sssd.git/src/providers/ldap, branch pwrap

LDAP: remove unused param. in sdap_fallback_local_user

2015-10-12T12:46:59+00:00

Remove unused sdap_options parameter.

Reviewed-by: Lukáš Slebodník

autofs: remove unused params in del_autofs_entries

2015-10-12T12:46:54+00:00

Remove unused sdap_options and map parameters.

Reviewed-by: Lukáš Slebodník

sudo: remove unused param. in ldap_get_sudo_options

2015-10-12T12:46:49+00:00

Remove unused talloc memory context.

Reviewed-by: Lukáš Slebodník

LDAP: Inform about small range size

2015-10-09T12:17:00+00:00

When a returned RID has a higher value than the ldap_idmap_range_size,
it means that the administrator did not plan appropriately for the size
of their network. We need to alert the admin at a severe notification
level that their configuration will fail on entries with a high RID and
point them at the explanation in the manual.

Reviewed-by: Lukáš Slebodník

DYNDNS: use realm and server commands only as fallback

2015-10-05T18:59:44+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2495

Reviewed-by: Jakub Hrozek

SDAP: fix minor memory leak

2015-10-02T10:50:37+00:00

Reviewed-by: Pavel Březina

SDAP: Relax POSIX check

2015-10-02T10:38:18+00:00

Relax the check on UID or GID just to check if at least one of them is
present but do not require them to be positive numbers.

Add requirement on objectclass attributes to be user or group to make
check more reliable.

Resolves:
https://fedorahosted.org/sssd/ticket/2800

DDNS: execute nsupdate for single update of PTR rec

2015-09-22T12:51:22+00:00

nsupdate fails definitely if any of update request fails when GSSAPI is used.

As tmp solution nsupdate is executed for each update.

Resolves:
https://fedorahosted.org/sssd/ticket/2783

Reviewed-by: Jakub Hrozek

LDAP: Filter out multiple entries when searching overlapping domains

2015-09-22T11:46:02+00:00

In case domain overlap, we might download multiple objects. To avoid
saving them all, we attempt to filter out the objects from foreign
domains.

We can only do this optimization for non-wildcard lookups.

Reviewed-by: Lukáš Slebodník

LDAP: Move sdap_create_search_base from ldap to sdap code

2015-09-22T11:46:00+00:00

The function shouldn't be placed in the LDAP tree, but in the SDAP tree
to make it usable from tests without linking to libraries that are
normally linked from LDAP provider (such as confdb)

Reviewed-by: Lukáš Slebodník