe.Cache.List

   array [
   ]

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users/ipaldap/397400000 \
             org.freedesktop.sssd.infopipe.Cache.Object.Store

   boolean true

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users \
             org.freedesktop.sssd.infopipe.Cache.List

   array [
      object path "/org/freedesktop/sssd/infopipe/Users/ipaldap/397400000"
   ]

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users/ipaldap/397400000 \
             org.freedesktop.sssd.infopipe.Cache.Object.Remove

   boolean true

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users \
             org.freedesktop.sssd.infopipe.Cache.List

   array [
   ]

Reviewed-by: Jakub Hrozek

SYSDB: Add a forest root attribute to sss_domain_info

2015-06-14T19:44:39+00:00

Instead of complex forest root search methods, establish forest root
during subdomain list update. The subdomain code can then just use the
forest_root pointer.

Reviewed-by: Sumit Bose

SYSDB: Add realm to sysdb_master_domain_add_info

2015-06-14T19:44:39+00:00

Adding realm to both master domain and subdomain will make it easier to
set and select forest roots. Even master domains can be forest members,
it's preferable to avoid special-casing as much as possible.

Includes a unit test.

Reviewed-by: Sumit Bose

UTIL/SYSDB: Move new_subdomain() to sysdb_subdomains.c and make it private

2015-06-14T19:44:39+00:00

In order to make updating the subdomain list a two-step process.
Therefore we need to make sure that update_subdomains() is the only
interface towards the SSSD that changes the subdomain list.

Move the new_subdomain() function to sysdb_subdomains.c and only make it
available through a private header so it's usable by unit tests.

Reviewed-by: Sumit Bose

SYSDB: Store trust direction for subdomains

2015-06-14T19:44:39+00:00

We need to store the subdomain trust direction in order to recover the
structure after SSSD restart.

The trust direction is a plain uint32_t to avoid leaking the knowledge
about AD trust directions to sysdb while at the same time making it easy
to compare values between sysdb and LDAP and avoid translating the
values.

Reviewed-by: Sumit Bose