sssd.git/src/responder/nss, branch nonroot

NSS: Fix warning enumerated type mixed with another type

2014-11-10T09:31:23+00:00

src/responder/nss/nsssrv_cmd.c:688: mixed_enum_type: enumerated type mixed with
another type

"enum sss_dp_acct_type" was mixed with type "int". ANSI C is not very
strict in this.

Reviewed-by: Michal Židek

Add ssh pubkey to origbyname request

2014-11-05T14:26:47+00:00

Since the IPA clients expects that the extdom plugin delivers the
default view data for a given user this patch adds the public SSH key to
the list of returned attributes of the getorigbyname request so that it
can be send back to the clients.

Reviewed-by: Jakub Hrozek

sysdb_add_overrides_to_object: add new parameter and multi-value support

2014-11-05T14:26:32+00:00

With the new parameter an attribute list other than the default one can
be used.

Override attributes with multiple values (e.g. SSH public keys) are now
supported as well.

Reviewed-by: Jakub Hrozek

nss: return user_attributes in origbyname request

2014-11-05T14:21:01+00:00

To allow IPA clients to offer special attributes of AD users form
trusted domain the extdom plugin on the IPA server must send them to the
clients. The extdom plugin already uses sss_nss_getorigbyname() to get
attributes like the SID and the user principal name. This patch adds the
attributes given by the NSS/IFP user_attributes option to the list of
attributes returned by sss_nss_getorigbyname().

Fixes https://fedorahosted.org/sssd/ticket/2464

Reviewed-by: Jakub Hrozek

nss: parse user_attributes option

2014-11-05T14:20:51+00:00

Reviewed-by: Jakub Hrozek

NSS: disable midpoint refresh for netgroups

2014-11-04T11:35:53+00:00

Disable midpoint refresh for netgroups if periodical refresh of expired
netgroups is enabled (refresh_expired_interval)

Resolves:
https://fedorahosted.org/sssd/ticket/2102

Reviewed-by: Pavel Březina

nss: preserve service name in getsrv call

2014-10-29T09:43:56+00:00

About case_sensitive=preserving and services.

The name of the service can be preserved in
result of 'getent service'. However we
should still lowercase the protocol and
service aliases because they serve as keys
in some queries to sysdb. The lowercasing is done
by the provider already. If we did not do that,
we would lose case insesnsitivity.

With this patch the responder preserves the
case of service name and protocol, to match
the case that is stored in the sysdb (however
the protocol is already lowercased by provider,
so it was done only for consistent use of the
case_sensitive=preserve option in the responders
and only the case of name is the same as in
ldap).

Fixes:
https://fedorahosted.org/sssd/ticket/2460

Reviewed-by: Jakub Hrozek

RESPONDERS: Set default value for umask

2014-10-29T09:41:06+00:00

Resolves: https://fedorahosted.org/sssd/ticket/2468

Reviewed-by: Jakub Hrozek

nss: group enumeration fix

2014-10-27T18:07:44+00:00

The view/override patches introduced and issue with group enumeration
where all groups are returned with the same name. This patch should fix
it.

Fixes: https://fedorahosted.org/sssd/ticket/2475

Reviewed-by: Lukáš Slebodník

NSS: Possibility to use any shells in 'allowed_shells'

2014-10-22T14:40:20+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2219

Signed-off-by: Pavel Reichl 

Reviewed-by: Jakub Hrozek 
Reviewed-by: Pavel Reichl