sssd.git/src/providers/ipa/ipa_common.h, branch subdomfo

IPA: Remove the ipa_hbac_treat_deny_as option

2015-03-24T20:03:41+00:00

https://fedorahosted.org/sssd/ticket/2603

Since deny rules are no longer supported on the server, the client
should no longer support them either. Remove the option.

Reviewed-by: Pavel Březina

AD/IPA: add krb5_confd_path configuration option

2014-11-25T12:28:39+00:00

With this new parameter the directory where Kerberos configuration
snippets are created can be specified.

Fixes https://fedorahosted.org/sssd/ticket/2473

Reviewed-by: Jakub Hrozek

Views: apply user SSH public key override

2014-11-05T14:26:36+00:00

With this patch the SSH public key override attribute is read from the
FreeIPA server and saved in the cache with the other override data.

Since it is possible to have multiple public SSH keys this override
value does not replace any other data but will be added to existing
values.

Fixes https://fedorahosted.org/sssd/ticket/2454

Reviewed-by: Jakub Hrozek

IPA: add view support and get view name

2014-10-16T15:55:56+00:00

Related to https://fedorahosted.org/sssd/ticket/2375

Reviewed-by: Pavel Březina

IPA: refactor idmap code and add test

2014-02-26T14:11:28+00:00

Reviewed-by: Jakub Hrozek

IPA: Enable AD sites when in server mode

2013-08-28T14:19:51+00:00

https://fedorahosted.org/sssd/ticket/1964

Currently the AD sites are enabled unconditionally

IPA: Look up AD users directly if IPA server mode is on

2013-06-28T20:22:20+00:00

https://fedorahosted.org/sssd/ticket/1962

If the ipa_server_mode is selected IPA subdomain user and group lookups
are not done with the help of the extdom plugin but directly against AD
using the AD ID code.

IPA: Initialize server mode ctx if server mode is on

2013-06-28T20:22:20+00:00

This patch introduces a new structure that holds information about a
subdomain and its ad_id_ctx. This structure will be used only in server
mode to make it possible to search subdomains with a particular
ad_id_ctx.

Subtask of:
https://fedorahosted.org/sssd/ticket/1962

IPA: Add a server mode option

2013-06-28T20:22:20+00:00

https://fedorahosted.org/sssd/ticket/1993

SSSD needs to know that it is running on an IPA server and should not
look up trusted users and groups with the help of the extdom plugin
but do the lookups on its own. For this a new boolean configuration
option, is introduced which defaults to false but is set to true during
ipa-server-install or during updates of the FreeIPA server if it is not
already set.

Add support for new ipaRangeType attribute

2013-06-28T18:20:59+00:00

Recent versions of FreeIPA support a range type attribute to allow
different type of ranges for sub/trusted-domains. If the attribute is
available it will be used, if not the right value is determined with the
help of the other idrange attributes.

Fixes https://fedorahosted.org/sssd/ticket/1961