sssd.git/src/responder, branch mdbtest

autofs: fix 'Cannot allocate memory' with FQDNs

2015-04-30T06:24:57+00:00

https://fedorahosted.org/sssd/ticket/2643

Reviewed-by: Jakub Hrozek

nss: Use negcache for getbysid requests

2015-04-24T14:46:57+00:00

Reviewed-by: Lukáš Slebodník

Option filter_users had no effect for retrieving sudo rules

2015-04-14T12:46:59+00:00

Previously sssd_sudo always obtained sudo rules for user from LDAP even
when user was enlisted in filter_users.

Resolves https://fedorahosted.org/sssd/ticket/2625

Reviewed-by: Pavel Březina

NSS: Reset negcache after checking domains

2015-04-09T06:35:26+00:00

The NSS responder periodically re-checks subdomains. We need to reset
the negative cache each time the check finishes to allow the negative
cache to contain entries from different domains.

Reviewed-by: Lukáš Slebodník

responders: reset ncache after domains are discovered during startup

2015-04-09T06:35:23+00:00

After responders start, they add a lookup operation that discovers the
subdomains so that qualifying users works. After this operation is
finishes, we need to reset negcache to allow users to be added into the
newly discovered domains.

Reviewed-by: Lukáš Slebodník

ncache: Add sss_ncache_reset_repopulate_permanent

2015-04-09T06:35:20+00:00

This new function resets the negative cache and then re-adds the
permanent entries.

Reviewed-by: Lukáš Slebodník

ncache: Silence critical error from filter_users when default_domain_suffix is set

2015-04-09T06:35:16+00:00

When default_domain_suffix is used and filter_users is set (at least
root is always, by default), SSSD tried to add the negcache entry to the
default domain. But since the default domain is not known after start
up, adding the entries fail with a verbose error message.

This patch handles EAGAIN returned from the parsing function while
setting negcache entries gracefully and also makes the debug message in
parsing function more precise.

Reviewed-by: Lukáš Slebodník

ncache: Fix sss_ncache_reset_permanent

2015-04-09T06:35:10+00:00

There was an off-by-one error in sss_ncache_reset_permanent that
prevented the reset from working.

Reviewed-by: Lukáš Slebodník

SSH: Ignore the default_domain_suffix

2015-04-01T11:50:21+00:00

https://fedorahosted.org/sssd/ticket/2609

In a trust setup, hosts are normally only stored on the IPA server. The
default_domain_suffix option is only recommended for the IPA-AD trust
scenario as well. Therefore we should ignore this option in the SSH
provider.

Reviewed-by: Pavel Březina 
Reviewed-by: Jan Cholasta

PAC: Remove unused function

2015-03-31T08:00:56+00:00

The last usage of function dom_sid_in_domain was removed as a part of chages
in ticket "Enhance PAC responder for AD users"
    92af6f25864b5c389b57d0f659686801b45ca58c