sssd.git/src/util, branch f23

UTIL: Provide a common interface to safely create temporary files

2015-09-07T16:21:55+00:00

Reviewed-by: Pavel Březina

UTIL: Lower debug level in perform_checks()

2015-09-07T16:20:21+00:00

Failures in perform_checks() don't have to be fatal, therefore the debug
messages shouldn't be either.

Reviewed-by: Alexander Bokovoy

nss: Store entries in responder to initgr mmap cache

2015-07-03T13:16:44+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2485

Reviewed-by: Michal Židek

utils: add get_last_x_chars()

2015-06-19T16:48:13+00:00

Reviewed-by: Pavel Březina

certs: add PEM/DER conversion utilities

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

IPA: Fetch keytab for 1way trusts

2015-06-14T19:47:20+00:00

Uses the ipa-getkeytab call to retrieve keytabs for one-way trust
relationships.

https://fedorahosted.org/sssd/ticket/2636

Reviewed-by: Sumit Bose

IPA: Include ipaNTTrustDirection in the attribute set for trusted domains

2015-06-14T19:47:11+00:00

Allows to distinguish the trust directions for trusted domains. For
domains where we don't know the direction in server mode, we assume
two-way trusts.

Member domains do not have the direction, but rather the forest root
direction is used.

Reviewed-by: Sumit Bose

UTIL/SYSDB: Move new_subdomain() to sysdb_subdomains.c and make it private

2015-06-14T19:44:39+00:00

In order to make updating the subdomain list a two-step process.
Therefore we need to make sure that update_subdomains() is the only
interface towards the SSSD that changes the subdomain list.

Move the new_subdomain() function to sysdb_subdomains.c and only make it
available through a private header so it's usable by unit tests.

Reviewed-by: Sumit Bose

SYSDB: Store trust direction for subdomains

2015-06-14T19:44:39+00:00

We need to store the subdomain trust direction in order to recover the
structure after SSSD restart.

The trust direction is a plain uint32_t to avoid leaking the knowledge
about AD trust directions to sysdb while at the same time making it easy
to compare values between sysdb and LDAP and avoid translating the
values.

Reviewed-by: Sumit Bose

IPA: Don't override homedir with subdomain_homedir

2015-06-14T19:23:39+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2583

Reviewed-by: Michal Židek