sssd.git/src/util, branch rhel7.0

LDAP: Ignore returned referrals if referral support is disabled

2014-10-14T09:04:41+00:00

Reviewed-by: Pavel Reichl 
(cherry picked from commit a2ea3f5d9ef9f17efbb61e942c2bc6cff7d1ebf2)

DOC: Fix names of arguments in doxygen comments

2014-02-26T22:30:11+00:00

Reviewed-by: Pavel Březina 
(cherry picked from commit 3b35ff47651e4893ce537a273466766b962362da)

UTIL: Sanitize whitespaces.

2014-02-26T09:42:21+00:00

Original patches submitted by: mpesari(Thanks!!)

It can cause problems if user will hit spaces before entering username.
(e.g in gdm). Spaces are ignored by LDAP; it's better to escape them.

Resolves:
https://fedorahosted.org/sssd/ticket/1955

Reviewed-by: Jakub Hrozek 
(cherry picked from commit 2b8208b45feb2aab64d560d3e12e01e7b6d00d39)

LDAP: Detect the presence of POSIX attributes

2014-02-12T15:14:19+00:00

When the schema is set to AD and ID mapping is not used, there is a one-time
check ran when searching for users to detect the presence of POSIX
attributes in LDAP. If this check fails, the search fails as if no entry
was found and returns a special error code.

The sdap_server_opts structure is filled every time a client connects to
a server so the posix check boolean is reset to false again on connecting
to the server.

It might be better to move the check to where the rootDSE is retrieved,
but the check depends on several features that are not known to the code
that retrieves the rootDSE (or the connection code for example) such as what
the attribute mappings are or the authentication method that should be used.

Reviewed-by: Sumit Bose 
Reviewed-by: Pavel Březina 
(cherry picked from commit e81deec535d11912b87954c81a1edd768c1386c9)

utils: handling NULL params in sss_parse_name

2014-02-12T10:04:42+00:00

Reviewed-by: Jakub Hrozek

UTIL: Inherit parent domain's default_shell

2014-01-15T22:03:53+00:00

Some override parameters were not inherited when creating subdomains.
Especially with AD trusts, this gave strange results.

LDAP: Add a new error code for malformed access control filter

2014-01-09T11:32:03+00:00

https://fedorahosted.org/sssd/ticket/2164

The patch adds a new error code and special cases the new code so that
access is denied and a nicer log message is shown.

Use lower-case name for case-insensitive searches

2013-12-19T19:26:07+00:00

The patch makes sure that a completely lower-cased version of a fully
qualified name is used for case insensitive searches. Currently there
are code paths where the domain name was used as configured and was not
lower-cased.

To make sure this patch does not break with old entries in the cache or
case sensitive domains a third template was added to the related filters
templates which is either filled with a completely lower-cased version or
with the old version. The other two template values are unchanged.

SSSD: Improved domain detection

2013-12-02T03:57:56+00:00

A bit more elegant way of detection of what domain the group member belongs to

Resolves:
https://fedorahosted.org/sssd/ticket/2132

monitor: Specific error message for missing sssd.conf

2013-12-02T03:57:24+00:00

Specific error message is logged for missing sssd.conf file. New sssd specific
error value is introduced for this case.

Resolves:
https://fedorahosted.org/sssd/ticket/2156