sssd.git/src/db, branch subdomfo

UTIL: Convert domain->disabled into tri-state with domain states

2015-09-01T12:06:29+00:00

This is a first step towards making it possible for domain to be around,
but not contacted by Data Provider.

Also explicitly create domains as enabled, previously we only relied on
talloc_zero marking dom->disabled as false.

SYSDB: Index the objectSIDString attribute

2015-08-19T16:00:58+00:00

Reviewed-by: Michal Židek

SYSDB: prepare for LOCAL view

2015-07-27T20:48:19+00:00

Objects doesn't have to have overrideDN specified when using LOCAL view.
Since the view is not stored on the server we do not want to contact
LDAP therefore we special case LOCAL view saying that it is OK that
this attribute is missing.

Preparation for:
https://fedorahosted.org/sssd/ticket/2584

Reviewed-by: Jakub Hrozek

Update few debug messages

2015-07-17T08:58:52+00:00

It reduces a noise caused by canonicalization of non-existing user.

Resolves:
https://fedorahosted.org/sssd/ticket/2678

Reviewed-by: Pavel Reichl

SYSDB: Add functions to look up multiple entries including name and custom filter

2015-07-15T15:32:16+00:00

Related:
    https://fedorahosted.org/sssd/ticket/2553

Adds new sysdb function:
    - sysdb_enumpwent_filter
    - sysdb_enumpwent_filter_with_views
    - sysdb_enumgrent_filter
    - sysdb_enumgrent_filter_with_views

These are similar to enumeration functions, but optionally allow to
specify a filter to be applied on user/group names. Also an additional
custom filter can be applied.

Reviewed-by: Pavel Březina

Minor code improvements

2015-07-06T18:19:12+00:00

pam_helpers.h had to be included after util.h.
Removed exara empty line.
Fixed code alignment

Reviewed-by: Jakub Hrozek

sysdb: new attribute lastOnlineAuthWithCurrentToken

2015-07-06T18:19:02+00:00

Introduce new user attribute lastOnlineAuthWithCurrentToken.
This attribute behaves similarly to lastOnlineAuth but is set to NULL
after password is changed.

This attribute is needed for use-case when cached authentication is used, to
request online authentication after password is locally changed.

Resolves:
https://fedorahosted.org/sssd/ticket/1807

Reviewed-by: Jakub Hrozek

views: Add is_default_view helper function

2015-07-02T11:37:38+00:00

Ticket:
https://fedorahosted.org/sssd/ticket/2641

Reviewed-by: Pavel Reichl

sysdb: add sysdb_search_user_by_cert() and sysdb_search_object_by_cert()

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

LDAP: add ldap_user_certificate option

2015-06-19T15:21:24+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina