sssd.git/src/providers, branch tests

AD: add debug messages for netlogon get info

2015-09-30T13:39:11+00:00

Reviewed-by: Petr Cech

AD: inicialize root_domain_attrs field

2015-09-30T07:48:33+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2805

Reviewed-by: Pavel Březina

IPA: Retry fetching keytab if IPA user lookup fails

2015-09-23T21:08:50+00:00

Required for:
    https://fedorahosted.org/sssd/ticket/2639

Instead of calling ipa_get_ad_acct_send directly, call a new request
ipa_srv_ad_acct_send. The new request wraps ipa_get_ad_acct_send and
either tries to request a new keytab every time the lookup fails but the
domain is online.

be_mark_dom_offline() is called when the retry fails with the new code.

The retry tries to re-setup the trusted domain. With two-way setups, the
request is a no-op. With one-way trust setups, the request re-fetches
new keytab unconditionally.

Reviewed-by: Sumit Bose

FO: Also reset the server common data in addition to SRV

2015-09-23T21:08:50+00:00

In a server that is expanded from a SRV query was reset, only it's
'meta-server' status was set to neutral, but the server->common
structure still retained its not_working status.

This patch also resets the status of the common structure so that both
the SRV query and resolving the server are retried next time.

Reviewed-by: Sumit Bose

FO: Add an API to reset all servers in a single service

2015-09-23T21:08:50+00:00

Required for:
    https://fedorahosted.org/sssd/ticket/2639

Previously, we had a function that allowed the caller to reset the
status of all services in the global fail over context. This patch adds
a new function that allows the caller to reset a single service instead.

The main user would be IPA subdomain provider that might need to reset
the status of an AD trusted domain on demand.

Reviewed-by: Sumit Bose

IPA: Change ipa_server_trust_add_send request to be reusable from ID code

2015-09-23T21:08:50+00:00

Required for:
    https://fedorahosted.org/sssd/ticket/2639

Expose a request ipa_server_trusted_dom_setup_send that sets up a
trusted domain. The setup might include actions like retrieving a keytab
for one-way trusts.

Creating the AD ID context for the trused domain is now done in the
caller of this new request.

Reviewed-by: Sumit Bose

DYNDNS: Return right error code in case of failure

2015-09-23T13:32:01+00:00

The variable will be zero if getifaddrs succeeds
and therefore wrong error code will be returned
in case of insufficient memory (talloc_zero failed)

Reviewed-by: Pavel Reichl

DDNS: execute nsupdate for single update of PTR rec

2015-09-22T12:51:22+00:00

nsupdate fails definitely if any of update request fails when GSSAPI is used.

As tmp solution nsupdate is executed for each update.

Resolves:
https://fedorahosted.org/sssd/ticket/2783

Reviewed-by: Jakub Hrozek

IPA PROVIDER: Resolve nested netgroup membership

2015-09-22T12:43:26+00:00

Informations about usergroup membership are stored in memberOf
attribute. And informations about hostgroup membership are stored
in originalMemberOf.
This patch add appropriate memberOf attributes
for searching in.

Ticket: https://fedorahosted.org/sssd/ticket/2275

Reviewed-by: Sumit Bose

LDAP: Filter out multiple entries when searching overlapping domains

2015-09-22T11:46:02+00:00

In case domain overlap, we might download multiple objects. To avoid
saving them all, we attempt to filter out the objects from foreign
domains.

We can only do this optimization for non-wildcard lookups.

Reviewed-by: Lukáš Slebodník