sssd.git/src/providers/ipa, branch nonroot

KRB5: Pass the sssd_be uid and gid to krb5_child

2014-11-28T17:48:23+00:00

views: allow view name change at startup

2014-11-25T18:38:54+00:00

Currently some manual steps are needed on a FreeIPA to switch from one
view to another. With this patch the IPA provider checks at startup if
the view name changed and does the needed steps automatically. Besides
saving the new view name this includes removing the old view data and
marking the user and group entries as invalid.

Reviewed-by: Jakub Hrozek

AD/IPA: add krb5_confd_path configuration option

2014-11-25T12:28:39+00:00

With this new parameter the directory where Kerberos configuration
snippets are created can be specified.

Fixes https://fedorahosted.org/sssd/ticket/2473

Reviewed-by: Jakub Hrozek

Hint about removing sysdb if initializing ID map fails

2014-11-24T20:19:06+00:00

https://fedorahosted.org/sssd/ticket/2477

Reviewed-by: Pavel Reichl

IPA: Handle IPA groups returned from extop plugin

2014-11-24T20:11:21+00:00

Reviewed-by: Sumit Bose

IPA: check overrrides for IPA users as well

2014-11-20T09:52:57+00:00

Currently overrides were only available for sub-domains, e.g. trusted AD
domains. With this patch overrides can be used for IPA users as well.

Related to https://fedorahosted.org/sssd/ticket/2481

Reviewed-by: Jakub Hrozek

IPA: make get_object_from_cache() public

2014-11-20T09:52:54+00:00

Related to https://fedorahosted.org/sssd/ticket/2481

Reviewed-by: Jakub Hrozek

ipa: add get_be_acct_req_for_uuid()

2014-11-20T09:52:51+00:00

This new call creates the needs data for a lookup by UUID which is
needed when trying to find the original object for an IPA override
object.

Related to https://fedorahosted.org/sssd/ticket/2481

Reviewed-by: Jakub Hrozek

ipa: add split_ipa_anchor()

2014-11-20T09:52:38+00:00

This call extracts the domain and the UUID part from an IPA override
anchor.

Related to https://fedorahosted.org/sssd/ticket/2481

Reviewed-by: Jakub Hrozek

Fix uuid defaults

2014-11-06T18:25:18+00:00

Recently the uuid attributes for user and groups were removed because
it was found that there are not used at all and that some of them where
causing issues (https://fedorahosted.org/sssd/ticket/2383).

The new views/overrides feature of FreeIPA uses the ipaUniqueID attribute
to relate overrides with the original IPA objects. The previous two
patches revert the removal of the uuid attributes from users and groups
with this patch set the default value of these attributes to
ipaUniqueID from the IPA provider, to objectGUID for the AD provider and
leaves them unset for the general LDAP case to avoid issues like the one
from ticket #2383.

Related to https://fedorahosted.org/sssd/ticket/2481

Reviewed-by: Lukáš Slebodník