sssd.git/src/providers/ad, branch tests

AD: add debug messages for netlogon get info

2015-09-30T13:39:11+00:00

Reviewed-by: Petr Cech

AD: inicialize root_domain_attrs field

2015-09-30T07:48:33+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2805

Reviewed-by: Pavel Březina

AD: Set ignore_mark_offline=false when resolving AD root domain

2015-09-21T15:04:13+00:00

https://fedorahosted.org/sssd/ticket/2637

Avoid going offline in cases where SSSD is connected to a child domain
but the root domain is not accessible.

Reviewed-by: Pavel Březina

AD: Do not mark the whole back end as offline if subdomain lookup fails

2015-09-21T15:04:10+00:00

Required for:
https://fedorahosted.org/sssd/ticket/2637

Rather mark the domain as inactive. It will be marked as active later,
in the meantime the main domain can continue to work online and
subdomain requests will be answered from cache.

The lookup request itself just returns a special error code and lets the
caller handle the error code as appropriate (normally by disabling the
subdomain temporarily).

Reviewed-by: Pavel Březina

AD: Only ignore errors from SDAP lookups if there's another connection to fallback to

2015-09-21T15:04:04+00:00

Required for:
https://fedorahosted.org/sssd/ticket/2637

The AD lookup code honors the ignore_mark_offline flag in the sense that
if it's set, the sdap return code is not reported to the upper layer,
but EOK is returned as request status and the sdap return code is
returned separately.

This patch modifies the behaviour further to only apply if there is
another connection to fall back to.

Reviewed-by: Pavel Březina

UTIL: Convert domain->disabled into tri-state with domain states

2015-09-21T15:03:01+00:00

Required for:
https://fedorahosted.org/sssd/ticket/2637

This is a first step towards making it possible for domain to be around,
but not contacted by Data Provider.

Also explicitly create domains as active, previously we only relied on
talloc_zero marking dom->disabled as false.

Reviewed-by: Pavel Březina

GPO: use SDAP_SASL_AUTHID as samAccountName

2015-09-14T13:52:40+00:00

The samAccountName for AD hosts is the hosts NetBIOS name with a
trailing $. Since there is a size limit on NetBIOS names long DNS names
must be truncated to find a matching entry in the AD LDAP tree.

The NetBIOS name is already needed during kinit/SASL bind where the
SDAP_SASL_AUTHID config option is used. Since the GPO lookup code is
only reached after the SASL bind was successful we can safely assume
that the name is correct and use it for the GPO lookup.

Resolves https://fedorahosted.org/sssd/ticket/2692

Reviewed-by: Jakub Hrozek

GPO: fix memory leak

2015-09-07T16:39:57+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2777

Reviewed-by: Michal Židek

GPO: Use sss_unique_file and close fd on failure

2015-09-01T11:01:42+00:00

The GPO child didn't remove temporary file on failure and didn't close
the fd on failure (the latter was not much of a problem for a
short-lived child process).

Reviewed-by: Pavel Březina

AD: send less logs to syslog

2015-09-01T09:26:26+00:00

Create new callback that handles logging messages in cyrus sasl library.

Resolves:
https://fedorahosted.org/sssd/ticket/2561

Reviewed-by: Pavel Březina