sssd.git/src/providers, branch pwrap

REFACTOR: umask(077) --> umask(SSS_DFL_X_UMASK)

2015-10-14T11:27:13+00:00

There are many calls of umask function with 077 argument. This patch
add new constant SSS_DFL_X_UMASK which stands fot 077. So all
occurences of umask(077) are replaced by constant SSS_DFL_X_UMASK.

Resolves:
https://fedorahosted.org/sssd/ticket/2424

Reviewed-by: Jakub Hrozek

LDAP: remove unused param. in sdap_fallback_local_user

2015-10-12T12:46:59+00:00

Remove unused sdap_options parameter.

Reviewed-by: Lukáš Slebodník

autofs: remove unused params in del_autofs_entries

2015-10-12T12:46:54+00:00

Remove unused sdap_options and map parameters.

Reviewed-by: Lukáš Slebodník

sudo: remove unused param. in ldap_get_sudo_options

2015-10-12T12:46:49+00:00

Remove unused talloc memory context.

Reviewed-by: Lukáš Slebodník

LDAP: Inform about small range size

2015-10-09T12:17:00+00:00

When a returned RID has a higher value than the ldap_idmap_range_size,
it means that the administrator did not plan appropriately for the size
of their network. We need to alert the admin at a severe notification
level that their configuration will fail on entries with a high RID and
point them at the explanation in the manual.

Reviewed-by: Lukáš Slebodník

HBAC: remove misleading comment about deny rules

2015-10-08T18:46:13+00:00

HBAC deny rules are no longer supported. This comment should have
been removed as part of 'Remove HBAC DENY rules from SSSD'

https://fedorahosted.org/sssd/ticket/912

Reviewed-by: Michal Židek

AD: Consolidate connection list construction on ad_common.c

2015-10-07T10:42:03+00:00

Reviewed-by: Sumit Bose

AD: Provide common connection list construction functions

2015-10-07T10:42:03+00:00

https://fedorahosted.org/sssd/ticket/2810

Provides a new AD common function ad_ldap_conn_list() that creates a
list of AD connection to use along with properties to avoid mistakes
when manually constructing these lists.

Reviewed-by: Sumit Bose

DYNDNS: improve nsupdate_msg_add_fwd()

2015-10-05T18:59:48+00:00

Update nsupdate_msg_add_fwd() to group commands by address family
processed IP address belongs to.

It's better to group removing old A addresses and adding new A
addresses in a single transaction. Same goes for AAAA addresses.

Separate transaction for A and AAAA addresses updates are important
because server might block updates for one of these families and thus
the update even for the non-blocked address family would unnecessarily
fail.

For more details please see:
https://fedorahosted.org/sssd/wiki/DesignDocs/DDNSMessagesUpdate

Resolves:
https://fedorahosted.org/sssd/ticket/2495

Reviewed-by: Jakub Hrozek

DYNDNS: use realm and server commands only as fallback

2015-10-05T18:59:44+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2495

Reviewed-by: Jakub Hrozek