Not all user groups need to be resolved if group deny list is empty.

Resolves:
https://fedorahosted.org/sssd/ticket/2519

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

Stop matching username with names in simple_allow_users after positive
match.

Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

Resolves:
https://fedorahosted.org/sssd/ticket/2519

Not existing user/group in simple_allow_users/simple_allow_groups should not
imply access denied.

Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

The function was named "find_subdomain" yet it could find both main
domain and subdomain.

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

The function was named "find_subdomain" yet it could find both main
domain and subdomain.

sed 's/find_subdomain_by_sid/find_domain_by_sid/' -i `find . -name "*.[ch]"`

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

Use a script to update DEBUG macro invocations to use it as a variadic
macro, supplying format string and its arguments directly, instead of
wrapping them in parens.

This script was used to update the code:

grep -rwl --include '*.[hc]' DEBUG . |
    while read f; do
        mv "$f"{,.orig}
        perl -e \
            'use strict;
             use File::Slurp;
             my $text=read_file(\*STDIN);
             $text=~s#(\bDEBUG\s*\([^(]+)\((.*?)\)\s*\)\s*;#$1$2);#gs;
             print $text;' < "$f.orig" > "$f"
        rm "$f.orig"
    done

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Reviewed-by: Stephen Gallagher <sgallagh@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>

To correctly decide if an object is a member of the main sssd domain, a flat name
is needed. However, the information may not be available when the module is
inited so it may be necessary to refresh this data later while processing a
request.

Resolves:
https://fedorahosted.org/sssd/ticket/2189

Use flat name to recognise users and groups belonging to main sssd domain.

Resolves:
https://fedorahosted.org/sssd/ticket/2189