sssd.git/src/tools, branch 1.9.2-35

LDAP: Only convert direct parents' ghost attribute to member

2012-11-21T10:18:10+00:00

https://fedorahosted.org/sssd/ticket/1612

This patch changes the handling of ghost attributes when saving the
actual user entry. Instead of always linking all groups that contained
the ghost attribute with the new user entry, the original member
attributes are now saved in the group object and the user entry is only
linked with its direct parents.

As the member attribute is compared against the originalDN of the user,
if either the originalDN or the originalMember attributes are missing,
the user object is linked with all the groups as a fallback.

The original member attributes are only saved if the LDAP schema
supports nesting.

Display more information on DB version crash

2012-11-19T13:02:19+00:00

https://fedorahosted.org/sssd/ticket/1589

Added check for determining, whether database version is higher or
lower than expected. To distinguish it from other errors it uses
following retun values (further used for appropriate error message):
EMEDIUMTYPE for lower version than expected
EUCLEAN for higher version than expected

When SSSD or one of it's tools fails on DB version mismatch, new error
message is showed suggesting how to proceed.

sss_cache: Remove fastcache even if sssd is not running.

2012-11-06T20:24:18+00:00

https://fedorahosted.org/sssd/ticket/1584

sss_cache: Multiple domains not handled properly

2012-11-06T20:24:01+00:00

When working with multiple domains and no
matching objects for deletion were found in the first
domain, the other domains were not searched at all.

Also the ERROR message informing about object not found
(the one printed for each domain) was changed to
DEBUG message.

sss_seed: Improved error message when the domain does not exist.

2012-10-03T18:32:28+00:00

https://fedorahosted.org/sssd/ticket/1553

sss_seed: Passwords longer then PASS_MAX not allowed.

2012-10-03T18:25:09+00:00

sss_seed fails if password file specified with -p or
--password-file option contains password longer than
PASS_MAX.

Man pages inform about PASS_MAX limitation.

sss_seed: Make only first line of password file valid.

2012-10-03T18:25:09+00:00

When file is used to specify a password in sss_seed, then only
first line of this file is used.
Also empty passwords are treated as errors.

https://fedorahosted.org/sssd/ticket/1548

sss_seed: Show error message when interactive input fails.

2012-10-03T18:25:09+00:00

https://fedorahosted.org/sssd/ticket/1549

sss_seed: Option --debug did not work in sss_seed tool.

2012-10-03T18:25:09+00:00

debug_level was set before the parameters were parsed, so the
default debug_level value was always used. Also CHECK_ROOT
macro was used on bad place, so only root was able to
run sss_seed --help/-?.

SYSDB: Remove unnecessary domain parameter from several sysdb calls

2012-09-24T16:23:15+00:00

The domain can be read from the sysdb object. Removing the domain string
makes the API more self-contained.