sssd.git/src/db, branch sid_index

SYSDB: Index the objectSIDString attribute

2015-06-25T15:33:47+00:00

IPA: allow initgroups by UUID for FreeIPA users

2015-05-06T08:51:36+00:00

If a FreeIPA user is searched with the help of an override name the UUID
from the override anchor is used to search the user. Currently the
initgroups request only allows searches by SID or name. With this patch
a UUID can be used as well.

Related to https://fedorahosted.org/sssd/ticket/2642

Reviewed-by: Jakub Hrozek 
(cherry picked from commit 0f9c28eb52d2b45c8a97f709308dc11377831b8c)

IPA: enhance ipa_initgr_get_overrides_send()

2015-05-06T03:58:23+00:00

This patch makes ipa_initgr_get_overrides_send() public and add support
to search overrides by UUID or by SID.

Related to https://fedorahosted.org/sssd/ticket/2633

Reviewed-by: Jakub Hrozek 
(cherry picked from commit 145578006684481434ced78461ab8d1c3570f478)

IPA: allow initgroups by SID for AD users

2015-04-29T09:40:34+00:00

If a user from a trusted AD domain is search with the help of an
override name the SID from the override anchor is used to search the
user in AD. Currently the initgroups request only allows searches by
name.  With this patch a SID can be used as well.

Resolves https://fedorahosted.org/sssd/ticket/2632

Reviewed-by: Jakub Hrozek 
(cherry picked from commit f70a1adbfc30b9acc302027439fb8157e0c6ea2a)

sysdb: Add cache_expire to the default sysdb_search_object_by_str_attr set

2015-04-24T15:55:15+00:00

Reviewed-by: Lukáš Slebodník 
(cherry picked from commit ce6f3b6b2925d2c3ec02a76c3a1b6fbe4c7b145e)

sudo: sanitize filter values

2015-04-13T16:00:21+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2613

Reviewed-by: Pavel Reichl 
(cherry picked from commit c526cd124515cc2d44a413dcbfd4a74ddb490150)

sdap: properly handle binary objectGuid attribute

2015-03-24T19:33:20+00:00

Although in the initial processing SSSD treats the binary value right at
some point it mainly assumes that it is a string. Depending on the value
this might end up with the correct binary value stored in the cache but
in most cases there will be only a broken entry in the cache.

This patch converts the binary value into a string representation which
is described in [MS-DTYP] and stores the result in the cache.

Resolves https://fedorahosted.org/sssd/ticket/2588

Reviewed-by: Jakub Hrozek

Log reason in debug message why ldb_modify failed

2015-03-11T09:07:51+00:00

Reviewed-by: Sumit Bose 
(cherry picked from commit 04d138472cc086fb7961f0d378852b09961b1a33)

be_refresh: support groups

2015-03-08T21:35:25+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2346

Reviewed-by: Jakub Hrozek 
(cherry picked from commit 61c8d13e55ebafc28da1b0b5ad9ae578d687e288)

be_refresh: support users

2015-03-08T21:35:25+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2346

Reviewed-by: Jakub Hrozek 
(cherry picked from commit e77d6366ff9e49dbbb607f1709f1ae4190b99489)