sssd.git/src/providers, branch simo_ccname

krb5: Replace type-specific ccache/principal check

2013-08-30T05:00:33+00:00

Instead of having duplicate functions that are type custom use a signle common
function that also performs access to the cache as the user owner, implicitly
validating correctness of ownership.

Resolves:
https://fedorahosted.org/sssd/ticket/2061

krb5: Use krb5_cc_destroy to remove old ccaches

2013-08-29T03:36:50+00:00

This completely replaces the per-ccache-type custom code to remove old cacches
and instead uses libkrb5 base doperations (krb5_cc_destroy) and operating as
the user owner.

Resolves:
https://fedorahosted.org/sssd/ticket/2061

krb5: Add helper to destroy ccache as user

2013-08-29T02:28:35+00:00

This function safely destroy a ccache given a cache name and user crdentials.
It becomes the user so no possible races can compromise the system, then
uses libkrb5 functions to properly destroy a ccache, independently of the
cache type.
Finally restores the original credentials after closing the ccache handlers.

Resolves:
https://fedorahosted.org/sssd/ticket/2061

krb5: Add calls to change and restore credentials

2013-08-29T02:17:12+00:00

In some cases we want to temporarily assume user credentials but allow the
process to regain back the original credentials (normally regaining uid 0).

Related:
https://fedorahosted.org/sssd/ticket/2061

IPA_HBAC: Explicitelly include header file time.h

2013-08-28T20:02:49+00:00

struct hbac_eval_req is defined in header file and it has attribute
request_time with type time_t, but header file "time.h" was not included.
It was not problem, because time.h was indirectly included by stdlib.h
(stdlib.h -> sys/types.h -> time.h) in implementation files,
but other platforms can have other dependencies among header files.

IPA: Add forgotten declaration

2013-08-28T17:22:39+00:00

A conflict between two patches was not resolved correctly

IPA: enable enumeration if parent domain enumerates in server mode

2013-08-28T16:08:29+00:00

https://fedorahosted.org/sssd/ticket/1963

SYSDB: Store enumerate flag for subdomain

2013-08-28T16:06:57+00:00

LDAP: Make sdap_id_setup_tasks reusable for subdomains

2013-08-28T16:06:57+00:00

Instead of always performing the setup for the main domain, the setup
can now be performed for subdomains as well.

LDAP: Make the cleanup task reusable for subdomains

2013-08-28T16:06:57+00:00

Instead of always performing the cleanup on the main domain, the task
now accepts a sdap_domain structure to perform the cleanup on. This
change will make the cleanup task reusable for subdomains.