sssd.git/src/util, branch review-negcache

nss_check_name_of_well_known_sid() improve name splitting

2015-07-16T13:26:29+00:00

Currently in the default configuration
nss_check_name_of_well_known_sid() can only split fully-qualified names
in the user@domain.name style. DOM\user style names will cause an error
and terminate the whole request.

With this patch both styles can be handled by default, additionally if
the name could not be split nss_check_name_of_well_known_sid() returns
ENOENT which can be handled more gracefully by the caller.

Resolves https://fedorahosted.org/sssd/ticket/2717

Reviewed-by: Lukáš Slebodník

Use NSCD path in execl()

2015-07-15T19:57:30+00:00

man execl says:
    The first argument, by convention, should point to the filename
    associated with the file being executed.

We used just 'nscd' instead.

Reviewed-by: Lukáš Slebodník

UTIL: Add sss_filter_sanitize_ex

2015-07-15T15:32:26+00:00

Related:
    https://fedorahosted.org/sssd/ticket/2553

In order to support wildcard request, we need to introduce an optionally
relaxed version of sss_filter_sanitize that allows to select which
characters are exempt from sanitizing.

Reviewed-by: Pavel Březina

nss: Store entries in responder to initgr mmap cache

2015-07-03T13:16:44+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2485

Reviewed-by: Michal Židek

utils: add get_last_x_chars()

2015-06-19T16:48:13+00:00

Reviewed-by: Pavel Březina

certs: add PEM/DER conversion utilities

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina

IPA: Fetch keytab for 1way trusts

2015-06-14T19:47:20+00:00

Uses the ipa-getkeytab call to retrieve keytabs for one-way trust
relationships.

https://fedorahosted.org/sssd/ticket/2636

Reviewed-by: Sumit Bose

IPA: Include ipaNTTrustDirection in the attribute set for trusted domains

2015-06-14T19:47:11+00:00

Allows to distinguish the trust directions for trusted domains. For
domains where we don't know the direction in server mode, we assume
two-way trusts.

Member domains do not have the direction, but rather the forest root
direction is used.

Reviewed-by: Sumit Bose

UTIL/SYSDB: Move new_subdomain() to sysdb_subdomains.c and make it private

2015-06-14T19:44:39+00:00

In order to make updating the subdomain list a two-step process.
Therefore we need to make sure that update_subdomains() is the only
interface towards the SSSD that changes the subdomain list.

Move the new_subdomain() function to sysdb_subdomains.c and only make it
available through a private header so it's usable by unit tests.

Reviewed-by: Sumit Bose

SYSDB: Store trust direction for subdomains

2015-06-14T19:44:39+00:00

We need to store the subdomain trust direction in order to recover the
structure after SSSD restart.

The trust direction is a plain uint32_t to avoid leaking the knowledge
about AD trust directions to sysdb while at the same time making it easy
to compare values between sysdb and LDAP and avoid translating the
values.

Reviewed-by: Sumit Bose