sssd.git/src/providers, branch intg_test

HBAC: Better libhbac debugging

2015-10-01T19:37:30+00:00

Added support for logging via external log function.
Log provides information about rules evaluating (HBAC_DBG_INFO level)
and additionally can describe rules (HBAC_DBG_TRACE level).

Resolves:
https://fedorahosted.org/sssd/ticket/2703

Reviewed-by: Pavel Reichl 
Reviewed-by: Lukáš Slebodník 
Reviewed-by: Michal Židek

AD: add debug messages for netlogon get info

2015-09-30T13:39:11+00:00

Reviewed-by: Petr Cech

AD: inicialize root_domain_attrs field

2015-09-30T07:48:33+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2805

Reviewed-by: Pavel Březina

IPA: Retry fetching keytab if IPA user lookup fails

2015-09-23T21:08:50+00:00

Required for:
    https://fedorahosted.org/sssd/ticket/2639

Instead of calling ipa_get_ad_acct_send directly, call a new request
ipa_srv_ad_acct_send. The new request wraps ipa_get_ad_acct_send and
either tries to request a new keytab every time the lookup fails but the
domain is online.

be_mark_dom_offline() is called when the retry fails with the new code.

The retry tries to re-setup the trusted domain. With two-way setups, the
request is a no-op. With one-way trust setups, the request re-fetches
new keytab unconditionally.

Reviewed-by: Sumit Bose

FO: Also reset the server common data in addition to SRV

2015-09-23T21:08:50+00:00

In a server that is expanded from a SRV query was reset, only it's
'meta-server' status was set to neutral, but the server->common
structure still retained its not_working status.

This patch also resets the status of the common structure so that both
the SRV query and resolving the server are retried next time.

Reviewed-by: Sumit Bose

FO: Add an API to reset all servers in a single service

2015-09-23T21:08:50+00:00

Required for:
    https://fedorahosted.org/sssd/ticket/2639

Previously, we had a function that allowed the caller to reset the
status of all services in the global fail over context. This patch adds
a new function that allows the caller to reset a single service instead.

The main user would be IPA subdomain provider that might need to reset
the status of an AD trusted domain on demand.

Reviewed-by: Sumit Bose

IPA: Change ipa_server_trust_add_send request to be reusable from ID code

2015-09-23T21:08:50+00:00

Required for:
    https://fedorahosted.org/sssd/ticket/2639

Expose a request ipa_server_trusted_dom_setup_send that sets up a
trusted domain. The setup might include actions like retrieving a keytab
for one-way trusts.

Creating the AD ID context for the trused domain is now done in the
caller of this new request.

Reviewed-by: Sumit Bose

DYNDNS: Return right error code in case of failure

2015-09-23T13:32:01+00:00

The variable will be zero if getifaddrs succeeds
and therefore wrong error code will be returned
in case of insufficient memory (talloc_zero failed)

Reviewed-by: Pavel Reichl

DDNS: execute nsupdate for single update of PTR rec

2015-09-22T12:51:22+00:00

nsupdate fails definitely if any of update request fails when GSSAPI is used.

As tmp solution nsupdate is executed for each update.

Resolves:
https://fedorahosted.org/sssd/ticket/2783

Reviewed-by: Jakub Hrozek

IPA PROVIDER: Resolve nested netgroup membership

2015-09-22T12:43:26+00:00

Informations about usergroup membership are stored in memberOf
attribute. And informations about hostgroup membership are stored
in originalMemberOf.
This patch add appropriate memberOf attributes
for searching in.

Ticket: https://fedorahosted.org/sssd/ticket/2275

Reviewed-by: Sumit Bose