sssd.git/src/responder/sudo, branch pwrap

sudo: send original name and id with local views if possible

2015-10-14T11:07:45+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2833

Reviewed-by: Sumit Bose 
Reviewed-by: Jakub Hrozek

sudo: search with view even if user is found

2015-10-14T11:07:42+00:00

If an overriden name is provided and the user is already cache we fail
to refresh it since we won't search with VIEW flag. This patch fix
it.

Reviewed-by: Sumit Bose 
Reviewed-by: Jakub Hrozek

sudo: use "higher value wins" when ordering rules

2015-08-14T20:47:45+00:00

This commit changes the default ordering logic (lower value wins) to
a correct one that is used by native ldap support. It also adds a new
option sudo_inverse_order to switch to the original SSSD (incorrect)
behaviour if needed.

Resolves:
https://fedorahosted.org/sssd/ticket/2682

Reviewed-by: Jakub Hrozek

Option filter_users had no effect for retrieving sudo rules

2015-04-14T12:46:59+00:00

Previously sssd_sudo always obtained sudo rules for user from LDAP even
when user was enlisted in filter_users.

Resolves https://fedorahosted.org/sssd/ticket/2625

Reviewed-by: Pavel Březina

responders: reset ncache after domains are discovered during startup

2015-04-09T06:35:23+00:00

After responders start, they add a lookup operation that discovers the
subdomains so that qualifying users works. After this operation is
finishes, we need to reset negcache to allow users to be added into the
newly discovered domains.

Reviewed-by: Lukáš Slebodník

Add missing new lines to debug messages

2015-03-17T13:40:19+00:00

Reviewed-by: Jakub Hrozek

RESPONDERS: Set default value for umask

2014-10-29T09:41:06+00:00

Resolves: https://fedorahosted.org/sssd/ticket/2468

Reviewed-by: Jakub Hrozek

SUDO: Run the sudo responder as the SSSD user

2014-10-22T13:44:51+00:00

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce

responders: Do not initialize pipe fd if already present

2014-10-22T13:44:39+00:00

Allow to skip initialization of pipe file descriptor
if the responder context already has one.

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce

SSSD: Add the options to specify a UID and GID to run as

2014-10-20T19:43:40+00:00

Adds new command line options --uid and --gid to all SSSD servers,
making it possible to switch to another user ID if needed.

So far all code still runs as root.

Reviewed-by: Pavel Reichl