sssd.git/src/db, branch review-negcache

Update few debug messages

2015-07-17T08:58:52+00:00

It reduces a noise caused by canonicalization of non-existing user.

Resolves:
https://fedorahosted.org/sssd/ticket/2678

Reviewed-by: Pavel Reichl

SYSDB: Add functions to look up multiple entries including name and custom filter

2015-07-15T15:32:16+00:00

Related:
    https://fedorahosted.org/sssd/ticket/2553

Adds new sysdb function:
    - sysdb_enumpwent_filter
    - sysdb_enumpwent_filter_with_views
    - sysdb_enumgrent_filter
    - sysdb_enumgrent_filter_with_views

These are similar to enumeration functions, but optionally allow to
specify a filter to be applied on user/group names. Also an additional
custom filter can be applied.

Reviewed-by: Pavel Březina

Minor code improvements

2015-07-06T18:19:12+00:00

pam_helpers.h had to be included after util.h.
Removed exara empty line.
Fixed code alignment

Reviewed-by: Jakub Hrozek

sysdb: new attribute lastOnlineAuthWithCurrentToken

2015-07-06T18:19:02+00:00

Introduce new user attribute lastOnlineAuthWithCurrentToken.
This attribute behaves similarly to lastOnlineAuth but is set to NULL
after password is changed.

This attribute is needed for use-case when cached authentication is used, to
request online authentication after password is locally changed.

Resolves:
https://fedorahosted.org/sssd/ticket/1807

Reviewed-by: Jakub Hrozek

views: Add is_default_view helper function

2015-07-02T11:37:38+00:00

Ticket:
https://fedorahosted.org/sssd/ticket/2641

Reviewed-by: Pavel Reichl

sysdb: add sysdb_search_user_by_cert() and sysdb_search_object_by_cert()

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

LDAP: add ldap_user_certificate option

2015-06-19T15:21:24+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

IFP: Implement org.freedesktop.sssd.infopipe.Cache[.Object]

2015-06-18T14:44:01+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2338

Example use:
 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users \
             org.freedesktop.sssd.infopipe.Users.FindByName \
             string:admin

   object path "/org/freedesktop/sssd/infopipe/Users/ipaldap/397400000"

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users \
             org.freedesktop.sssd.infopipe.Cache.List

   array [
   ]

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users/ipaldap/397400000 \
             org.freedesktop.sssd.infopipe.Cache.Object.Store

   boolean true

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users \
             org.freedesktop.sssd.infopipe.Cache.List

   array [
      object path "/org/freedesktop/sssd/infopipe/Users/ipaldap/397400000"
   ]

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users/ipaldap/397400000 \
             org.freedesktop.sssd.infopipe.Cache.Object.Remove

   boolean true

 $ dbus-send --print-reply --system \
             --dest=org.freedesktop.sssd.infopipe \
             /org/freedesktop/sssd/infopipe/Users \
             org.freedesktop.sssd.infopipe.Cache.List

   array [
   ]

Reviewed-by: Jakub Hrozek

SYSDB: Add a forest root attribute to sss_domain_info

2015-06-14T19:44:39+00:00

Instead of complex forest root search methods, establish forest root
during subdomain list update. The subdomain code can then just use the
forest_root pointer.

Reviewed-by: Sumit Bose

SYSDB: Add realm to sysdb_master_domain_add_info

2015-06-14T19:44:39+00:00

Adding realm to both master domain and subdomain will make it easier to
set and select forest roots. Even master domains can be forest members,
it's preferable to avoid special-casing as much as possible.

Includes a unit test.

Reviewed-by: Sumit Bose