nss: add SSS_NSS_GETORIGBYNAME request

This patch adds a new request to the nss responder which follows the
same flow as a SSS_NSSGETSIDBYNAME request but returns more data than
just the SID. The data is returned as pairs of \0-terminated strings
where the first string is the sysdb attribute name and the second the
corresponding value.

The main use case is on the FreeIPA server to make additional user and
group data available to the extdom plugin which then send this data to
SSSD running on FreeIPA clients.

Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

1 files changed, 7 insertions, 0 deletions

diff --git a/src/sss_client/sss_cli.h b/src/sss_client/sss_cli.h
index edb520c8e..2d909311c 100644
--- a/src/sss_client/sss_cli.h
+++ b/src/sss_client/sss_cli.h
@@ -244,6 +244,13 @@ SSS_NSS_GETIDBYSID   = 0x0114, /**< Takes the zero terminated string
                                     another unsigned 32bit integer value
                                     indicating the type (unknown, user, group,
                                     both) of the object. */
+SSS_NSS_GETORIGBYNAME = 0x0115, /**< Takes a zero terminated fully qualified
+                                     name and returns a list of zero
+                                     terminated strings with key-value pairs
+                                     where the first string is the key and
+                                     second the value. Hence the list should
+                                     have an even number of strings, if not
+                                     the whole list is invalid. */
 };
 
 /**