summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap/ldap_id_netgroup.c
Commit message (Collapse)AuthorAgeFilesLines
* LDAP: return sdap search return code to IDJakub Hrozek2013-06-071-3/+12
| | | | | | | | By default, the LDAP searches delete the entry from cache if it wasn't found during a search. But if a search wants to try both Global Catalog and LDAP, for example, it might be beneficial to have an option to only delete the entry from cache after the last operation fails to prevent unnecessary memberof operations for example.
* LDAP: new SDAP domain structureJakub Hrozek2013-06-071-3/+6
| | | | | | | | | | | Previously an sdap_id_ctx was always tied to one domain with a single set of search bases. But with the introduction of Global Catalog lookups, primary domain and subdomains might have different search bases. This patch introduces a new structure sdap_domain that contains an sssd domain or subdomain and a set of search bases. With this patch, there is only one sdap_domain that describes the primary domain.
* LDAP: Pass in a connection to ID functionsJakub Hrozek2013-06-071-4/+7
| | | | | | | Instead of using the default connection from the sdap_id_ctx, allow the caller to specify which connection shall be used for this particular request. Again, no functional change is present in this patch, just another parameter is added.
* LDAP: sdap_id_ctx might contain several connectionsJakub Hrozek2013-06-071-1/+1
| | | | | | | | | | | | | | | | | | | With some LDAP server implementations, one server might provide different "views" of the identites on different ports. One example is the Active Directory Global catalog. The provider would contact different view depending on which operation it is performing and against which SSSD domain. At the same time, these views run on the same server, which means the same server options, enumeration, cleanup or Kerberos service should be used. So instead of using several different failover ports or several instances of sdap_id_ctx, this patch introduces a new "struct sdap_id_conn_ctx" that contains the connection cache to the particular view and an instance of "struct sdap_options" that contains the URI. No functional changes are present in this patch, currently all providers use a single connection. Multiple connections will be used later in the upcoming patches.
* Remove sysdb as a be context structure memberSimo Sorce2013-01-211-1/+1
| | | | The sysdb context is already available through the 'domain' structure.
* Add domain arg to sysdb_search/delete_netgroup()Simo Sorce2013-01-151-1/+1
|
* Add support for filtering atributesJan Zeleny2012-05-311-2/+2
| | | | | This patch adds support for filtering attributes when constructing attribute list from a map for LDAP query.
* LDAP: Add attr_count return value to build_attrs_from_map()Stephen Gallagher2012-05-101-1/+1
| | | | | | | This is necessary because in several places in the code, we are appending to the attrs returned from this value, and if we relied on the map size macro, we would be appending after the NULL terminator if one or more attributes were defined as NULL.
* Renamed some LDAP routinesJan Zeleny2011-11-231-23/+23
| | | | | These were renamed just ot make sure they are not mistook for IPA netgroup functions.
* LDAP: Support multiple netgroup search basesStephen Gallagher2011-11-021-0/+1
|
* sysdb refactoring: deleted domain variables in sysdb APIJan Zeleny2011-08-151-1/+1
| | | | | The patch also updates code using modified functions. Tests have also been adjusted.
* Add timeout parameter to sdap_get_generic_send()Sumit Bose2011-01-171-1/+4
|
* Do not throw a DP error when a netgroup is not foundStephen Gallagher2011-01-141-5/+1
| | | | https://fedorahosted.org/sssd/ticket/775
* Sanitize search filters in LDAP providerStephen Gallagher2010-11-151-1/+8
|
* Implement netgroup support for LDAP providerSumit Bose2010-10-131-0/+224