sssd.git/src/responder/sudo, branch nonroot

RESPONDERS: Set default value for umask

2014-10-29T09:41:06+00:00

Resolves: https://fedorahosted.org/sssd/ticket/2468

Reviewed-by: Jakub Hrozek

SUDO: Run the sudo responder as the SSSD user

2014-10-22T13:44:51+00:00

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce

responders: Do not initialize pipe fd if already present

2014-10-22T13:44:39+00:00

Allow to skip initialization of pipe file descriptor
if the responder context already has one.

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce

SSSD: Add the options to specify a UID and GID to run as

2014-10-20T19:43:40+00:00

Adds new command line options --uid and --gid to all SSSD servers,
making it possible to switch to another user ID if needed.

So far all code still runs as root.

Reviewed-by: Pavel Reichl

sudo: support views

2014-10-20T14:25:17+00:00

Reviewed-by: Sumit Bose

SUDO: Use the override_space option

2014-08-13T13:10:40+00:00

https://fedorahosted.org/sssd/ticket/2397

With this path, a user whose name is "space user" would match a sudo
rule while using the override_default_space option. Please note that the
option is only a client-side override, so the sudoUser attribute must
contain the space in order to match the original name. In other words,
when substituting space ( ) for underscore (_), this attribute would match:
    sudoUser: space user
this would not:
    sudoUser: space_user

Reviewed-by: Pavel Březina 
Reviewed-by: Lukáš Slebodník

sudo: use dbus array for rules refresh

2014-07-24T11:48:03+00:00

D-Bus only supports 255 signatures which caused a segmentation fault
when sudo responder tried to refresh more rules at once.

Resolves:
https://fedorahosted.org/sssd/ticket/2387

Reviewed-by: Lukáš Slebodník

sudo: fetch sudoRunAs attribute

2014-07-15T14:45:05+00:00

This attribute was used in pre 1.7 versions of sudo and it is now
deprecated by sudoRunAsUser and sudoRunAsGroup. However, some users
still use this attribute so we need to support it to ensure backward
compatibility.

This patch makes sure that this attribute is downloaded if present and
provided to sudo. Sudo than decides how to handle it.

The new mapping option is not present in a man page since this
attribute is deprecated in sudo for a very long time.

Resolves:
https://fedorahosted.org/sssd/ticket/2212

Reviewed-by: Jakub Hrozek

IFP: Provide a SBUS method to reconnect to sysbus

2014-07-08T18:38:16+00:00

Introduces a new method implemented only by the IFP responder. When this
method is received, the responder attempts to reconnect to the system
bus, if not connected already.

Reviewed-by: Pavel Březina 
Reviewed-by: Pavel Reichl

sudo: return after tevent_req_error

2014-06-27T08:23:37+00:00

Don't call tevent_req_done after tevent_req_error (for the same request).

Reviewed-by: Sumit Bose