sssd.git/src/providers/ipa/ipa_init.c, branch simo_ccname

LDAP: Make sdap_id_setup_tasks reusable for subdomains

2013-08-28T16:06:57+00:00

Instead of always performing the setup for the main domain, the setup
can now be performed for subdomains as well.

IPA: Enable AD sites when in server mode

2013-08-28T14:19:51+00:00

https://fedorahosted.org/sssd/ticket/1964

Currently the AD sites are enabled unconditionally

KRB5: Do not send PAC in server mode

2013-07-23T12:18:03+00:00

The krb5 child contacts the PAC responder for any user except for the
IPA native users if the PAC is configured. This works fine for the
general case but the ipa_server_mode is a special one. The PAC responder
is there, but since in the server mode we should be operating as AD
provider default, the PAC shouldn't be analyzed either in this case.

IPA: Initialize server mode ctx if server mode is on

2013-06-28T20:22:20+00:00

This patch introduces a new structure that holds information about a
subdomain and its ad_id_ctx. This structure will be used only in server
mode to make it possible to search subdomains with a particular
ad_id_ctx.

Subtask of:
https://fedorahosted.org/sssd/ticket/1962

Add ipa_idmap_init()

2013-06-28T18:20:59+00:00

Use the sdap_idmap context for the IPA provider as well.

https://fedorahosted.org/sssd/ticket/1961

krb5: do not send pac for IPA users from the local domain

2013-06-25T12:34:39+00:00

So far we didn't send the PAC of IPA users to the PAC responder during
password authentication because group memberships for IPA users can be
retrieved efficiently with LDAP calls. Recently patches added PAC
support for the AD provider as well and removed the restriction for the
IPA users. This patch restores the original behaviour by introducing a
new flag in struct krb5_ctx which is only set for the IPA provider.
Additionally a different flag is renamed to make it's purpose more
clear.

Fixes https://fedorahosted.org/sssd/ticket/1995

providers: refresh expired netgroups

2013-06-10T18:30:57+00:00

https://fedorahosted.org/sssd/ticket/1713

LDAP: sdap_id_ctx might contain several connections

2013-06-06T22:14:12+00:00

With some LDAP server implementations, one server might provide
different "views" of the identites on different ports. One example is
the Active Directory Global catalog. The provider would contact
different view depending on which operation it is performing and against
which SSSD domain.

At the same time, these views run on the same server, which means the same
server options, enumeration, cleanup or Kerberos service should be used.
So instead of using several different failover ports or several
instances of sdap_id_ctx, this patch introduces a new "struct
sdap_id_conn_ctx" that contains the connection cache to the particular
view and an instance of "struct sdap_options" that contains the URI.

No functional changes are present in this patch, currently all providers
use a single connection. Multiple connections will be used later in the
upcoming patches.

IPA: Always initialize ID mapping

2013-05-27T17:09:04+00:00

Because we now always want to store SIDs in the IPA provider, we also need
to always initialize the ID mapping context.

Remove unneeded parameter of setup_child and namespace it

2013-05-20T20:37:25+00:00

setup_child() was accepting a parameter it didn't use. Also the function
name was too generic, so I added a sdap prefix.