sssd.git/src/providers/ipa/ipa_common.h, branch simo_ccname

IPA: Enable AD sites when in server mode

2013-08-28T14:19:51+00:00

https://fedorahosted.org/sssd/ticket/1964

Currently the AD sites are enabled unconditionally

IPA: Look up AD users directly if IPA server mode is on

2013-06-28T20:22:20+00:00

https://fedorahosted.org/sssd/ticket/1962

If the ipa_server_mode is selected IPA subdomain user and group lookups
are not done with the help of the extdom plugin but directly against AD
using the AD ID code.

IPA: Initialize server mode ctx if server mode is on

2013-06-28T20:22:20+00:00

This patch introduces a new structure that holds information about a
subdomain and its ad_id_ctx. This structure will be used only in server
mode to make it possible to search subdomains with a particular
ad_id_ctx.

Subtask of:
https://fedorahosted.org/sssd/ticket/1962

IPA: Add a server mode option

2013-06-28T20:22:20+00:00

https://fedorahosted.org/sssd/ticket/1993

SSSD needs to know that it is running on an IPA server and should not
look up trusted users and groups with the help of the extdom plugin
but do the lookups on its own. For this a new boolean configuration
option, is introduced which defaults to false but is set to true during
ipa-server-install or during updates of the FreeIPA server if it is not
already set.

Add support for new ipaRangeType attribute

2013-06-28T18:20:59+00:00

Recent versions of FreeIPA support a range type attribute to allow
different type of ranges for sub/trusted-domains. If the attribute is
available it will be used, if not the right value is determined with the
help of the other idrange attributes.

Fixes https://fedorahosted.org/sssd/ticket/1961

Add ipa_idmap_init()

2013-06-28T18:20:59+00:00

Use the sdap_idmap context for the IPA provider as well.

https://fedorahosted.org/sssd/ticket/1961

IPA: Do not download or store the member attribute of host groups

2013-06-24T14:54:05+00:00

https://fedorahosted.org/sssd/ticket/1806

The IPA provider attempted to store the original value of member
attribute to the cache. That caused the memberof plugin to process the
values which was really CPU intensive.

Move domain_to_basedn outside IPA subtree

2013-06-06T22:14:13+00:00

The utility function will be reused to guess search base from the base
DN of AD trusted domains.

Convert IPA-specific options to be back-end agnostic

2013-05-03T18:22:37+00:00

This patch introduces new options for dynamic DNS updates that are not
specific to any back end. The current ipa dyndns options are still
usable, just with a deprecation warning.

Refactor dynamic DNS updates

2013-05-03T18:22:29+00:00

Provides two new layers instead of the previous IPA specific layer:
 1) dp_dyndns.c -- a very generic dyndns layer on the DP level. Its
 purpose it to make it possible for any back end to use dynamic DNS
 updates.
 2) sdap_dyndns.c -- a wrapper around dp_dyndns.c that utilizes some
 LDAP-specific features like autodetecting the address from the LDAP
 connection.

Also converts the dyndns code to new specific error codes.