sssd.git - sssd with jhrozek's patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	IPA: Look up AD users directly if IPA server mode is on	Jakub Hrozek	2013-06-28	1	-2/+2
\| \| \| \| \| \| \| \|	https://fedorahosted.org/sssd/ticket/1962 If the ipa_server_mode is selected IPA subdomain user and group lookups are not done with the help of the extdom plugin but directly against AD using the AD ID code.
*	AD ID lookups - choose GC or LDAP as appropriate	Jakub Hrozek	2013-06-07	1	-1/+262
\| \| \| \| \| \| \| \| \| \| \| \| \|	https://fedorahosted.org/sssd/ticket/1557 Some lookups should be performed from GC only -- for example trusted users are only present in the Global Catalog, while some lookups should be performed from LDAP only as not all objects or attributes are replicated to Global Catalog. This patch adds a generic failover mechanism for identity lookups in the AD provider that allows to choose the appropriate source and even fail over to the other source if available.
*	LDAP: Pass in a connection to ID functions	Jakub Hrozek	2013-06-07	1	-1/+1
\| \| \| \| \| \| \|	Instead of using the default connection from the sdap_id_ctx, allow the caller to specify which connection shall be used for this particular request. Again, no functional change is present in this patch, just another parameter is added.
*	Add be_req_get_be_ctx() helper.	Simo Sorce	2013-01-21	1	-5/+7
\| \| \| \|	In preparation for making be_req opaque
*	AD context was set to null due to type mismatch	Ondrej Kos	2012-08-23	1	-0/+11
\|
*	AD: Add AD identity provider	Stephen Gallagher	2012-07-06	1	-0/+37
	This new identity provider takes advantage of existing code for the LDAP provider, but provides sensible defaults for operating against an Active Directory 2008 R2 or later server.