sssd.git/src/responder, branch f23

PAM: Only cache first-factor

2015-07-06T18:19:15+00:00

Reviewed-by: Sumit Bose

Minor code improvements

2015-07-06T18:19:12+00:00

pam_helpers.h had to be included after util.h.
Removed exara empty line.
Fixed code alignment

Reviewed-by: Jakub Hrozek

PAM: authenticate agains cache

2015-07-06T18:19:09+00:00

Enable authenticating users from cache even when SSSD is in online mode.

Introduce new option `cached_auth_timeout`.

Resolves:
https://fedorahosted.org/sssd/ticket/1807

Reviewed-by: Jakub Hrozek

sysdb: new attribute lastOnlineAuthWithCurrentToken

2015-07-06T18:19:02+00:00

Introduce new user attribute lastOnlineAuthWithCurrentToken.
This attribute behaves similarly to lastOnlineAuth but is set to NULL
after password is changed.

This attribute is needed for use-case when cached authentication is used, to
request online authentication after password is locally changed.

Resolves:
https://fedorahosted.org/sssd/ticket/1807

Reviewed-by: Jakub Hrozek

nss: Invalidate entry in initgr mmap cache

2015-07-03T13:16:59+00:00

If user is removed from sysdb cache then
it should be also removed from initgroups memory cache.

Resolves:
https://fedorahosted.org/sssd/ticket/2485

Reviewed-by: Michal Židek

mmap_cache: Invalidate entry in right memory cache

2015-07-03T13:16:52+00:00

If group was not found in nss_cmd_getgrnam_search
then we tied to invalidate entry in memory cache.
But function delete_entry_from_memory cache only invalidated
in passwd memory cache.

Reviewed-by: Michal Židek

nss: Store entries in responder to initgr mmap cache

2015-07-03T13:16:44+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2485

Reviewed-by: Michal Židek

IFP: add FindByCertificate method for User objects

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

ncache: add calls for certificate based searches

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

IFP: Fix warnings with enabled optimisation

2015-06-19T12:02:53+00:00

It seems that gcc 5.1 optimize enum in some ways and expects that
unctions ifp_cache_build_path and ifp_cache_build_base_dn
can return unitialized value due to missing default in switch.

src/responder/ifp/ifp_cache.c:118:13: warning: 'base_dn' may be used uninitialized in this function [-Wmaybe-uninitialized]
     ldb_ret = ldb_search(sysdb_ctx_get_ldb(domain->sysdb), tmp_ctx, &result,
             ^

src/responder/ifp/ifp_cache.c: scope_hint: In function 'ifp_cache_get_cached_objects'
src/responder/ifp/ifp_cache.c:135:18: warning: 'path' may be used uninitialized in this function [-Wmaybe-uninitialized]
         paths[i] = ifp_cache_build_path(paths, type, domain, result->msgs[i]);
                  ^

Reviewed-by: Jakub Hrozek