sssd.git/src/responder/pam, branch sysdb

sysdb: Unify name format for groups and users

2016-01-13T10:28:45+00:00

This is WIP patch to unify format of
usernames and groupnames in sssd internals.

In current form it breaks just about everything.

The sysdb update function is just placeholder
and it's contents are irelevant.

Currently I am working on fqname attribute
removal because it seems to just add confusion.

If you decide to look into the code, please use
sunglasses or other other protective gear and play
some calm music in your backgroun to prevent
eye or brain injury.

p11: enable ocsp checks

2015-11-26T15:39:49+00:00

This patch enables the Online Certificate Status Protocol in NSS and
adds an option to disable it if needed. To make further tuning of
certificate verification more easy it is not an option on its own but an
option to the new certificate_verification configuration option.

Resolves https://fedorahosted.org/sssd/ticket/2812

Reviewed-by: Jakub Hrozek

pam-srv-tests: Add UT for cached 'online' auth.

2015-11-12T08:38:47+00:00

Extend PAM responder unit test to check 'online' cached authentication.

Resolves:
https://fedorahosted.org/sssd/ticket/2697

Reviewed-by: Lukáš Slebodník

util: Update get_next_domain's interface

2015-10-23T08:32:23+00:00

Update get next domain to be able to
include disbled domains and change the
interface to accept flags instead of
multiple booleans.

Ticket:
https://fedorahosted.org/sssd/ticket/2673

Reviewed-by: Jakub Hrozek

PAM: remove unused parameter cdb

2015-10-20T07:39:42+00:00

Reviewed-by: Lukáš Slebodník

REFACTOR: SCKT_RSP_UMASK constant in responder code

2015-10-14T11:27:16+00:00

This patch adds new SCKT_RSP_UMASK constant which stands for 0111. And
it replaces all occurances in responder code.

Resolves:
https://fedorahosted.org/sssd/ticket/2424

Reviewed-by: Jakub Hrozek

REFACTOR: DFL_RSP_UMASK constant in responder code

2015-10-14T11:27:10+00:00

There is DFL_RSP_UMASK constant for very secure umask in responder
code. This patch replaces occurances of value 0177 with this constant.

Resolves:
https://fedorahosted.org/sssd/ticket/2424

Reviewed-by: Jakub Hrozek

PAM: only allow missing user name for certificate authentication

2015-10-02T10:09:55+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2811

Reviewed-by: Lukáš Slebodník

PAM: Make p11_child timeout configurable

2015-09-23T21:08:50+00:00

Ticket:
https://fedorahosted.org/sssd/ticket/2773

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Pavel Reichl

pam: Incerease p11 child timeout

2015-08-17T13:10:03+00:00

Ticket:
https://fedorahosted.org/sssd/ticket/2746

It was timeouting often in CI machines.

Reviewed-by: Lukáš Slebodník