sssd.git/src, branch aramco

IPA: Save groups as non-expired with ignore_group_members

2015-08-18T16:31:57+00:00

Set ldb to nosync mode if SSS_CACHE_NO_SYNC env var is set

2015-08-18T15:16:39+00:00

SSH: Use sss_unique_file_ex to create the known hosts file

2015-08-17T13:22:15+00:00

Simplifies the code.

Reviewed-by: Pavel Březina

LDAP: Use sss_unique_filename in ldap_child

2015-08-17T13:22:12+00:00

Simplifies the code.

Reviewed-by: Pavel Březina

KRB5: Use sss_unique_file when creating kdcinfo files

2015-08-17T13:22:08+00:00

Reviewed-by: Pavel Březina

KRB5: Use sss_unique file in krb5_child

2015-08-17T13:22:00+00:00

In krb5_child, we intentionally don' set the owner of the temporary
file, because we're not renaming it to a 'stable' name, but rather
directly using it as the ccache.

Reviewed-by: Pavel Březina

LDAP: minor improvements in ldap id cleanup

2015-08-17T13:10:23+00:00

Reviewed-by: Pavel Březina

LDAP: sanitize group name when used in filter

2015-08-17T13:10:14+00:00

cleanup_groups() uses DN of group in filter for ldbsearch. But the name
might contain characters with special meaning for filtering
like - "*()\/"

Resolves:
https://fedorahosted.org/sssd/ticket/2744

Reviewed-by: Pavel Březina

pam: Incerease p11 child timeout

2015-08-17T13:10:03+00:00

Ticket:
https://fedorahosted.org/sssd/ticket/2746

It was timeouting often in CI machines.

Reviewed-by: Lukáš Slebodník

p11child: set restrictive umask and clear environment

2015-08-17T12:02:59+00:00

https://fedorahosted.org/sssd/ticket/2754

Before doing any calls, set a very restrictive umask and clear
environment variables to harden p11child execution.

Reviewed-by: Lukáš Slebodník