sssd.git/src/providers/ipa, branch sysdb

sysdb: Unify name format for groups and users

2016-01-13T10:28:45+00:00

This is WIP patch to unify format of
usernames and groupnames in sssd internals.

In current form it breaks just about everything.

The sysdb update function is just placeholder
and it's contents are irelevant.

Currently I am working on fqname attribute
removal because it seems to just add confusion.

If you decide to look into the code, please use
sunglasses or other other protective gear and play
some calm music in your backgroun to prevent
eye or brain injury.

ldap: remove originalMeberOf if there is no memberOf

2016-01-12T09:03:47+00:00

Since originalMemerberOf is not mapped directly to an original attribute
and is handled specially it is not automatically removed if there is no
memberOf in the original object anymore. This patch put
originalMemerberOf on the list of attribute which should be removed in
that case.

Resolves https://fedorahosted.org/sssd/ticket/2917

Reviewed-by: Jakub Hrozek

ipa_s2n_save_objects(): use configured user and group timeout

2016-01-06T04:20:34+00:00

Resolves https://fedorahosted.org/sssd/ticket/2899

Reviewed-by: Lukáš Slebodník

IPA: Mark globals in ipa_opts.h as extern

2015-12-14T12:29:43+00:00

To avoid collisions when we want to work with them elsewhere in the code.

Reviewed-by: Jakub Hrozek

IPA_PROVIDER: Explicit no handle of services

2015-12-11T14:15:52+00:00

Function get_object_from_cache() does not handle services.
This patch adds quick shortcut to avoid sending an LDAP query
to cache.

Resolves:
https://fedorahosted.org/sssd/ticket/2747

Reviewed-by: Jakub Hrozek

DP: Reduce code duplication in the callback handlers

2015-12-10T11:28:44+00:00

Instead of calling sbus_request_return_and_finish() directly with the
same checks copied over, add a be_sbus_reply() helper instead.

Reviewed-by: Pavel Březina

IPA: Use search timeout, not enum timeout for searching overrides

2015-12-09T13:12:14+00:00

Related:
    https://fedorahosted.org/sssd/ticket/2866

If the LDAP connection is still established when the client moves
offline, we rely on the search timeout to find out the client is
offline. The override search used the enum timeout defaults to 60 seconds.
That caused too long delays in going offline.

Reviewed-by: Sumit Bose

IPA: fix override with the same name

2015-11-20T13:51:44+00:00

If the user name of a AD user is overridden with the name itself in an
IPA override object SSSD adds this name twice to the alias list causing
an ldb error when trying to write the user object to the cache. As a
result the user is not available.

This patch makes sure that there are no duplicated alias names.

Resolves https://fedorahosted.org/sssd/ticket/2874

Reviewed-by: Jakub Hrozek

util: Update get_next_domain's interface

2015-10-23T08:32:23+00:00

Update get next domain to be able to
include disbled domains and change the
interface to accept flags instead of
multiple booleans.

Ticket:
https://fedorahosted.org/sssd/ticket/2673

Reviewed-by: Jakub Hrozek

HBAC: remove misleading comment about deny rules

2015-10-08T18:46:13+00:00

HBAC deny rules are no longer supported. This comment should have
been removed as part of 'Remove HBAC DENY rules from SSSD'

https://fedorahosted.org/sssd/ticket/912

Reviewed-by: Michal Židek